Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: MNe/xHdwtr7I0dWnbE9Ukxz1eXjo8urbbS+rv4xCwxg=
Subject key identifier: FF:40:47:6D:72:F7:E1:41:01:C0:40:2F:02:AD:88:47:C3:BD:47:DD
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 019D273B02031A10559A3A5B1FDE1F97B396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 1525
Signing time: Wed 25 Mar 2026 23:01:11 +0000
Manifest this update: Wed 25 Mar 2026 23:01:11 +0000
Manifest next update: Thu 26 Mar 2026 23:01:11 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: aW2Wx7TMqZINp1AYCIeGhm58ppmsNqI6YBGfkaOl8GM=)
2: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (hash: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:02:03:1a:10:55:9a:3a:5b:1f:de:1f:97:b3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: Mar 25 23:01:11 2026 GMT
Not After : Mar 26 23:01:11 2026 GMT
Subject: CN=ff40476d72f7e14101c0402f02ad8847c3bd47dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:12:0d:2a:ac:40:fc:2f:41:88:e9:70:67:
fa:cd:26:7f:f4:79:10:53:f3:c2:18:85:9d:7c:99:
2c:02:2e:7b:a1:da:56:dc:5b:bf:7e:e8:6c:74:a3:
f8:b1:d7:7c:7f:62:97:cd:06:8c:0d:ef:fe:94:5a:
c1:c9:30:f0:bf:a0:77:79:30:28:68:42:73:bf:f0:
05:60:db:51:63:d7:15:cc:eb:1a:0f:05:36:89:bb:
4b:c3:e3:36:ea:1f:a8:50:af:03:67:25:a2:75:0f:
7a:6c:55:e5:b3:6a:33:96:6d:cd:83:f0:2e:76:9f:
a0:2d:d7:ab:52:15:0a:ce:49:d7:92:4a:1c:f3:33:
5a:ea:f6:b1:d4:88:ad:8c:40:3f:07:6c:43:57:ea:
6a:d8:52:18:b8:27:18:bc:b9:eb:75:22:75:20:9f:
c6:8a:90:7f:66:82:9d:02:9f:c1:91:87:77:21:c2:
46:9d:46:67:53:0c:27:e2:a5:bf:cf:08:c7:6d:23:
24:a2:d8:1a:0c:7e:4d:7a:80:1f:07:47:90:e5:7c:
80:33:4a:c5:47:97:61:0d:da:06:56:44:8e:69:f5:
97:1f:b6:c8:e8:08:20:a8:27:14:07:0a:27:81:9c:
a4:1e:f8:ef:0d:fe:b9:e0:65:1a:e4:f4:52:e4:16:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:47:6D:72:F7:E1:41:01:C0:40:2F:02:AD:88:47:C3:BD:47:DD
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e7:bb:5a:5e:ee:00:f6:a4:7b:14:e1:7a:44:2f:d1:89:53:
cd:70:58:12:47:1c:7c:bb:21:47:4f:24:42:8b:b3:b5:85:4b:
60:5b:bf:55:63:b1:e2:70:e3:a5:1e:63:bf:66:da:81:93:fe:
26:4e:49:53:d0:55:d4:29:31:be:5b:96:5b:7f:35:33:26:4d:
bf:f0:11:b7:5f:42:5f:8f:1a:c3:77:d0:24:3e:b8:64:b3:d3:
8f:b6:8d:3b:bc:2a:14:66:af:dd:92:7d:d7:f4:21:b0:b1:f5:
6a:ee:12:c5:15:c9:8b:08:91:67:6c:68:72:fc:57:53:90:26:
0a:2d:7f:1c:84:a7:69:4d:60:e9:18:75:5f:37:34:4b:ce:bf:
85:16:b0:2a:d8:a6:ac:6c:af:e4:7e:fb:f7:62:7e:f6:78:af:
3e:70:b5:14:38:c9:b9:39:b0:76:b0:4d:83:75:5c:d0:68:80:
c7:3b:d2:8d:c8:76:c8:cb:49:bd:40:8d:67:96:87:64:3d:ed:
21:4c:a3:a5:53:89:cd:c2:76:c1:8c:8d:7c:f3:4b:9b:74:e2:
4d:1b:56:17:97:20:57:a8:7d:4c:0a:05:ce:61:fa:e9:28:0b:
14:2f:f6:03:63:e6:a1:99:fe:c2:96:f4:5f:db:56:07:bb:42:
72:bf:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:54 2026 by rpki-client