Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: FcRJSJT9CYjBU5FUhJUVtchqkBjPN+S+48AYmFOnJzs=
Subject key identifier: B1:2E:96:D3:7A:F6:53:C4:B1:2F:6E:A5:2E:1C:D1:2A:6D:47:16:EC
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019D2AE14CA151C598B7CA24DB811EC48D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 16:01:41 +0000
Manifest this update: Thu 26 Mar 2026 16:01:41 +0000
Manifest next update: Fri 27 Mar 2026 16:01:41 +0000
Files and hashes: 1: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: 2ZSx7h2k6A0ln8ySSG0f7frwTJ/RYP8xfHveMa9fUV8=)
2: UTSR5iQJ6IBH6DGdS5VKMlXv2h8.roa (hash: g/yB397DTMizFh5pcVuRPR6yN/SI5ugHQKZHi+BSisU=)
3: eBV3wtUeMu2mQzbDRhT7v_8FhCM.roa (hash: dfSD4t+IvLSwRtvheEfZG9CM1+g6QasEUhniYPszLJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:4c:a1:51:c5:98:b7:ca:24:db:81:1e:c4:8d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Mar 26 16:01:41 2026 GMT
Not After : Mar 27 16:01:41 2026 GMT
Subject: CN=b12e96d37af653c4b12f6ea52e1cd12a6d4716ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:13:b1:18:39:c8:c9:f4:47:fd:b0:50:24:
3f:45:ce:f1:a4:80:cb:4f:0d:c5:7a:d6:8b:57:df:
a5:c6:ae:7f:56:1e:2b:0e:81:1c:71:88:10:98:98:
0b:dc:da:7a:18:0c:f2:5f:a2:54:66:43:4f:88:8f:
db:2c:ff:05:2b:0b:f8:5e:18:8c:d7:5a:37:a7:18:
79:58:88:94:90:8b:c8:eb:4a:32:a7:34:14:59:51:
08:9f:92:38:25:05:05:1b:a8:e4:fd:28:79:e2:be:
2f:7d:f6:3e:55:a0:4e:9c:86:51:7d:33:40:2e:31:
56:c6:26:31:74:83:b5:da:23:43:08:bf:9b:ef:75:
19:36:2a:e8:19:9b:35:c8:af:fb:10:d5:15:ae:30:
c6:3a:7e:01:79:28:d5:6f:50:5c:49:85:c3:50:fd:
43:ef:92:0c:6c:32:95:b8:aa:7f:56:1f:bc:f7:df:
72:58:e3:48:c8:3a:be:8e:ad:42:c9:e6:b6:05:f3:
0f:2a:95:2d:1f:be:21:43:92:39:2e:15:fb:1b:45:
b5:1b:d5:e9:2f:d5:b0:24:55:0f:a6:06:50:b6:ca:
b7:ee:04:e6:ed:33:90:ef:d4:06:f5:73:ed:a5:a5:
5b:ba:04:e0:74:c5:4b:fc:00:7d:19:fb:f1:7a:90:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2E:96:D3:7A:F6:53:C4:B1:2F:6E:A5:2E:1C:D1:2A:6D:47:16:EC
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:05:b4:3b:d0:7e:7c:7c:d8:d8:7e:d1:d4:a7:00:8b:7f:17:
48:79:e7:e4:af:0a:73:d2:17:a5:af:fe:cd:a3:e5:52:4a:c3:
b9:38:43:e6:4c:39:33:0f:88:ed:1c:3d:8e:73:e0:bc:93:a0:
ea:56:24:c5:90:e7:f8:50:1f:79:98:d8:f3:30:86:7f:ec:90:
fa:76:64:79:e9:e2:3a:81:a9:1c:ea:2d:93:fe:96:d6:81:27:
ca:11:3f:2d:1f:d7:5b:84:60:ed:81:a0:34:23:f6:ce:a6:c4:
46:a8:32:57:16:a9:e2:33:ce:fc:33:71:99:9c:b6:0b:46:c3:
25:90:ea:8c:55:81:30:7b:f3:cb:9e:7e:a9:fb:cd:7a:30:73:
13:a1:32:e3:f8:39:fb:4a:27:52:50:fa:16:e8:21:4a:47:3a:
23:57:1c:8a:02:c5:23:a9:a1:f5:d2:0a:d8:34:eb:5c:c1:ce:
90:ef:1f:b4:93:17:13:54:01:a9:89:1c:b9:ae:ca:df:71:ca:
f9:c1:7a:e0:ad:cc:42:a1:1b:73:56:3f:d9:32:34:da:3e:da:
00:fa:6c:8f:4d:83:da:b5:73:d7:1c:26:14:1d:5d:67:81:d7:
e6:56:de:4d:20:a4:d6:e5:b6:14:1d:54:d0:d4:b4:32:57:aa:
50:4f:43:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:18 2026 by rpki-client