
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File: 612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier: QTxB1rPA3OeTUJJEzV2kbce7YAo4HqIWOUio6YvrVkc=
Subject key identifier: 01:AC:4A:CB:EC:53:CD:A0:D2:79:46:EF:5E:F7:E2:75:75:CD:B3:4B
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial: 019E303B580111CDAD304FA9984740B5C50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number: 16C2
Signing time: Sat 16 May 2026 10:00:55 +0000
Manifest this update: Sat 16 May 2026 10:00:55 +0000
Manifest next update: Sun 17 May 2026 10:00:55 +0000
Files and hashes: 1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: i4r6BroRdWd6HJNPJoC/CB0dCB6tfchWJ+EZ/yeiGV4=)
2: Crjca7fOHa3XODW9UiyUGAIwWc8.roa (hash: WnPbNWjg6gHgCjmDpm8NmXxP+ad/7QuLqIJAknA++jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:58:01:11:cd:ad:30:4f:a9:98:47:40:b5:c5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Validity
Not Before: May 16 10:00:55 2026 GMT
Not After : May 17 10:00:55 2026 GMT
Subject: CN=01ac4acbec53cda0d27946ef5ef7e27575cdb34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:ad:f7:cc:38:52:ad:ea:dc:71:75:e0:85:
a0:30:f3:e6:c1:37:86:d4:e3:7b:69:69:82:f8:a8:
14:f2:af:6c:98:33:56:69:04:a0:45:e3:73:b5:40:
39:8a:8a:b0:a4:92:55:96:fd:33:47:a3:51:29:d8:
09:3f:91:b3:69:cb:d6:3c:77:1c:13:75:3e:d8:ef:
df:c4:52:4a:52:cc:d0:ea:6a:de:31:a3:f9:57:c9:
f0:04:f8:8c:5d:5f:88:4b:ba:cb:c6:ba:c5:7a:97:
c5:ce:ad:17:a1:cf:7a:0b:df:04:ec:1f:c9:89:35:
92:a1:d5:af:6c:ec:57:e9:af:2c:fb:44:ec:7e:01:
be:3a:71:bc:8a:0e:01:df:20:aa:59:f0:36:e3:a7:
ee:fd:13:57:c2:b4:82:ec:4b:c7:4c:8f:56:5d:24:
05:6a:fc:32:ae:b0:4a:e1:aa:53:77:07:3a:3b:3c:
40:35:e1:2a:c1:e8:6d:d2:6d:d9:f8:24:6e:88:5b:
fd:44:53:e0:7b:45:14:22:ee:a1:5e:85:2e:92:18:
eb:1c:41:d9:42:bd:80:14:f2:eb:63:0e:f1:27:ef:
70:1c:ec:dd:3f:20:6c:9b:6c:19:4b:3f:de:27:cb:
b9:86:d0:2f:06:22:bd:be:5d:9a:3c:78:1c:ed:96:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AC:4A:CB:EC:53:CD:A0:D2:79:46:EF:5E:F7:E2:75:75:CD:B3:4B
X509v3 Authority Key Identifier:
keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c4:08:e8:27:5a:b3:f1:94:e3:44:9a:76:35:bf:a1:d7:39:
f8:c6:0f:15:e4:62:06:e9:0b:37:96:9d:61:33:01:2c:16:4a:
f6:ae:2b:73:93:09:77:f2:78:c5:6e:33:28:6a:5f:1d:74:dd:
16:e0:56:5c:c9:57:2b:f2:e6:4a:99:98:67:4c:20:56:d9:dd:
ad:06:16:51:d6:8f:9c:5a:ab:26:a7:f7:03:13:e0:a5:95:bc:
1e:7c:07:aa:bb:11:9d:bd:2b:e1:15:f1:cc:b5:68:57:f9:c1:
6d:4e:cb:55:93:7f:b3:91:fa:60:50:9b:db:be:64:bd:66:9d:
5c:2f:2a:0a:0b:7a:96:f6:b3:c9:92:35:2f:f2:8a:51:ea:55:
72:9c:76:1c:65:a2:43:51:96:e3:5f:03:f3:51:73:96:80:f8:
8f:c0:92:34:22:0a:fd:44:59:47:61:e2:68:6e:44:a2:65:0f:
da:82:22:3c:d1:b0:b6:01:83:05:a9:46:13:88:37:09:3c:9a:
41:97:88:38:2e:f9:ae:41:b7:e0:14:80:ac:1e:a8:b7:f9:b0:
32:9a:50:c8:48:f4:82:66:90:ec:9b:48:65:04:c4:45:a5:34:
21:56:65:99:09:cb:05:63:eb:2a:f6:44:8f:3b:9e:da:4f:60:
ca:73:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:23 2026 by rpki-client