Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
File: H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft (raw, json)
Hash identifier: VzaJa8xl2jRr9qlK5ZRI6qyDk7iBEsiJ/wgCVwe/7pg=
Subject key identifier: 42:D7:D6:C8:62:59:E8:E4:63:15:8C:E4:6C:80:3B:EE:B2:A1:D4:3C
Authority key identifier: 1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
Certificate issuer: /CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Certificate serial: 019D2771CAB7D7FAA7DA5DBB28E677C1E581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
Manifest number: 0281
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl (hash: CPpOWRPNiei8ZEXUSi6Rl4WS3hFr7NqiR4DxYmTas6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ca:b7:d7:fa:a7:da:5d:bb:28:e6:77:c1:e5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=42d7d6c86259e8e463158ce46c803beeb2a1d43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:92:ba:e7:c9:fb:02:92:ff:68:9c:02:93:
68:66:ff:49:db:90:7b:d4:5b:5d:b1:69:9f:4b:7b:
8e:9a:c5:44:66:46:ec:0d:04:74:ea:ad:45:5c:39:
45:03:8a:2c:3f:76:40:a3:26:1b:ea:f5:8b:7c:7e:
b2:ce:62:48:60:2f:2e:08:c5:b8:ab:12:67:c3:90:
b8:3a:56:fc:e3:7a:2e:67:bd:55:f8:80:fd:80:d5:
1c:aa:e4:61:ec:86:c2:6d:fb:45:7a:fe:29:63:e5:
9e:85:63:33:41:31:df:cf:16:48:63:9f:26:98:fb:
89:60:da:ef:fb:91:50:e1:a1:72:b3:19:d9:a9:8a:
37:bd:f9:b3:31:1a:a3:67:91:16:35:f7:55:2d:ee:
6e:28:62:34:87:a5:05:d7:29:2e:58:5b:7f:f7:d8:
57:b9:aa:fa:e2:c6:ae:bc:8e:9f:fe:fb:31:7d:44:
69:a8:ec:c2:cd:1d:21:03:59:5b:90:ad:97:3d:a5:
e7:3e:3a:1c:74:bb:a0:58:c3:c0:fe:bb:72:75:9d:
63:23:4e:7f:89:d3:93:f6:a6:49:9e:6f:23:ce:bd:
49:dc:7f:01:af:d6:08:26:51:e4:60:64:14:1d:5c:
61:d6:7f:05:de:a7:e5:57:93:e7:8f:3f:98:b9:9d:
0a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:D6:C8:62:59:E8:E4:63:15:8C:E4:6C:80:3B:EE:B2:A1:D4:3C
X509v3 Authority Key Identifier:
keyid:1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f0:df:3b:5d:b5:f5:6a:25:60:be:19:ee:f3:08:89:87:34:
ea:4c:92:2e:b2:1f:61:dc:46:eb:fb:99:68:0c:64:7b:28:8b:
84:c6:d0:b9:17:d2:2e:7b:55:25:c4:1d:ad:87:3f:58:c5:56:
1f:41:26:ee:c4:57:b7:3b:4f:c7:25:f9:71:a6:eb:d9:fe:c0:
d8:0b:c5:9b:78:c2:17:c3:2a:fe:84:09:d4:60:e7:40:de:a6:
12:e0:b4:7c:8a:78:93:aa:99:c4:7c:fe:e4:7a:5e:18:04:26:
8b:82:6b:b6:e5:67:bb:88:1d:b7:07:ea:e1:39:6e:64:ed:61:
f4:5c:c1:5e:ac:71:13:78:ac:c3:e4:d5:30:d7:9d:47:df:75:
a4:75:c0:cc:5e:56:63:d7:5c:a9:bb:c9:78:5d:87:25:93:62:
eb:0c:5b:a2:bd:d1:25:05:7d:e7:fe:d4:b1:fb:e4:42:c4:2c:
df:6f:2e:36:42:8e:f7:c5:d2:63:3e:21:19:a1:c9:f3:31:a1:
4e:24:3c:f0:d5:71:56:e6:0f:93:f6:29:d7:44:ba:7f:94:a5:
d5:ab:a7:f9:d2:1e:41:49:3a:62:bf:50:56:61:7d:e0:4a:40:
9a:f3:87:ac:cc:b5:42:a1:61:16:16:e1:08:ee:c5:1c:0a:25:
ea:0e:b7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:14 2026 by rpki-client