Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: M+LsRLVOGV9Q7FsGmKhEp2/jIXdScFMLRvedKlLm/Bk=
Subject key identifier: D7:44:FE:A9:22:73:39:DE:F6:9D:84:E9:BC:F5:A5:87:12:49:2D:8F
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 019DF0810A5075F11AC56B5ED7D176F2FD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 0BE8
Signing time: Mon 04 May 2026 01:01:21 +0000
Manifest this update: Mon 04 May 2026 01:01:21 +0000
Manifest next update: Tue 05 May 2026 01:01:21 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: GVKMxdkQmP4QVw3kngJv8D4thRZqa4dZM4wRcf8vIAM=)
2: izo4UDdC4mpQkmyWIGDJxTunxWE.roa (hash: nGq0zWnIwQfu9LNAcwYVVr+irG2rx0o9SiWP5Vb3sPw=)
3: sCQK0hD61FJAM1RWBV01BmeoHq0.roa (hash: 2nCV/DvBky7socAFisrJxsyWYsp6XWUMeNmIdiwZJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f0:81:0a:50:75:f1:1a:c5:6b:5e:d7:d1:76:f2:fd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: May 4 01:01:21 2026 GMT
Not After : May 5 01:01:21 2026 GMT
Subject: CN=d744fea9227339def69d84e9bcf5a58712492d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:90:b2:ec:a2:ca:4a:16:80:d4:89:80:65:
33:6e:40:d4:b7:59:58:7b:d0:0a:8d:20:b5:43:72:
eb:12:dc:50:20:7d:ea:db:5b:4f:bd:fe:02:44:37:
15:78:d5:64:24:17:34:73:8c:94:fc:e2:36:97:2d:
da:7b:62:c3:64:49:57:57:9d:f7:07:f7:b1:02:68:
c6:1b:8b:78:38:ca:3a:72:66:a7:48:09:98:50:73:
fe:67:c2:6a:66:74:27:10:8e:ff:e3:66:a5:61:49:
21:3c:ac:78:9f:a0:67:51:36:6a:60:d2:fb:ce:a0:
f3:10:bb:8b:c2:c1:ea:5e:44:64:40:39:8a:36:83:
78:88:31:63:a5:53:a1:f2:d2:3b:f9:c5:e3:a3:ca:
b5:08:fb:97:bb:46:01:ee:86:a4:57:d8:e7:2e:60:
85:29:8e:56:19:4c:88:df:86:5b:3d:57:b3:db:12:
85:e2:dd:51:0a:3e:95:38:1b:a1:33:0c:ef:6e:3b:
87:3c:3e:7a:15:3b:8c:16:5b:d7:e3:b0:ce:9c:fb:
6b:82:a6:c6:35:00:f0:6a:64:8a:99:3b:f7:92:dc:
cf:32:f5:e1:69:e8:47:d0:d3:09:48:9e:43:15:38:
f7:d7:7c:68:8a:f4:bf:ca:12:a3:4c:ae:42:14:65:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:44:FE:A9:22:73:39:DE:F6:9D:84:E9:BC:F5:A5:87:12:49:2D:8F
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:19:78:21:b1:0e:8b:cd:33:30:c7:31:fc:0c:4a:63:6d:dd:
dc:71:43:1b:9c:ed:bd:50:a2:ff:22:71:96:b2:62:0a:92:37:
40:dc:4c:01:41:e9:8d:64:93:be:06:91:19:c7:1d:68:df:78:
7f:24:00:74:b6:94:2c:ef:85:68:c1:eb:2e:43:5f:6e:a3:d6:
72:9b:6b:b1:52:54:16:58:75:ea:75:4a:32:55:7e:1f:f5:78:
84:7c:2e:5f:33:52:be:4b:19:ad:62:c9:3a:c7:4d:2c:14:8e:
f4:25:22:d1:40:33:c5:ff:11:90:c7:1f:a5:08:a9:80:cd:7a:
d7:a1:76:3c:0b:fb:56:e0:d2:2e:b6:38:c3:4b:84:99:b6:81:
d7:92:14:a4:ea:68:09:a5:6e:5f:4c:5e:5b:8a:27:61:e3:94:
31:4f:dc:79:79:81:70:c0:4e:b3:43:3b:46:d4:bf:cb:8f:e5:
16:23:e3:a9:cb:77:db:78:65:06:a9:a8:c4:81:ea:9f:ff:15:
19:36:a7:8a:3b:8f:4d:24:cc:15:bb:0b:0b:da:8d:20:9e:1e:
ca:85:64:3d:4f:fc:d8:ab:a8:a4:61:be:e3:7b:d0:e7:63:f2:
10:3b:49:87:0b:57:b2:cd:24:42:3d:6e:02:58:4e:60:39:5a:
a3:2f:34:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 12:34:18 2026 by rpki-client