Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft (raw, json)
Hash identifier: YNnpmFY+wGFoqTzCZdBUxZT4wohfPb9D+daJXhUmC/s=
Subject key identifier: 6B:5F:99:B5:87:63:A3:FE:71:27:8C:3C:20:17:C3:06:FC:21:92:11
Authority key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Certificate issuer: /CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Certificate serial: 019D25F12AFA6248104F243ABA7CA8888DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
Manifest number: 0E77
Signing time: Wed 25 Mar 2026 17:00:55 +0000
Manifest this update: Wed 25 Mar 2026 17:00:55 +0000
Manifest next update: Thu 26 Mar 2026 17:00:55 +0000
Files and hashes: 1: H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl (hash: 8iV8fExt8u3i4qEOfPClzREshtvKA4FRP5TI0nfyttw=)
2: NJax3QvlUxuz0S34cv9iYVlYSQU.roa (hash: u51xEsV9ElXZprx9W5HKiMp5RG9k+7g4oH4KGNb9sDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2a:fa:62:48:10:4f:24:3a:ba:7c:a8:88:8d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Validity
Not Before: Mar 25 17:00:55 2026 GMT
Not After : Mar 26 17:00:55 2026 GMT
Subject: CN=6b5f99b58763a3fe71278c3c2017c306fc219211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:cc:c9:53:e3:28:32:48:b6:56:c6:a6:d3:
e8:1d:40:40:9a:56:e0:44:43:c9:9c:87:08:c3:45:
e9:42:9e:f8:b3:18:87:a2:38:02:7d:1d:bd:4c:66:
9f:d6:f0:10:73:5b:e3:a6:c9:5d:3c:ac:f0:d3:78:
c0:e8:cd:3c:b6:a4:21:63:b5:13:36:11:71:b8:7e:
f0:85:c1:d2:15:37:b1:99:4e:2c:ba:25:b2:69:c1:
82:18:b4:23:05:54:e8:2d:9f:40:f1:7a:98:b8:27:
00:5c:da:64:26:ef:9a:0f:4b:7f:49:a3:42:45:85:
95:ec:e2:97:73:ce:d4:95:27:93:1a:65:63:70:e5:
a9:ee:2f:59:d9:6c:bf:b0:c7:19:29:8d:42:b1:35:
86:44:c6:73:78:85:fb:9c:3c:81:61:8a:4f:0d:d9:
0e:28:57:73:19:0b:43:99:3b:10:d9:e2:ff:96:ef:
b7:c9:3c:6f:00:91:5b:ad:7f:21:9c:97:80:54:e2:
da:0f:12:e2:86:58:7d:4a:2c:4a:ae:30:f9:f0:69:
4c:32:99:42:86:56:36:9a:7c:b1:a6:be:2a:b9:c5:
a1:0d:90:73:c8:77:72:4c:f0:5d:21:df:b0:39:01:
e5:29:d4:c5:4f:df:50:9c:17:3a:f0:0f:30:65:54:
51:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:99:B5:87:63:A3:FE:71:27:8C:3C:20:17:C3:06:FC:21:92:11
X509v3 Authority Key Identifier:
keyid:1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d1:bc:25:ef:37:cf:24:7d:2e:54:30:64:e4:88:46:60:aa:
18:08:c4:21:31:8b:e2:a4:bb:c0:6d:5f:c8:c1:fb:af:2d:a2:
51:94:2b:35:70:b3:ca:33:02:72:85:8d:4c:63:09:70:ed:e1:
19:01:87:8d:89:6c:a1:46:c6:e5:8c:5f:09:9b:b8:9d:1d:a0:
37:ea:f6:b8:12:db:ff:b4:55:13:a3:9b:4f:6e:8e:98:1f:1e:
6a:21:6c:e7:5b:ec:b6:ed:d2:58:05:0c:34:24:ee:ca:e5:6b:
c0:5d:c6:1f:65:69:b3:29:a1:ce:d2:7b:34:76:08:5e:ee:52:
72:84:67:c9:00:97:44:49:19:6e:15:f7:0a:95:14:74:fb:9d:
d5:db:e2:ba:81:71:5b:99:53:b6:6b:d7:29:d9:3d:83:b0:e0:
e2:07:be:c5:d8:eb:3d:82:a6:b2:ba:49:78:bd:28:c6:a3:15:
6f:16:f6:01:20:e8:d2:15:1e:6f:31:fc:14:dc:4e:d2:8b:c6:
76:1f:6f:93:eb:f3:01:d4:49:a7:a0:68:98:04:87:31:52:f6:
b6:3d:26:1b:59:01:99:a8:4b:ba:6b:b6:ef:22:d8:a0:4d:84:
7f:ff:7f:a8:02:76:5f:a3:86:18:31:8f:bd:64:3d:96:7f:05:
e4:9d:76:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:04 2026 by rpki-client