Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier: T0lWXhKb1WoB3PB3LKfmz1AVm66oKjtnJGxBP95EOvA=
Subject key identifier: D6:5F:61:3D:CC:06:08:CE:CB:AD:E1:F6:48:1F:CC:9A:D2:78:3E:AB
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 019D2816CA1E74F04BE272005CA43EA293B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number: 140E
Signing time: Thu 26 Mar 2026 03:01:15 +0000
Manifest this update: Thu 26 Mar 2026 03:01:15 +0000
Manifest next update: Fri 27 Mar 2026 03:01:15 +0000
Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: 0AKWf4lBHM/QE1NaO0DLIweesU8Op42K/kZddPNaedw=)
2: SljFkDXNsq7mf2JKVKtWNfaMHYI.roa (hash: UQDsXFS6OQOvy/ZzRN024zvrl2KSRwaHGDpLX5AP3Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ca:1e:74:f0:4b:e2:72:00:5c:a4:3e:a2:93:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: Mar 26 03:01:15 2026 GMT
Not After : Mar 27 03:01:15 2026 GMT
Subject: CN=d65f613dcc0608cecbade1f6481fcc9ad2783eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:bb:0e:cf:8b:ad:0a:ef:24:fc:5a:1a:64:
b0:f0:79:00:90:88:73:c3:b8:8e:71:38:48:d2:f3:
6d:a1:8e:f1:63:75:bb:77:63:f5:61:fd:17:1b:27:
3d:fe:aa:10:53:d1:e3:8f:9b:9d:35:f2:77:b2:33:
84:f1:98:50:97:cf:f4:f2:7a:81:de:bd:ee:53:54:
9a:d0:c8:28:68:4d:1f:5a:04:36:90:d2:b2:54:5f:
ab:a2:6e:43:a5:0f:b1:da:f6:7e:6d:2e:4c:b8:4b:
14:52:a4:45:21:a9:20:d4:73:e6:08:cf:03:ae:b4:
6e:a4:e0:e4:39:19:0a:d3:37:b2:b4:c1:3a:16:f4:
70:10:d6:3e:9e:ec:5d:48:ea:fe:e2:21:d6:e7:c8:
a5:d6:16:76:7e:98:4d:cb:05:53:4e:0d:65:a0:19:
ad:bc:78:f7:a0:fc:8f:29:93:9e:3a:73:01:62:a5:
06:c9:a0:c6:f5:94:df:a0:ea:ae:c2:3d:46:a0:92:
9d:02:25:39:42:4b:ee:13:92:78:f6:3d:73:e8:b4:
f8:ea:7b:b6:a8:73:0e:a3:eb:73:a9:d2:94:b8:ee:
94:a0:3b:02:90:20:50:8d:12:f5:4e:3e:21:a4:e1:
45:39:8b:e7:9c:dd:6f:50:f7:3d:06:50:54:32:a7:
74:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5F:61:3D:CC:06:08:CE:CB:AD:E1:F6:48:1F:CC:9A:D2:78:3E:AB
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4f:8b:d4:ce:a3:fb:06:45:1e:5a:a1:01:ac:ec:e8:81:e7:
f7:da:88:d5:be:d2:e5:e3:66:a3:1e:f8:5f:a8:f6:bb:d1:45:
1c:6f:ff:fe:c8:69:1a:f4:93:e9:2b:14:01:67:cb:1d:13:ee:
2a:5b:3d:56:4f:de:92:b2:49:54:1f:d4:58:85:39:43:4d:e6:
cb:7d:df:27:64:de:60:0d:60:db:88:7f:72:e7:77:24:47:ed:
e8:81:23:97:ce:f9:85:83:73:20:2e:36:6b:fd:84:21:89:a9:
9e:27:11:52:09:6c:24:63:c5:e5:61:aa:c8:f7:fb:34:56:35:
6c:05:ad:28:58:ff:d4:3f:18:d0:a7:7e:f5:e6:31:e8:73:35:
0b:b3:20:db:2e:63:7a:95:9a:a6:35:37:0e:3e:a6:0e:ed:c9:
06:3c:6d:33:7a:aa:1f:97:0f:f6:88:43:7a:55:05:25:5a:6b:
b6:93:d5:2b:d0:67:c9:87:39:5c:da:e9:c9:2c:2b:0d:11:1c:
76:7b:83:d8:5e:b0:55:d9:a8:21:91:05:b3:57:75:6d:21:b6:
43:50:e4:92:57:00:a8:7a:87:92:35:c6:1c:cd:6f:56:32:34:
f4:a0:77:ae:bd:73:8a:ec:d9:e5:b5:5d:cc:b8:fc:7a:14:a1:
49:a8:1d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:55 2026 by rpki-client