Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier: Pt/Yg87CAynScdoI/JonT70cYpS3fJTgdMcY8n/OOtc=
Subject key identifier: B1:5C:71:7D:CD:AD:63:38:91:BE:E4:CA:E6:64:AE:10:9E:39:27:B4
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial: 019D38D2D46906D9ADC33DA45E4EC8DF0384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number: 175E
Signing time: Sun 29 Mar 2026 09:00:34 +0000
Manifest this update: Sun 29 Mar 2026 09:00:34 +0000
Manifest next update: Mon 30 Mar 2026 09:00:34 +0000
Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: blbdL1QXIIGYoTlFy1oAZ7yRzfttdLQcX7xNePicPXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:d4:69:06:d9:ad:c3:3d:a4:5e:4e:c8:df:03:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Validity
Not Before: Mar 29 09:00:34 2026 GMT
Not After : Mar 30 09:00:34 2026 GMT
Subject: CN=b15c717dcdad633891bee4cae664ae109e3927b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:99:72:cf:9c:43:d2:8e:c5:17:a9:e5:fe:
58:99:ee:fa:a8:2d:11:d7:2c:d8:a2:c3:7a:56:55:
4b:47:72:f5:f9:0c:0e:85:07:66:c5:66:73:6d:e8:
42:37:d4:76:dd:ba:41:38:c2:44:4f:64:b1:3f:a4:
87:1d:bc:04:dd:90:45:7b:c5:f0:94:93:bd:95:50:
e2:31:b8:cb:13:58:f7:7c:86:69:19:10:b4:dc:ee:
c1:83:e6:3c:b5:f5:17:74:5b:10:a3:5a:92:80:3a:
d2:84:b7:c0:15:52:ef:2b:1b:5a:1a:2e:d6:de:88:
87:25:38:d7:c7:8a:fd:32:2c:6f:a3:6c:5f:06:9b:
49:e1:a4:24:95:2f:ad:2a:d9:d4:62:5b:0b:6c:72:
53:f4:6e:3b:cd:45:31:d6:ef:87:0c:d4:3e:6f:52:
46:5c:ca:28:d1:fc:db:8d:b7:89:0c:49:fa:62:78:
49:c4:24:e7:c7:b1:87:cb:8c:85:b8:d5:61:cf:12:
dc:1f:2a:ec:de:d9:48:42:e5:ea:e7:b9:e9:05:a5:
7b:cc:8f:bf:8a:03:0c:81:62:85:19:1d:78:c5:18:
47:85:77:59:36:30:aa:22:03:63:01:76:d4:e9:33:
43:be:59:8e:77:d2:26:66:f3:59:6b:6f:33:67:a6:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5C:71:7D:CD:AD:63:38:91:BE:E4:CA:E6:64:AE:10:9E:39:27:B4
X509v3 Authority Key Identifier:
keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:01:5a:1c:05:1f:f5:8e:49:02:26:7d:0c:b5:81:19:81:22:
e8:0f:a5:2d:6c:07:78:8e:e9:64:22:29:b1:ba:c0:2f:89:3b:
9b:14:eb:9c:82:0d:54:c7:f0:c8:f8:5a:48:10:7d:fb:c3:65:
de:05:48:62:ed:b2:a3:b7:34:8d:56:57:7c:9c:0f:bb:b4:4d:
ee:7c:f1:0b:79:6a:7d:0a:46:df:6d:33:3c:30:7d:be:16:fd:
fc:89:e2:77:27:f8:b6:6c:bd:b5:86:7b:9b:fd:84:46:98:5a:
7d:d8:41:71:78:d2:ec:46:96:64:fc:c7:d1:4f:e0:d8:ff:a5:
28:49:66:28:b1:b0:d1:ee:7e:fd:98:c8:3b:e3:05:11:a9:61:
ea:a8:f6:b3:d3:43:77:36:92:cb:9e:c2:fc:35:97:93:0d:88:
d3:26:c8:d7:ee:5d:f2:9d:98:93:3c:2b:d6:42:cb:f0:d2:bb:
16:7f:67:bc:55:70:04:01:0c:63:ce:87:9b:b7:5f:2e:37:80:
9f:e1:d2:e6:c7:82:68:aa:3a:18:cc:39:ae:08:89:4a:85:34:
7b:30:29:83:5b:ae:b6:f3:68:31:87:e0:fc:25:63:21:dc:05:
f9:32:da:75:58:e5:1d:d4:b2:64:2b:69:92:2d:cb:98:9d:3c:
37:13:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:22 2026 by rpki-client