Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: lRlyHBsRCm28S1fD3qfX7WdxSLQ4tfVLWAVLPJpknsQ=
Subject key identifier: 76:7F:E6:CA:88:B1:E0:BA:7F:B6:DF:D3:4B:56:AD:28:96:51:94:DD
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 019D25F192DD4E2F3BFC8CF3CB57BCC4F4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 17:01:21 +0000
Manifest this update: Wed 25 Mar 2026 17:01:21 +0000
Manifest next update: Thu 26 Mar 2026 17:01:21 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: qNsSa012i5CmlJaJ/CRhP09+Cq9lS5F4NMUaYGYyRdE=)
2: x-xatRQzbMJq2QoB7VpakVl_dyQ.roa (hash: FUFQzFRUVGUSKSoKEZzjy+oCv2v1jEvkTjPlxRoTw4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:92:dd:4e:2f:3b:fc:8c:f3:cb:57:bc:c4:f4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Mar 25 17:01:21 2026 GMT
Not After : Mar 26 17:01:21 2026 GMT
Subject: CN=767fe6ca88b1e0ba7fb6dfd34b56ad28965194dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:89:4f:f7:3a:70:bd:4a:3d:f8:6f:ec:0b:
02:6d:65:82:26:c3:4d:3e:c4:e2:81:d3:dc:5d:08:
35:74:5b:47:3b:61:4f:1a:a3:f0:db:31:a4:1c:a3:
04:45:37:36:73:75:41:36:ee:49:03:3b:d8:0b:dc:
1e:c1:4f:4f:ab:05:80:f4:0d:69:d7:b0:de:83:a0:
0b:f6:7e:70:e3:2f:33:1b:1f:5c:a9:98:f5:1b:73:
9a:29:e7:d6:ab:8b:e7:40:c1:ab:6a:84:ca:d4:a1:
09:3f:dc:2a:99:50:44:be:0d:fe:c3:6f:ed:75:c6:
5d:f0:0b:0f:4d:7f:02:d4:8d:7d:ac:f6:c6:36:8b:
9c:d7:82:3a:45:24:84:e6:a2:86:75:7f:53:61:55:
fe:3a:6a:8e:ee:48:8b:3c:50:7a:8c:79:07:e2:91:
6a:ab:51:46:36:cd:76:7f:12:55:d1:45:0a:b9:c3:
b5:21:51:43:94:13:6d:ca:c2:32:44:05:95:ec:de:
e5:ec:fe:c7:14:6b:35:0b:09:b2:e2:01:36:14:d5:
5b:59:c3:b4:2a:bf:94:1b:85:63:c8:b9:3b:ca:1c:
7a:3b:81:5c:21:40:47:7b:e0:64:e3:fd:d3:25:7e:
ca:a1:4c:c6:a9:e7:36:40:60:4f:24:3f:ac:55:76:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:E6:CA:88:B1:E0:BA:7F:B6:DF:D3:4B:56:AD:28:96:51:94:DD
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cf:81:12:15:f1:c4:7e:be:c4:8c:01:12:a1:aa:d3:77:55:
7d:83:40:96:01:fe:9d:1a:e0:b2:76:4f:64:d6:75:17:65:ba:
1c:8a:60:02:5f:08:ca:e0:75:e0:ed:ff:36:69:39:12:c9:a8:
44:b1:8f:36:da:07:c9:3b:83:d6:f0:5b:83:3a:1d:e6:6d:1e:
95:96:35:32:ad:aa:09:6f:1f:85:6b:30:f5:27:bd:13:1b:35:
61:13:ba:43:73:e8:b6:b2:b0:13:1f:13:dd:1b:2a:80:28:38:
d4:57:8e:57:ae:bd:d2:a5:dc:41:9e:c7:4e:6e:c5:c6:91:a1:
cd:29:17:09:ff:c3:8c:69:30:07:c9:b7:1e:87:c0:db:2e:01:
8b:35:69:3a:3e:7a:fe:2e:2a:05:f3:b1:53:79:11:68:16:9b:
56:dd:a0:50:83:37:55:1e:8b:17:e7:9a:b5:77:89:85:96:e8:
38:8e:d9:0d:49:b1:92:2b:5e:d4:72:9a:1a:11:62:59:3f:c5:
76:70:2d:4f:b3:4e:96:45:ee:ba:40:f0:ed:0a:c1:07:98:90:
3a:43:18:68:5e:07:75:2c:46:ff:af:f6:17:34:50:d7:30:91:
5e:d3:b2:33:e0:8d:01:01:6b:14:88:12:64:d5:af:f1:a0:26:
b7:3d:05:ee
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0l8ZLdTi87/Izzy1e8xPTiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzc4NzZmZDQ1Y2FmNDhkN2QxNTBkYTRiNDAwOTgxYTE2
N2ZlOTkwHhcNMjYwMzI1MTcwMTIxWhcNMjYwMzI2MTcwMTIxWjAzMTEwLwYDVQQD
Eyg3NjdmZTZjYTg4YjFlMGJhN2ZiNmRmZDM0YjU2YWQyODk2NTE5NGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oWJT/c6cL1KPfhv7AsCbWWCJsNN
PsTigdPcXQg1dFtHO2FPGqPw2zGkHKMERTc2c3VBNu5JAzvYC9wewU9PqwWA9A1p
17Deg6AL9n5w4y8zGx9cqZj1G3OaKefWq4vnQMGraoTK1KEJP9wqmVBEvg3+w2/t
dcZd8AsPTX8C1I19rPbGNouc14I6RSSE5qKGdX9TYVX+OmqO7kiLPFB6jHkH4pFq
q1FGNs12fxJV0UUKucO1IVFDlBNtysIyRAWV7N7l7P7HFGs1Cwmy4gE2FNVbWcO0
Kr+UG4VjyLk7yhx6O4FcIUBHe+Bk4/3TJX7KoUzGqec2QGBPJD+sVXbZIQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHZ/5sqIseC6f7bf00tWrSiWUZTdMB8GA1UdIwQY
MBaAFPh3h2/UXK9I19FQ2ktACYGhZ/6ZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IZUhiOVJjcjBqWDBWRGFTMEFKZ2FGbl9way5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjFjNjJmLTM0NTQtNGUyNi04Y2Vi
LWYwM2UzODYzMTNiNS8xLzEtSGVIYjlSY3IwalgwVkRhUzBBSmdhRm5fcGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2L2YxYzYyZi0zNDU0LTRlMjYtOGNlYi1mMDNlMzg2MzEz
YjUvMS8xLUhlSGI5UmNyMGpYMFZEYVMwQUpnYUZuX3BrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdc+B
EhXxxH6+xIwBEqGq03dVfYNAlgH+nRrgsnZPZNZ1F2W6HIpgAl8IyuB14O3/Nmk5
EsmoRLGPNtoHyTuD1vBbgzod5m0elZY1Mq2qCW8fhWsw9Se9Exs1YRO6Q3PotrKw
Ex8T3RsqgCg41FeOV6690qXcQZ7HTm7FxpGhzSkXCf/DjGkwB8m3HofA2y4BizVp
Oj56/i4qBfOxU3kRaBabVt2gUIM3VR6LF+eatXeJhZboOI7ZDUmxkite1HKaGhFi
WT/FdnAtT7NOlkXuukDw7QrBB5iQOkMYaF4HdSxG/6/2FzRQ1zCRXtOyM+CNAQFr
FIgSZNWv8aAmtz0F7g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:29 2026 by rpki-client