Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: P4vggJQmvJMB+WoK/tRWlZ7z1Acfw8z9CoY3qkQ1p00=
Subject key identifier: A8:BE:60:5E:4E:30:C6:16:CC:7E:DA:81:57:29:B1:F7:D5:A2:8E:16
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 019D37C068D73CEE2989A4DC1224E299A93D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 04:00:49 +0000
Manifest this update: Sun 29 Mar 2026 04:00:49 +0000
Manifest next update: Mon 30 Mar 2026 04:00:49 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: kD8ECTL8kYj7qnxylVgfVLlRbZ54hBYMZcivKGzDu8g=)
2: 8pAxGBtMIYfsfvto8lp_BYfRQDY.roa (hash: +JsvqV3b78G3djyCkktC2twpOWnCewuiBinhCejbzrY=)
3: qgwM28zCMsMYstsZZspf-r4p7tc.roa (hash: ZC8uQNkGcALsZhl+yLEhxpCuDedOkoY7XXctytlr424=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:68:d7:3c:ee:29:89:a4:dc:12:24:e2:99:a9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Mar 29 04:00:49 2026 GMT
Not After : Mar 30 04:00:49 2026 GMT
Subject: CN=a8be605e4e30c616cc7eda815729b1f7d5a28e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:01:f6:65:cd:0e:a9:77:e1:c9:38:f2:9c:
4b:d8:b8:2b:2a:34:2b:71:56:30:76:ee:8e:30:1f:
fe:35:5e:44:9f:bd:25:ba:40:18:86:b1:10:0e:6a:
38:b1:c2:69:3f:a7:a7:f7:e9:69:e2:2f:0e:64:60:
c8:30:b2:15:7c:28:12:2c:3b:47:be:e6:c0:fb:1a:
0f:8a:17:a8:c0:48:14:43:06:0b:5d:50:1a:ab:38:
0d:c6:9c:ca:58:e9:1a:ad:9a:b2:ef:7d:88:e1:b2:
a8:02:a4:a0:8d:16:f1:a8:71:12:15:04:c4:4f:c2:
b6:60:a9:f6:d9:93:56:e8:f3:4a:ec:d0:c9:b1:6a:
59:93:b2:60:c7:bb:00:20:6a:c3:68:bd:b7:79:04:
75:5d:b9:c5:65:7a:11:31:22:ad:25:25:c3:ad:ae:
01:87:87:00:3e:fb:0f:27:ef:21:fb:09:cf:29:c3:
b8:33:25:b2:c4:5f:26:1b:8b:62:7f:6a:9e:30:84:
67:e6:09:c7:b2:a1:0e:ef:ce:16:72:e2:e4:7d:96:
1f:0f:ba:88:18:39:7d:92:c1:be:0a:b8:97:e4:73:
b1:f6:ec:0a:49:b6:5c:6c:6b:de:63:cc:f6:c1:fe:
df:10:04:50:68:0b:1c:34:3e:86:bd:ee:cc:1f:7f:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:60:5E:4E:30:C6:16:CC:7E:DA:81:57:29:B1:F7:D5:A2:8E:16
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:d8:7f:83:1a:fd:42:e4:98:8b:27:aa:d1:9f:a2:06:21:
c1:f6:7b:00:f3:cf:61:4f:65:89:9f:71:d0:d5:8a:0d:63:02:
d4:f4:c7:4e:53:65:cd:07:b6:66:81:5f:18:77:97:23:0a:da:
16:90:30:09:ab:56:d6:71:45:ca:c5:48:d4:09:66:fd:fb:d4:
09:88:3b:05:a4:88:cb:4f:b8:50:7e:5d:7c:59:78:ab:9b:a8:
e3:0b:36:6a:39:2b:7f:d6:29:a6:23:af:61:59:28:c5:cb:b8:
93:bf:2f:82:d2:a6:81:33:95:19:f6:ad:d2:e7:14:80:9d:ce:
50:5d:f9:55:e2:ae:35:45:31:d2:80:73:0b:79:b5:73:4e:f6:
b3:ad:b2:19:f2:5d:7e:e3:14:41:c6:64:45:25:7b:f7:ea:df:
fb:14:b0:d0:8f:d9:47:c7:d1:dc:d2:bf:e8:69:75:bb:45:8f:
5d:c3:3d:98:8a:f9:ea:89:ed:a5:6a:b2:88:4b:2c:2c:91:50:
8f:74:ed:8e:ea:28:5d:ee:41:79:8c:e2:89:8d:db:44:1b:9b:
cf:a4:3f:86:2d:fc:df:91:26:b7:17:05:5a:3f:b1:64:5b:45:
a0:a8:71:63:5b:81:d4:a3:72:c0:7d:a6:39:83:57:8d:31:60:
f7:3f:e1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:34 2026 by rpki-client