Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier: v01vcOkkSZYMtlvXOc38fdh8SsADbXHxC5BEX90hXBo=
Subject key identifier: 46:D1:BB:87:24:7C:2B:7B:73:33:6F:3A:E1:CB:A5:44:24:9E:5E:E9
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 019D2695CAB07BA8727785BF236159F2947C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number: 153D
Signing time: Wed 25 Mar 2026 20:00:44 +0000
Manifest this update: Wed 25 Mar 2026 20:00:44 +0000
Manifest next update: Thu 26 Mar 2026 20:00:44 +0000
Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: ndcw6hIOCuBb79kx1CdPDYAZyicQLv8i+gZJ9SdmhHU=)
2: btxvfCpPBJzhLJ1q0hbmYzTrs_o.roa (hash: EWQ0Oxbv6MIMLYiT86duCPS9U8DVrZlE0W+JlVlWSBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ca:b0:7b:a8:72:77:85:bf:23:61:59:f2:94:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Mar 25 20:00:44 2026 GMT
Not After : Mar 26 20:00:44 2026 GMT
Subject: CN=46d1bb87247c2b7b73336f3ae1cba544249e5ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:ef:ea:7a:1f:fb:9f:e9:16:0c:c7:4d:b0:
b1:d9:54:04:d6:60:95:dc:80:ba:ae:a3:07:a9:f8:
39:a1:51:24:f1:36:7d:7e:7c:28:b7:78:81:83:91:
74:9d:78:4e:1a:01:9b:2b:ae:53:46:f4:6c:2e:a0:
5b:5f:30:34:b9:ee:27:49:31:f9:43:96:ce:ff:79:
8c:38:ef:8d:5c:bd:ec:7e:d4:76:da:da:7a:56:dd:
1e:54:54:72:fd:08:75:67:df:f9:d7:14:8e:d0:8c:
1f:7c:2d:06:23:64:8f:6b:14:05:2b:b9:e5:e7:e1:
18:86:22:31:8a:cc:96:aa:c4:c3:7e:e2:7b:f7:de:
ad:05:be:30:43:68:3c:1e:3c:c5:4a:b3:71:53:a7:
10:67:9b:14:b0:f6:b0:57:a0:95:e5:40:22:45:1c:
92:50:f0:5d:b4:25:e7:e1:d4:4c:2c:93:7a:b4:18:
6e:a8:03:d4:ec:83:ea:a1:b9:90:1a:f5:9b:fa:b8:
97:c2:f6:a5:3f:7e:c4:ce:92:a1:b0:32:a3:ea:df:
65:97:c7:8d:b0:bf:8c:1f:8e:8e:b5:c0:37:17:33:
1f:d3:c7:35:d8:6d:51:f6:ef:58:64:c9:98:42:9e:
ff:66:42:3c:7b:83:0e:6c:76:27:a1:45:cb:92:76:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D1:BB:87:24:7C:2B:7B:73:33:6F:3A:E1:CB:A5:44:24:9E:5E:E9
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f9:55:07:c7:c3:69:1d:eb:ee:5e:5f:74:35:0b:46:e9:42:
08:ad:a4:02:92:ec:a8:f4:db:87:17:86:3c:6d:32:34:a5:b6:
df:3f:84:fc:df:62:ea:ec:ca:96:90:ca:5e:66:27:88:47:41:
58:90:ab:13:c5:2c:1f:16:e6:e8:33:63:70:8d:45:0c:85:08:
b4:d2:94:8d:a6:e5:08:c0:ec:29:25:5b:7a:2c:ee:71:06:b5:
5e:c7:d8:1c:db:47:8d:57:c2:e6:da:24:94:2b:ec:bd:0b:44:
94:b7:8b:44:bc:73:f6:4d:98:8a:37:07:e6:f1:ba:ed:d1:1d:
c0:26:a1:f1:4c:34:26:4e:23:64:47:96:a7:4f:36:1b:80:1d:
6b:76:3c:0c:ea:08:33:57:d0:21:44:47:a0:b3:15:3f:97:56:
17:13:8d:43:92:50:65:2d:7a:7e:f5:92:56:2b:9c:bd:7c:1c:
43:80:d6:6b:03:92:27:cc:ac:32:ff:13:36:b2:7e:13:9a:60:
01:a0:f5:73:c8:84:44:11:4f:39:18:ca:a0:db:d0:7e:cd:05:
ec:ac:55:a1:82:87:47:d6:41:40:91:77:04:cf:93:38:d3:b1:
e1:f5:7f:d4:84:a0:bd:26:99:11:2f:d3:7a:27:cc:f4:4e:c9:
bd:68:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:56:05 2026 by rpki-client