Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: zUm5lZLOp821PRwsTwQgiZv7psRPM92aZQ3nHubWSUs=
Subject key identifier: B6:A1:27:95:DF:95:42:63:CA:9A:04:28:04:FA:7D:B2:41:EF:0F:EC
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 019D3A1CFC1E6DA2BF8551B0DD39F724D818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 0261
Signing time: Sun 29 Mar 2026 15:01:11 +0000
Manifest this update: Sun 29 Mar 2026 15:01:11 +0000
Manifest next update: Mon 30 Mar 2026 15:01:11 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: K/PdcNYTGMYkrzedKJS7TIWk0IWYK432DYqU7h0fce8=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:fc:1e:6d:a2:bf:85:51:b0:dd:39:f7:24:d8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Mar 29 15:01:11 2026 GMT
Not After : Mar 30 15:01:11 2026 GMT
Subject: CN=b6a12795df954263ca9a042804fa7db241ef0fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:6c:3f:d4:c4:7e:61:64:d6:0e:77:96:0c:
f4:be:42:b2:40:be:d4:b4:96:e6:ee:75:1c:6e:d6:
b6:56:0b:15:b5:8b:1c:af:0e:37:77:71:ec:a1:86:
c4:45:dd:35:0d:50:64:6c:d8:34:e7:45:48:28:85:
38:cc:e1:d4:37:c0:7d:f9:af:c9:6d:87:23:18:45:
da:47:59:9c:3c:16:eb:92:0b:3e:39:c1:26:16:87:
92:74:57:c1:44:db:5e:02:06:3b:9c:74:5b:bd:65:
04:73:1f:73:de:81:65:0c:86:12:f3:42:13:0b:4a:
c2:07:4d:62:74:87:08:99:cd:90:e4:a1:3e:8e:dd:
88:72:2a:cf:31:22:1d:4d:f1:a5:a9:99:91:5e:87:
82:1d:2b:4a:fa:42:cd:c0:34:7a:5e:21:49:d0:e6:
a0:b4:43:b2:3a:0b:84:6f:b2:64:28:43:db:bd:99:
e0:93:bf:ce:f9:bc:b8:73:8c:0d:b1:33:b0:07:4c:
54:26:df:8e:81:5f:4a:62:98:a6:54:d0:45:60:62:
62:9c:87:d0:11:cf:68:c6:9a:b4:f6:c7:ec:62:4a:
65:06:01:31:72:d4:a9:98:c1:88:12:27:05:8e:86:
e6:c2:59:26:e5:ad:d3:52:62:10:59:51:f8:05:eb:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A1:27:95:DF:95:42:63:CA:9A:04:28:04:FA:7D:B2:41:EF:0F:EC
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:07:71:4f:4f:65:de:ae:02:28:5d:9c:9a:95:1f:75:2f:70:
5f:41:87:42:4c:80:d6:a9:8d:0a:c2:d9:29:c9:b7:0d:4c:5e:
98:83:88:a8:4a:4f:e2:97:05:4c:00:20:09:a0:07:c7:64:d0:
15:f2:08:01:76:7c:e2:35:a7:d9:c6:67:62:94:e2:99:49:b5:
57:e8:fc:23:c8:9f:7e:b2:78:9c:62:c8:8a:83:fb:df:f5:c7:
99:4b:3d:d0:cb:09:45:f6:12:6a:3d:23:41:0c:fd:f3:e9:78:
a5:f8:23:6f:fa:0a:a5:f7:22:49:6c:d8:e5:26:6b:8e:be:95:
95:9a:7b:8b:30:a6:aa:be:42:7d:d2:27:29:ec:ff:af:46:e0:
a9:67:d0:c3:fb:e3:f8:ee:5d:f3:d0:05:c9:18:b1:10:59:bf:
82:62:fd:b1:cb:6b:84:33:75:60:4a:5c:fd:8f:ca:29:63:ca:
51:62:89:e2:5f:b2:18:03:6e:b5:41:2e:5e:eb:f1:1f:24:63:
4e:42:e8:e5:75:fc:ff:cd:f0:61:33:52:ba:73:c7:28:f6:ca:
9a:d0:c2:c4:b1:66:06:c1:d6:cc:a9:ff:a4:1d:f1:66:e2:44:
03:6a:83:43:03:f3:1b:73:b9:98:af:a6:37:9a:e6:32:08:9e:
8b:0f:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:44 2026 by rpki-client