Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier: 6ukQWWqSAx2l8FhpFYz7eqB9TJcE4M+EQKod/YfJ65s=
Subject key identifier: BC:99:FC:7B:FD:37:6E:8C:EB:CF:AC:B1:47:8C:81:92:AF:E0:BC:A6
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 019D375331C699AF889C62637B27DC5BF376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number: 08E7
Signing time: Sun 29 Mar 2026 02:01:31 +0000
Manifest this update: Sun 29 Mar 2026 02:01:31 +0000
Manifest next update: Mon 30 Mar 2026 02:01:31 +0000
Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: QeNoVXmeLocsqCUvOTlmR1JSuWVxKjsZYkr8ohtn5AI=)
2: c4GD0N5ffflgM4WSJFRdKaORXEg.roa (hash: ANDRx+abOUWpKzoyrqtGua8LAFv82Wy6OwjQEBpNXbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:31:c6:99:af:88:9c:62:63:7b:27:dc:5b:f3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: Mar 29 02:01:31 2026 GMT
Not After : Mar 30 02:01:31 2026 GMT
Subject: CN=bc99fc7bfd376e8cebcfacb1478c8192afe0bca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:c9:28:15:48:cc:85:ee:0c:77:0d:0f:d2:
8d:f5:04:6a:b7:cb:53:13:33:8c:28:65:67:9a:a1:
51:a7:03:64:45:72:00:d6:5c:42:7c:5c:f7:16:91:
79:37:20:55:10:8b:df:93:68:a2:a6:d5:b5:00:31:
89:6d:95:fe:08:a2:23:7c:c2:37:6f:56:2e:82:f1:
91:68:07:50:f1:80:0b:c2:09:99:d8:bc:c2:19:c3:
37:35:0c:57:61:2b:25:b6:cd:99:d3:77:bd:bf:7a:
9a:88:cb:8a:d1:f4:c7:50:38:96:e5:0b:2a:4e:49:
af:00:dc:27:b5:e5:69:6f:ac:05:25:04:5b:a2:e5:
68:b4:e1:29:f1:cf:f6:24:8d:27:57:5f:cf:7d:c9:
14:ad:2c:26:a7:6d:a6:79:d6:a8:08:f8:5a:37:b9:
4e:4e:69:2d:9f:e8:40:1e:18:ef:ee:fd:a6:51:15:
f6:e9:ec:67:ae:55:28:4e:f7:41:6b:4a:71:c0:db:
e5:cc:fc:6c:22:f7:6b:95:61:51:5c:c0:ba:1b:31:
74:4b:d1:11:0f:76:11:c9:46:94:0c:12:84:3a:07:
ff:ed:cb:aa:87:1f:43:6c:02:32:65:f5:14:7b:d5:
a0:18:d3:b2:b8:70:d5:49:f9:d0:21:41:d3:f4:1f:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:99:FC:7B:FD:37:6E:8C:EB:CF:AC:B1:47:8C:81:92:AF:E0:BC:A6
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:36:93:9a:70:57:1d:44:77:d3:f1:df:84:6d:2d:ef:82:60:
b5:bf:22:b7:aa:74:43:93:44:a3:f5:df:76:81:bc:95:1a:a1:
fd:5e:97:eb:77:97:53:f8:03:72:10:b0:aa:87:e2:ee:15:13:
a9:6e:a0:b3:ae:08:9e:f8:73:46:26:fb:da:1a:65:4d:4f:35:
c7:01:bf:0f:b4:a3:c1:07:6d:ae:17:bb:ac:52:b7:7e:9d:5f:
0e:b8:af:07:4c:7b:66:4d:b9:13:70:f5:fa:b7:3d:56:4c:f1:
1b:53:5f:0c:5d:93:72:ee:fa:cc:ae:6d:6a:fa:fb:67:c7:a5:
7f:bf:4b:46:4e:3c:e5:8c:7a:bd:f8:b2:e9:c2:b1:5e:34:0e:
b5:79:be:c1:7e:f6:66:66:dd:94:95:9a:2c:78:03:99:0b:72:
1b:26:90:d3:bf:1e:a3:4e:b9:0a:ab:33:8b:06:c8:6c:ae:34:
23:11:d1:96:6d:47:94:bb:58:58:cd:d8:b2:32:75:8d:83:ed:
c7:27:55:e0:ef:6d:5b:15:d8:35:92:f7:1f:d9:49:ec:82:f0:
2e:9f:1a:b1:68:e5:52:a3:f4:98:66:b8:72:9b:e4:86:95:a3:
24:db:e3:94:41:26:30:e4:c7:50:e9:e8:40:5a:fa:3f:8d:d8:
fa:77:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:28 2026 by rpki-client