Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
File: 1hCKSF368GqTH1Q8CFoAnGrqLZw.mft (raw, json)
Hash identifier: 6MTVZ0IHKZ1KBFIqUo0jxkB0Lo6yNg8Q02bA96koCE0=
Subject key identifier: 94:45:20:E9:F3:E6:E3:1D:4B:89:E1:D0:14:07:30:83:AA:3E:11:FF
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 019D3A8AB899C3AECDFAAC1A179BB5E784AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
Manifest number: 0B9A
Signing time: Sun 29 Mar 2026 17:01:02 +0000
Manifest this update: Sun 29 Mar 2026 17:01:02 +0000
Manifest next update: Mon 30 Mar 2026 17:01:02 +0000
Files and hashes: 1: 1hCKSF368GqTH1Q8CFoAnGrqLZw.crl (hash: Ev3yJXMvBj7WlGim5v1T+OYjVh/JrKQk9puTk/yrJFQ=)
2: LyC_vUctmu4Jy1dYcPIwrODD2Ns.roa (hash: yIwrLI/p+BAFGpVM3yWfqZ2AnOKV2a2znACWvzNWVRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:b8:99:c3:ae:cd:fa:ac:1a:17:9b:b5:e7:84:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Mar 29 17:01:02 2026 GMT
Not After : Mar 30 17:01:02 2026 GMT
Subject: CN=944520e9f3e6e31d4b89e1d014073083aa3e11ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9f:14:d1:17:eb:0b:0d:24:75:3f:68:d5:0c:
ff:8c:2a:6b:83:31:9d:e5:39:4d:05:ea:2d:53:8b:
55:59:e8:43:fb:28:53:1d:68:cd:08:cf:23:86:e3:
ec:c1:0a:ac:8e:b3:16:19:df:3b:32:2d:3b:5d:6f:
32:e6:7b:98:f7:d4:90:44:ae:9c:d1:45:33:5a:1c:
3b:28:84:71:c3:18:9f:26:9b:0e:9e:91:7b:51:ba:
d1:24:f8:ed:d7:56:df:a2:f6:cd:c4:b9:f5:c6:8b:
5b:6c:52:75:26:44:63:22:ef:de:c2:af:9c:47:1f:
bc:f1:6e:19:d6:61:db:fd:0a:06:32:75:0e:5b:10:
9a:a6:28:68:93:f7:80:e8:b4:f6:d3:f3:88:10:83:
09:3e:e1:f5:cd:d7:59:50:89:90:aa:95:d1:87:5f:
49:e2:bb:bb:74:b9:76:af:50:61:a7:96:db:03:54:
5f:f4:e8:6b:35:e9:b4:87:6f:e1:3a:9e:c3:1b:56:
a2:38:3e:fc:74:87:07:13:cd:99:e7:ba:bf:48:6e:
9a:2f:67:7a:02:b5:c6:a2:02:b8:a2:d6:c8:ae:7b:
cd:6e:72:74:a6:22:06:0c:a8:cd:c4:44:97:a3:0f:
1b:8a:c7:1e:f5:52:a6:07:3e:fe:d9:71:b5:33:79:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:45:20:E9:F3:E6:E3:1D:4B:89:E1:D0:14:07:30:83:AA:3E:11:FF
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:48:46:23:85:1f:4d:51:2d:a1:97:39:df:97:60:79:12:47:
7c:1b:68:ce:fb:5d:f3:36:d6:4b:9f:21:47:96:6c:7f:34:5a:
99:b2:26:f9:12:ef:b8:55:b3:95:dd:3a:99:ff:0d:73:65:c7:
81:c2:16:58:ab:60:09:bc:2d:ef:df:e3:38:ee:72:12:02:ee:
36:de:66:b8:a5:8e:d3:2f:c0:d6:93:94:82:4c:55:2a:c6:d4:
da:a6:53:f4:c1:32:58:84:c2:c8:ab:e3:ea:88:6b:df:e3:16:
27:8c:cc:d6:bf:37:c7:06:51:2e:38:28:7e:d0:2b:33:93:9e:
e3:04:7f:d6:34:ac:33:e2:e0:4a:76:ed:d9:4c:02:d3:a2:fd:
bd:00:5f:6a:2f:46:77:b5:43:a7:ea:55:c2:12:d9:cd:7b:78:
7e:0f:b6:c6:aa:3c:ab:b4:69:f5:15:8d:25:12:50:71:be:c2:
ed:8e:23:3c:95:8e:5a:07:a0:7f:33:50:90:7f:f5:a8:6d:44:
61:fc:68:20:a6:6b:0c:09:f6:b2:75:bd:5e:db:e2:5d:96:3a:
b8:10:8a:63:f7:cb:d0:de:d3:41:ed:a2:a7:24:b6:98:70:c1:
4c:8f:8c:fd:9c:85:b1:f6:ae:0a:57:9f:bc:56:92:2e:bc:79:
cd:75:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:00:58 2026 by rpki-client