Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: G4h6slFRTEmifijr2Eh4b+bGcFpMRSurspI+emnXzts=
Subject key identifier: 78:08:34:3C:03:CF:DF:55:4E:45:25:E0:C4:AD:ED:0F:3E:77:F1:4D
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 019CE8C9D969F2F4C3589D36B13E2877B3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 0804
Signing time: Fri 13 Mar 2026 20:01:08 +0000
Manifest this update: Fri 13 Mar 2026 20:01:08 +0000
Manifest next update: Sat 14 Mar 2026 20:01:08 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: fMs+sh6FS7CzCReecvE8U5SW6hydIjq3NBmN7nFiEwA=)
2: tWUs5_OoSfOVpkRE9FrQnWN345I.roa (hash: Ik3wfYejmGeFJTK3ER8Y42u6+FSgfq4mC824weZ/UdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:c9:d9:69:f2:f4:c3:58:9d:36:b1:3e:28:77:b3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Mar 13 20:01:08 2026 GMT
Not After : Mar 14 20:01:08 2026 GMT
Subject: CN=7808343c03cfdf554e4525e0c4aded0f3e77f14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:89:41:8e:23:a9:5d:68:be:10:91:fd:ae:
af:eb:b8:17:c8:f5:ab:9d:7a:dd:34:9f:87:32:a3:
3d:fd:7f:95:2e:ad:4e:78:96:97:27:b7:7c:bd:cf:
63:97:25:3d:c1:8e:17:e0:02:71:63:40:9e:3c:cf:
3d:ac:9c:d7:90:d4:18:96:e2:1d:0d:fd:21:c5:72:
5e:b0:de:77:29:70:4b:14:6a:87:ac:0e:35:44:c6:
93:9c:d4:0b:72:3b:5a:3e:5c:52:f6:23:40:07:87:
19:fe:62:21:b4:86:95:0d:46:f3:43:48:15:b2:63:
1e:ac:0c:b6:f7:54:05:ce:ae:c6:42:3b:6e:7e:af:
8d:dd:d7:77:06:3d:40:e9:72:70:2b:1c:50:f8:60:
28:f3:5a:ba:90:bb:4a:d2:3b:de:0c:92:89:83:eb:
33:db:e3:40:09:73:b5:44:c7:84:a7:ff:7b:67:6b:
2a:04:f5:b9:e8:2d:c2:f5:a5:5a:b2:84:62:e4:a1:
60:7a:35:c4:0c:e9:36:50:41:ef:b1:9e:63:f6:3f:
3a:03:e3:1a:50:4b:e9:cf:27:42:64:9b:3a:35:79:
5a:2b:a2:8d:77:52:98:65:39:74:68:33:a5:6a:68:
e9:5d:96:b8:cc:66:99:3e:de:05:15:3c:fa:fd:4b:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:34:3C:03:CF:DF:55:4E:45:25:E0:C4:AD:ED:0F:3E:77:F1:4D
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fa:fc:ec:a5:2f:5c:5c:4d:0f:81:3c:87:21:4c:6b:d9:5a:
da:e5:11:96:df:08:ea:ab:65:66:8c:d9:b5:1a:58:b8:39:e5:
9a:b5:9b:ac:24:1b:de:21:3e:a4:83:fe:4c:ff:b4:be:70:3b:
1b:4b:99:45:56:65:66:64:44:d9:56:4e:28:a3:7b:fa:5f:b4:
b2:fc:0b:c5:2a:3c:df:28:cc:9b:80:ac:52:bc:88:f0:b4:55:
0d:a1:8d:62:30:fa:ab:8e:09:c5:24:b0:14:f9:1d:5c:a0:1d:
40:96:e7:75:46:e3:b0:26:99:bf:e5:95:9d:92:f9:40:92:e3:
09:6a:13:cf:f8:d7:54:8a:fb:18:b2:8d:79:fd:09:df:2c:3e:
ad:08:df:5f:4a:ec:f9:f2:24:7a:98:c9:89:68:96:21:31:3f:
92:0e:44:e6:c1:ab:90:40:16:06:e8:61:26:4b:47:ca:17:22:
2a:4c:2e:fd:7f:c0:e9:91:45:70:ed:bd:9c:61:60:fa:b7:59:
af:86:5f:a5:d0:e3:c7:fe:d4:42:89:01:7e:79:1a:22:97:56:
0d:48:56:0e:f9:56:17:fc:2b:23:6a:f0:51:84:5c:59:31:77:
64:df:ae:86:10:5e:d4:f6:8a:73:85:99:4e:04:be:12:94:92:
b2:f7:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:45:14 2026 by rpki-client