Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File: H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier: DKbuzjvTQjleGW3xvBABGd9lWRwb3Rv2f+IXDWlDfpE=
Subject key identifier: 93:68:0A:EA:FF:15:28:81:9E:98:4B:0C:1A:3B:0E:B7:10:95:4A:6D
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer: /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial: 019D378912AD39CB46DEAC90E17D34477DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number: 094C
Signing time: Sun 29 Mar 2026 03:00:23 +0000
Manifest this update: Sun 29 Mar 2026 03:00:23 +0000
Manifest next update: Mon 30 Mar 2026 03:00:23 +0000
Files and hashes: 1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: MNvCgbI8t1DbZffvNoHYgptUXRxyuWJu8WW4Z1tDnsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:12:ad:39:cb:46:de:ac:90:e1:7d:34:47:7d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
Validity
Not Before: Mar 29 03:00:23 2026 GMT
Not After : Mar 30 03:00:23 2026 GMT
Subject: CN=93680aeaff1528819e984b0c1a3b0eb710954a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:44:4c:be:03:ca:dc:07:39:72:02:c8:98:84:
81:43:0b:29:9e:ac:de:07:dc:84:b2:15:6b:55:0f:
10:ac:b1:01:fb:54:a6:d6:08:27:39:7b:8f:27:d1:
59:d8:65:f5:72:4b:fd:00:ad:d9:7e:04:57:37:7c:
fb:e0:8e:1d:9c:a5:cb:9e:2b:f7:06:56:06:3c:44:
15:e1:96:eb:9d:d5:33:a2:4d:9b:41:9c:9c:03:32:
68:26:12:16:33:9c:e4:83:25:af:72:7e:68:cf:05:
3f:1b:af:d9:77:fe:e4:9f:91:33:6e:9f:37:df:ed:
44:9b:35:6c:9a:d9:30:34:23:8b:a3:d4:ee:2d:e4:
eb:71:ef:a4:5d:45:37:57:97:69:b5:77:33:2a:a1:
5a:93:a3:6e:a5:60:90:a9:ee:ef:f7:25:36:97:09:
dc:98:87:da:0d:ca:b8:e1:26:57:a1:53:d5:7b:d2:
bc:3b:14:46:ec:64:78:88:38:af:60:bd:40:a2:1b:
a2:a3:ed:4a:9a:3b:4e:bc:16:1c:5f:44:fd:f8:0d:
95:42:d1:2a:0c:c5:e3:df:db:92:82:33:36:3d:40:
1c:6b:39:35:dd:28:5f:81:63:99:d6:fb:67:51:05:
c4:4f:4f:72:3b:d7:d1:1d:58:a5:74:e6:72:6b:8c:
69:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:68:0A:EA:FF:15:28:81:9E:98:4B:0C:1A:3B:0E:B7:10:95:4A:6D
X509v3 Authority Key Identifier:
keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fb:33:1c:5a:c8:59:87:bc:21:f8:77:12:6b:ff:fd:8c:19:
f6:4b:41:62:bf:82:ae:74:a4:8f:59:20:df:65:ae:66:e5:57:
fa:d8:f1:88:95:49:10:8a:48:f9:d5:15:b8:2d:36:a7:c3:f2:
29:54:e2:18:ab:9c:e3:c7:ce:42:f2:ac:46:3f:5c:55:ee:ec:
52:6b:ed:4c:a6:b1:07:ae:a8:e4:d2:ef:3d:d7:5e:95:fa:33:
35:bb:b6:46:98:89:33:71:72:ca:86:78:7a:1d:26:a1:0a:0a:
2b:83:cf:7a:71:71:ab:dc:ca:82:5b:38:e6:d9:11:33:15:f3:
fa:37:21:60:2c:79:8d:6b:b8:3a:62:23:74:36:51:96:49:f5:
ff:28:18:07:d8:04:da:c8:db:bb:78:f0:1c:38:4b:9c:76:38:
51:eb:b5:ce:46:f3:6d:89:08:d7:72:52:48:f4:b1:bf:02:78:
9a:b8:d3:83:9d:3e:90:3c:32:77:ea:59:9e:e0:b9:75:50:b3:
d4:5b:8e:bd:e1:1e:6f:b6:b8:24:eb:13:e9:d2:96:08:c7:10:
5d:41:b6:e3:09:e2:9f:28:6a:26:1e:37:83:1c:db:85:d1:96:
f3:ef:45:11:dc:c6:ee:ee:66:9b:86:e4:39:64:0d:d8:ad:ab:
70:26:79:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:03 2026 by rpki-client