Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
File: 612h2h-h1CXPHcnoJtZe2u1s2Jg.mft (raw, json)
Hash identifier: cIOvH/httPwU2Bs8tgh6yGp3bs/AGF//iQoOExlB6mY=
Subject key identifier: 17:8C:1E:C1:03:FB:86:8A:D4:9C:87:16:00:94:78:6A:6D:B9:56:E3
Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Certificate serial: 019D371B3F96056B4AC78FB9BC78A84B6DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
Manifest number: 1641
Signing time: Sun 29 Mar 2026 01:00:25 +0000
Manifest this update: Sun 29 Mar 2026 01:00:25 +0000
Manifest next update: Mon 30 Mar 2026 01:00:25 +0000
Files and hashes: 1: 612h2h-h1CXPHcnoJtZe2u1s2Jg.crl (hash: 2kSl7u+tLHkQQQrPtDV0oLMff92eDDBzK1QlHW7h/Vw=)
2: Crjca7fOHa3XODW9UiyUGAIwWc8.roa (hash: WnPbNWjg6gHgCjmDpm8NmXxP+ad/7QuLqIJAknA++jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:3f:96:05:6b:4a:c7:8f:b9:bc:78:a8:4b:6d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898
Validity
Not Before: Mar 29 01:00:25 2026 GMT
Not After : Mar 30 01:00:25 2026 GMT
Subject: CN=178c1ec103fb868ad49c87160094786a6db956e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:85:78:55:48:0e:0b:ee:f9:c5:19:d9:fb:
7c:71:72:db:4f:5c:97:16:56:ee:c3:45:7f:55:b9:
b5:ec:1c:a5:c1:f4:2e:97:2a:96:a8:d9:02:4d:57:
b9:af:5a:3b:47:f2:42:a1:1e:0a:9d:5c:c9:0f:d4:
37:e3:17:b1:f3:37:91:f5:ca:b4:5a:ab:80:ce:60:
9b:05:17:01:45:c7:1a:97:c1:e9:7a:e4:95:43:97:
3e:0e:46:a6:19:e1:b1:7a:fa:a2:d1:dc:25:e7:ed:
d3:b0:af:d8:fc:ab:cd:70:af:67:18:1b:c6:b8:ba:
bd:10:4a:50:d5:43:b6:49:8b:eb:54:25:46:ff:f5:
41:1b:71:a2:a0:f9:57:de:f3:23:b5:60:9e:53:2d:
60:be:8f:b2:d6:95:0b:2a:70:d7:55:ae:d0:20:45:
c8:8a:76:f1:e6:91:85:23:d3:ea:96:b6:0b:66:b6:
08:9b:69:c3:ff:a4:15:36:28:a1:6c:63:74:cf:7f:
6f:01:f8:aa:34:78:d0:bc:3f:b2:9d:58:f9:5f:d1:
01:b6:97:ef:0f:a3:1f:c1:d8:b8:83:13:88:31:46:
8d:28:d3:28:36:e3:bb:66:9d:c0:e3:c4:82:36:e8:
d5:56:5e:86:68:02:2f:d8:f0:eb:14:bb:11:1d:a4:
c9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8C:1E:C1:03:FB:86:8A:D4:9C:87:16:00:94:78:6A:6D:B9:56:E3
X509v3 Authority Key Identifier:
keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1c:1b:65:1d:95:5a:c4:ca:b5:f0:e6:ab:a3:ec:c0:76:92:
84:6b:90:0c:27:28:97:d6:7a:57:f7:3b:66:08:92:87:34:17:
21:de:32:2a:a6:f7:40:45:5c:28:eb:46:c3:cc:5d:45:4c:86:
e1:93:25:64:c2:6b:27:95:07:8b:95:bf:32:7c:39:0d:28:e0:
74:cd:98:c3:78:62:11:64:53:0b:72:24:66:ff:93:f2:63:f3:
9c:72:eb:b2:fb:e1:32:8d:84:04:1a:40:08:e3:be:21:04:51:
1a:2d:be:d1:a6:82:1a:df:26:16:99:b6:a0:fe:53:4b:7f:a6:
40:44:8b:de:db:44:1a:74:71:35:08:f3:79:2c:a0:60:a7:ee:
4c:78:7c:c1:19:25:db:91:71:25:ee:5e:65:66:01:6b:97:7e:
89:99:2c:6e:42:c3:6a:cb:4b:af:b8:64:df:ff:1c:6c:68:9b:
8b:dd:48:9d:98:ad:26:47:d1:0d:21:eb:3a:0a:99:4a:c6:23:
2d:7d:80:50:06:d3:6d:bd:83:ae:d5:f0:7f:eb:1c:76:6e:d6:
1a:a0:ed:eb:6a:2b:e6:52:49:cb:94:89:f5:49:33:19:5d:3d:
59:2d:fc:dd:cd:3e:16:59:ff:8c:7b:ec:33:3c:2a:92:8e:ac:
be:18:97:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:35 2026 by rpki-client