Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
File: h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft (raw, json)
Hash identifier: gfwCjEnvdnjGB330RE2Te4p3gzxoE8GpOcKzW9cSux0=
Subject key identifier: 97:8F:59:9A:89:6E:30:FF:CA:3A:22:A9:2C:FA:08:B8:9A:9B:85:EB
Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
Certificate issuer: /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Certificate serial: 019D390A05DFC5AA1E5BD859A5794C3BB891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
Manifest number: 15B2
Signing time: Sun 29 Mar 2026 10:00:51 +0000
Manifest this update: Sun 29 Mar 2026 10:00:51 +0000
Manifest next update: Mon 30 Mar 2026 10:00:51 +0000
Files and hashes: 1: 74CsHa1gIlR63JIzjhQivmcI93g.roa (hash: C1WaPS/UW69Pt4QRIwyedYxNzPaQEVQGboXKkZyZxnU=)
2: h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl (hash: cmVvSAKihcqegze8QvFQvvbhZfD2unefFtfpT6RQNa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:05:df:c5:aa:1e:5b:d8:59:a5:79:4c:3b:b8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Validity
Not Before: Mar 29 10:00:51 2026 GMT
Not After : Mar 30 10:00:51 2026 GMT
Subject: CN=978f599a896e30ffca3a22a92cfa08b89a9b85eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:fc:b8:33:e8:bf:05:5b:c4:14:6d:20:29:
a0:35:0c:0e:a1:c2:97:cd:18:5e:4a:5b:40:5c:ec:
46:cd:62:29:d2:d5:7d:92:48:6b:31:fe:44:b2:42:
cb:de:1d:5b:bb:df:f7:c8:66:9b:17:86:2c:09:b0:
e2:1a:96:ed:9f:92:2f:72:2d:b8:15:1c:b1:17:e2:
55:59:52:d9:7b:89:9a:dc:30:ae:ac:ac:b1:84:0b:
da:db:f4:3e:da:87:e0:47:a9:5b:f7:11:61:32:41:
4c:16:19:62:a2:9d:b9:06:a6:1b:7f:34:cf:19:05:
32:98:dc:01:cb:30:ee:cf:d1:e1:59:cc:2e:a1:33:
cb:78:9c:90:a6:81:d6:ab:c8:85:d1:78:f7:3f:a1:
96:4e:db:b9:c2:2a:d0:77:57:44:9a:c2:ad:a8:aa:
39:d3:35:36:cf:18:41:f1:4f:dd:c1:0b:2b:9e:b2:
79:76:d5:f2:23:f3:56:00:d4:01:8f:dd:ed:e0:0c:
f5:44:03:34:56:06:33:74:2e:06:44:6b:20:76:29:
0f:85:33:61:cc:8b:4c:60:ec:4b:ac:a5:07:68:d4:
85:31:c5:63:2b:fb:18:b5:d8:33:52:b4:bb:bd:94:
26:29:53:f9:c4:68:d5:d1:c2:5b:06:4a:5c:27:4a:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8F:59:9A:89:6E:30:FF:CA:3A:22:A9:2C:FA:08:B8:9A:9B:85:EB
X509v3 Authority Key Identifier:
keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:66:b6:8b:3d:9d:11:0c:86:03:18:0f:66:f5:87:77:73:ee:
de:05:2d:f1:9f:d8:5e:b4:30:52:eb:67:9d:c2:15:fc:10:cf:
49:dd:87:63:8c:c8:7d:b7:e1:10:19:1b:db:b4:36:2f:bf:cc:
1a:18:c5:3d:36:70:1b:b2:3b:26:5d:93:b2:b2:65:99:ce:86:
19:0e:46:87:00:c3:78:c0:1e:b9:c8:9f:63:56:d6:f8:d7:00:
62:7a:82:b5:e0:e3:20:98:50:9a:59:83:a2:82:08:3b:f0:97:
b0:f0:21:2e:46:b1:7e:fe:7a:ac:ef:fc:02:aa:17:68:1f:cf:
21:a2:c9:82:93:24:b5:8f:18:41:17:17:ac:04:5b:a9:1c:f7:
a8:cd:3e:f4:3f:a6:08:c8:3e:04:58:d3:78:4b:c1:8c:f8:a2:
19:42:3c:8d:9a:25:17:c3:af:f2:ba:ef:77:c0:9a:6b:b5:5d:
0b:28:c7:62:b2:a9:2a:eb:1c:72:79:3d:8b:dc:8f:0d:3b:b6:
0d:be:44:fe:ef:26:de:ee:9a:ea:d2:c9:f2:9c:31:10:4e:b5:
94:e3:08:22:53:31:cd:97:91:07:42:55:07:1a:9d:94:cd:fe:
f8:96:37:80:08:d1:d7:50:84:46:82:ce:15:31:5f:b2:88:bd:
dd:1b:c8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:05:03 2026 by rpki-client