Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
File: h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft (raw, json)
Hash identifier: yJdG+c4BdBUATrmUUp4RZvr3F1Cm8iYWDudNgtmU3Tk=
Subject key identifier: 1B:17:40:4E:4D:95:B6:73:DA:FF:13:39:16:5C:9A:67:DF:9A:91:FC
Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
Certificate issuer: /CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Certificate serial: 019D37F7906704C475E7169686CD71511B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: IGMCuKzSRZK6ojrjgQ_lMAFpYhI.roa (hash: mzoE6ZRVGF3GSOdPdeFwn8J6pWu/b3AWXWzYbVkQ5xo=)
2: h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl (hash: uFe0aPnces9dns+WBZFSRtwX77xM6dGmJSJTTmP+ok8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:90:67:04:c4:75:e7:16:96:86:cd:71:51:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=1b17404e4d95b673daff1339165c9a67df9a91fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:21:1f:63:fa:71:a4:9e:c0:f9:d9:dc:aa:
3f:7c:e1:be:7f:6f:80:b6:ee:6f:26:d1:27:40:8c:
3c:14:5a:ab:d2:dc:ee:5a:6b:8d:bb:dd:f9:2b:8b:
66:4c:f7:1d:f8:8e:71:b5:9d:b6:e5:e1:ab:1d:c9:
90:14:86:04:dd:cd:cd:15:89:4d:4a:da:63:b3:66:
45:2e:ab:eb:b7:94:e4:21:2c:95:36:a8:f5:aa:00:
e7:20:0a:e8:f6:fc:86:c5:4f:73:44:b7:8e:79:87:
c8:d3:9d:fe:e7:bc:94:94:bd:d1:fe:e3:35:bc:8d:
1a:6c:41:05:8c:d6:73:a6:38:e4:36:14:93:44:91:
78:ee:4d:87:55:61:4e:5f:79:ee:2b:4a:c3:03:5f:
b0:0b:bf:89:a2:9a:62:14:1c:68:0b:25:eb:14:1a:
19:57:78:b0:e8:d5:6a:d0:08:6e:a0:1c:8f:f5:74:
aa:e6:a2:d2:ff:4e:ab:2a:e5:7a:82:65:1d:94:1f:
cd:3d:ef:0f:1f:69:2a:73:b6:c0:26:bf:30:1b:38:
68:ff:99:86:37:1f:be:8a:39:1b:41:4b:cd:48:32:
31:d8:46:43:5d:41:3d:3c:d9:fd:1e:12:1f:e1:c5:
f4:08:a4:0b:e6:8b:28:83:17:6c:3f:13:15:0f:57:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:17:40:4E:4D:95:B6:73:DA:FF:13:39:16:5C:9A:67:DF:9A:91:FC
X509v3 Authority Key Identifier:
keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:59:5c:07:39:93:49:e3:c8:62:e6:f1:85:1b:df:67:13:ae:
d1:9f:c4:f5:13:cd:72:32:aa:3e:ae:15:e3:12:0f:cc:a6:2f:
30:b9:48:43:9e:f6:46:48:27:08:9d:ec:26:a1:bc:b7:cb:f3:
99:95:f4:d9:6c:87:f6:21:0c:1f:38:92:74:a1:87:95:5b:bd:
c6:cb:4f:f0:49:d5:1e:f7:a8:08:0c:da:f5:57:16:f5:8d:4b:
ba:f0:d6:79:e8:dd:67:51:e3:9e:22:ba:17:5f:5e:da:93:86:
de:b6:47:6a:fd:a5:0f:e8:e9:b4:2b:42:84:73:b4:f5:d7:bd:
c8:0b:3a:0b:08:44:cb:b1:08:dd:e3:6b:a6:84:0f:86:ac:dc:
59:27:dd:e4:6d:8a:fb:ef:55:ea:0c:1c:88:70:db:21:1f:b4:
47:c8:0a:a7:bc:7f:16:6f:15:c2:61:8b:2c:0e:fa:12:4c:e2:
3d:5c:64:f9:1e:52:0e:9b:8d:61:88:ff:0b:ae:d7:45:43:de:
e5:0c:f1:63:e9:0c:cd:b5:87:f8:76:17:fb:89:4e:76:f9:3a:
e7:e0:29:e3:12:dd:93:d0:89:a3:15:4c:a4:fe:14:0b:88:3b:
12:1d:95:85:cb:d6:9b:2f:ee:c7:52:90:20:ee:19:e5:f6:3b:
d7:fb:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:35 2026 by rpki-client