Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
File: h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft (raw, json)
Hash identifier: GxZ92X/BudONgPsyb+f1NbOP1BmA8/FSbuFWPK40cEw=
Subject key identifier: 4A:FA:7E:64:EC:47:2C:63:A7:F3:6E:B8:78:BA:B9:38:20:94:BB:1B
Authority key identifier: 87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
Certificate issuer: /CN=875b3e56ef93190e506d72819bcca6789ad92140
Certificate serial: 019D333EB695CD88D4E5F859930F664EE1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
Manifest number: 17
Signing time: Sat 28 Mar 2026 07:00:41 +0000
Manifest this update: Sat 28 Mar 2026 07:00:41 +0000
Manifest next update: Sun 29 Mar 2026 07:00:41 +0000
Files and hashes: 1: 5Vuu0eM6WyHD8GbymV8XD2X1GyI.roa (hash: beaP1rJCkEHa/zAHX0Mfe8Dsodp5vQWWvdh3vbIaapQ=)
2: h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl (hash: wPQmzmrSQQMNWMSqETG+zHVcjG6fANppjtKPx4TnyhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:b6:95:cd:88:d4:e5:f8:59:93:0f:66:4e:e1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875b3e56ef93190e506d72819bcca6789ad92140
Validity
Not Before: Mar 28 07:00:41 2026 GMT
Not After : Mar 29 07:00:41 2026 GMT
Subject: CN=4afa7e64ec472c63a7f36eb878bab9382094bb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:4d:c3:6c:36:28:95:06:c7:11:c4:10:35:
a1:d4:2f:7e:33:15:31:13:a5:48:81:66:95:2c:f7:
84:56:69:57:b4:40:ae:c5:5d:28:31:f1:38:07:37:
c7:ed:c6:c6:3f:f1:fb:f9:a3:47:c7:22:ff:50:bb:
2d:b8:0f:21:8e:b6:7d:f7:e6:36:54:ab:ed:c7:ac:
94:ce:fb:72:93:5b:13:47:49:1b:d3:bb:6d:1c:35:
7f:c0:79:78:63:0e:d6:f7:c1:22:70:1b:4e:b8:1f:
5a:73:96:15:91:69:84:b9:f4:8e:18:7d:b9:b2:2c:
c3:ea:66:76:88:53:f1:ae:98:f1:90:50:67:3e:da:
21:ab:05:64:e4:cc:50:f9:ca:a5:36:2f:20:65:44:
a5:29:29:4c:6a:03:31:2d:cb:05:81:05:81:e4:bf:
10:fa:45:9b:a7:1c:70:90:ad:10:50:bd:bd:89:28:
2f:ba:82:77:8e:24:1f:fd:63:a8:f5:b4:b1:88:cd:
4e:96:6a:83:0a:ae:b6:2a:72:bb:d4:20:6a:62:c3:
0a:5a:1c:03:cb:26:19:c6:72:95:17:94:f9:6d:4c:
ea:77:f9:12:06:7c:ba:4b:03:9c:cc:8e:5e:40:d7:
40:df:c7:58:c1:12:ca:02:77:df:e7:0f:2e:e6:3b:
37:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:7E:64:EC:47:2C:63:A7:F3:6E:B8:78:BA:B9:38:20:94:BB:1B
X509v3 Authority Key Identifier:
keyid:87:5B:3E:56:EF:93:19:0E:50:6D:72:81:9B:CC:A6:78:9A:D9:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/19cfc2-f190-4110-9c9a-ed3c56e1d788/1/h1s-Vu-TGQ5QbXKBm8ymeJrZIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9f:cf:5c:9d:54:fe:2b:17:b7:62:fe:ae:e9:77:53:1d:ad:
03:bc:2d:44:0c:47:cd:ac:39:c3:3f:04:e3:db:25:d9:68:a5:
f0:db:df:d2:ed:c2:f0:39:05:7b:8d:15:38:56:2a:ae:c8:91:
5e:32:bc:ad:54:24:cb:bb:8c:05:e1:d7:5c:ba:da:8e:67:3f:
96:bb:7a:9a:c4:12:d1:82:60:41:50:b8:d1:03:b0:f5:d8:f9:
d6:09:92:6b:ac:92:cc:53:2e:e8:8c:ac:9b:ee:ec:07:f9:66:
8f:a4:8d:48:62:a0:de:3e:b6:d1:47:76:91:fa:76:3c:ff:f9:
15:7b:79:da:4f:d7:0a:ed:19:24:34:24:0e:97:bb:76:2c:00:
91:ce:b1:42:53:2c:e0:ea:66:83:b0:25:29:94:fa:d9:16:06:
19:d0:d3:0f:eb:05:6f:b0:2c:f7:aa:38:73:ae:b1:51:6c:25:
e1:f8:41:7a:fe:1b:dd:be:82:3f:b9:5d:0c:0d:8f:8c:8a:54:
e9:20:ac:6b:29:75:13:d6:dd:86:01:4c:ec:00:a1:bd:8a:6e:
84:6c:9d:14:c7:b6:20:cb:ce:88:19:fc:46:75:e8:80:23:e6:
2c:0f:f7:7d:09:40:d6:43:47:17:a9:c6:ae:b2:b1:b5:a6:f7:
cf:39:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:03 2026 by rpki-client