Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
File: H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json)
Hash identifier: b5UUjWVgVsqEyIreRANmED7bi/TdEVsdjR5boe6D1jQ=
Subject key identifier: 85:8E:BB:EA:35:82:2C:C7:D9:A6:AB:CF:75:61:AA:FA:D7:0B:45:DF
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 019D29973D376E7A62C138A190C01A19F340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
Manifest number: 09A1
Signing time: Thu 26 Mar 2026 10:01:10 +0000
Manifest this update: Thu 26 Mar 2026 10:01:10 +0000
Manifest next update: Fri 27 Mar 2026 10:01:10 +0000
Files and hashes: 1: 3lrznUDu_RYJXoCA6T2-RqC6f2U.roa (hash: hPVXT+slJzISzm2tkyQwcR1eVSvzD3ViRToSxorCndY=)
2: C_5yyZCFvKCe1q25gF_5oZ_pygY.roa (hash: blUVsXaM11h0aXpR0/ZhyzARymiUeJDD6sZq8PuA4SY=)
3: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: gZeZPM8/R28VOwCQiCjbhogJPeUa/yfWYeKcSSLYgqg=)
4: U7dOPr8aIxZqqFvoN6CicfjLnZI.roa (hash: va8TN3ROTz1PexP26HjmTHBuqhoh3cPlg+O3J7QZ94E=)
5: qoYEAqhri4bUdYVpI1skjqF8iFo.roa (hash: XRgJrR2oLoLBzNI7/ZXQmYkUAt4y3ZosqwuZaOVv078=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:3d:37:6e:7a:62:c1:38:a1:90:c0:1a:19:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Mar 26 10:01:10 2026 GMT
Not After : Mar 27 10:01:10 2026 GMT
Subject: CN=858ebbea35822cc7d9a6abcf7561aafad70b45df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:68:27:e2:4c:77:71:3d:c3:61:95:d4:79:
7d:29:4f:d5:30:17:96:15:46:33:74:60:1a:bc:fd:
4f:af:40:dc:e3:3b:74:fa:be:5b:63:76:e8:52:80:
a8:62:7d:c6:31:66:4c:cb:8b:9c:01:0a:4e:cc:9a:
0a:4c:5a:90:dc:43:68:67:77:52:67:a5:21:1b:e2:
30:3c:97:62:f1:31:a8:3a:18:8a:a4:74:83:5a:0e:
08:b6:4d:ab:c6:da:01:ad:63:c9:0f:16:19:29:e6:
33:68:00:02:80:8a:7d:fa:83:11:19:4b:17:9e:f7:
9b:44:df:1d:2a:09:98:c9:a3:a1:98:e1:4e:38:df:
60:19:a0:a2:e6:fc:6f:5e:f8:c8:20:e8:14:cf:b5:
23:8a:58:4b:59:49:b8:44:4b:4f:28:0e:67:89:33:
dc:36:1e:c3:1a:22:2e:39:9a:e8:cc:36:43:9d:9a:
8e:d4:32:90:23:6a:e8:c4:f0:43:1d:4e:29:f8:37:
0e:0e:d6:d5:0c:04:30:89:3f:e6:28:25:e8:bd:5b:
39:13:cb:7b:83:e7:1c:cf:5f:bd:ee:26:ac:09:75:
00:46:82:5f:a8:c3:fc:bc:11:07:46:a4:1e:b9:40:
e2:8f:cb:24:ba:bf:7b:ce:eb:c9:da:40:de:cc:4f:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8E:BB:EA:35:82:2C:C7:D9:A6:AB:CF:75:61:AA:FA:D7:0B:45:DF
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:38:92:f7:89:e9:f8:b6:af:e7:b9:6b:7b:de:b1:c8:c0:46:
a5:77:b5:a0:1c:96:33:92:cd:93:ea:5f:e4:9a:b2:26:dc:f7:
43:23:f6:15:31:8d:64:c2:6a:c1:2f:00:d6:37:c1:be:05:9f:
87:30:9b:c8:a4:21:30:e2:2a:71:2b:e7:80:3b:72:6a:8d:68:
b1:8a:3f:30:dc:7c:af:ad:14:4d:63:37:3f:94:9e:97:2f:72:
42:df:dd:7a:da:f7:65:a7:79:60:7b:ab:58:17:bc:17:55:81:
e3:ae:d9:96:9d:04:7d:59:d7:0d:2b:98:90:b7:97:91:bd:c2:
6e:7c:f2:1f:22:29:c5:a1:c1:53:06:54:b3:f9:c3:47:21:5d:
72:0f:31:d2:dd:95:87:de:53:a8:7b:17:29:b9:73:c9:9d:06:
5c:2d:90:bf:06:ba:ec:5a:60:9b:e5:eb:ad:60:9a:e0:f1:92:
b8:fb:6e:ab:13:e2:21:23:0b:a6:93:9d:a9:5b:5f:e4:dc:ca:
5e:38:52:65:d5:5e:21:2e:74:51:41:99:df:2f:0e:0b:ec:c7:
b0:14:40:b1:61:6e:1c:f7:0a:43:d6:37:7d:10:26:53:cc:c7:
e7:13:74:98:25:cb:7e:bc:39:6a:a3:83:66:ba:6d:35:68:26:
cf:52:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:07 2026 by rpki-client