Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: e1DccgAoi+KK3vnDbp5cGFSwHNOMC6u7X50GQfGBCjo=
Subject key identifier: 63:A0:B3:75:B6:B4:40:E5:81:44:F5:79:2C:11:6D:83:E1:E8:E2:95
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 019D390A16E8C3D5C37108E0E5CE1A6F748A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 10:00:55 +0000
Manifest this update: Sun 29 Mar 2026 10:00:55 +0000
Manifest next update: Mon 30 Mar 2026 10:00:55 +0000
Files and hashes: 1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: WfHXahN+4fuEFHhXISqCkKe+PrpsC2vqFZE5QRtRZ1U=)
2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:16:e8:c3:d5:c3:71:08:e0:e5:ce:1a:6f:74:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Mar 29 10:00:55 2026 GMT
Not After : Mar 30 10:00:55 2026 GMT
Subject: CN=63a0b375b6b440e58144f5792c116d83e1e8e295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:28:7c:80:7b:df:c3:f7:9c:11:e1:9f:99:
58:d0:86:26:44:c4:a8:f7:c9:c4:82:a7:93:e9:8e:
c1:cf:50:2d:0b:04:68:5d:9a:c9:48:25:47:aa:ff:
59:4f:c2:73:39:e3:45:d2:9e:42:ae:91:94:5d:1e:
22:89:6b:54:09:c6:f6:82:a9:28:c7:11:20:19:90:
af:88:7a:11:14:95:b0:ff:97:f6:c0:fe:99:ca:07:
56:a5:f6:0b:77:e1:98:d1:b4:5d:b4:77:56:63:d3:
9e:ce:90:ce:ce:a3:08:ee:df:3e:f8:a9:46:27:9b:
ef:29:aa:1e:4e:69:da:c4:70:2d:9e:b8:9f:a2:02:
0e:b4:f7:8f:27:4a:1f:dc:ee:6c:67:63:56:7d:2d:
9f:e9:8a:6b:00:13:f6:25:c9:30:0a:57:84:28:ce:
36:82:62:b7:41:5d:5a:06:64:9f:33:3d:4d:f7:39:
b0:43:0e:d4:15:3b:72:49:c1:e1:26:01:b2:59:16:
bd:42:05:39:f4:89:61:10:27:60:de:4e:a8:ee:3f:
31:e4:79:15:0c:50:e1:22:e9:7b:3d:78:55:f2:59:
45:5a:03:d2:80:a7:54:aa:21:29:f3:44:53:f5:ca:
30:a6:56:f8:63:44:32:35:39:9c:e8:af:55:e7:36:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:B3:75:B6:B4:40:E5:81:44:F5:79:2C:11:6D:83:E1:E8:E2:95
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c9:06:ac:8c:c3:f7:3e:21:ce:75:7b:18:3e:30:6a:93:bf:
61:aa:75:14:c5:37:cd:81:93:5c:d0:15:55:63:be:07:65:2d:
5b:33:65:37:57:fc:3b:1b:18:96:29:a6:d0:78:93:de:60:93:
6b:5d:cf:41:d1:59:e0:f7:d0:9b:88:c2:d2:39:4d:29:b9:ca:
56:07:5c:fb:55:97:9e:03:8f:e6:3c:a2:14:28:c9:8c:84:e0:
94:62:42:aa:55:68:38:de:3a:b6:e2:66:fd:5b:df:66:7e:b9:
87:36:a6:52:b1:c6:10:3a:43:b1:43:8b:e2:db:47:ee:6b:be:
51:da:be:4c:f2:b6:82:1b:7f:7c:5e:ba:3d:5f:c2:97:be:d3:
bd:dc:b0:53:b9:61:62:70:af:74:9d:5a:d8:02:be:e2:f4:f1:
1d:b0:f1:6c:9d:b5:95:c2:da:f1:26:e8:36:a4:f9:84:b7:a5:
a3:77:4d:b1:97:7c:78:92:3e:19:ac:45:71:b8:2e:cd:11:b8:
8d:9e:2d:9c:39:d2:13:7b:05:e3:1c:a8:ec:64:11:01:23:ec:
55:ee:69:df:91:3c:42:af:4a:c8:88:08:69:60:75:0f:9d:88:
59:f5:b7:f1:c5:e7:45:e2:b6:c2:6c:b6:f0:30:ff:38:6c:fe:
19:8c:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:07 2026 by rpki-client