Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: IHZ0GNZgva9WwznoZAmBGJor8IQNjsJdG2XTt/ClGv8=
Subject key identifier: BB:44:FA:5D:83:DE:D4:63:30:81:8E:5F:A7:57:04:A4:A2:9B:2B:F2
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 019D36E51CD0FE67C1CDBE19D759DEA6B4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 0BD0
Signing time: Sun 29 Mar 2026 00:01:17 +0000
Manifest this update: Sun 29 Mar 2026 00:01:17 +0000
Manifest next update: Mon 30 Mar 2026 00:01:17 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: 1tnQ2BT5knDZinRBcOQWDd0/YDia9JJwtfSul0UZlFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e5:1c:d0:fe:67:c1:cd:be:19:d7:59:de:a6:b4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Mar 29 00:01:17 2026 GMT
Not After : Mar 30 00:01:17 2026 GMT
Subject: CN=bb44fa5d83ded46330818e5fa75704a4a29b2bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:54:c0:91:2d:6c:c3:38:1b:6f:b2:2e:06:
03:60:e3:bd:1b:f4:16:93:fc:4f:66:f8:10:b7:db:
84:c2:da:fc:81:13:04:27:94:63:b4:e2:82:45:92:
7b:87:40:86:c8:5a:d2:95:ef:d7:f0:e0:59:99:04:
a2:0b:5a:d4:a1:76:3b:c7:f7:bd:7a:48:94:8e:62:
bd:9e:5f:d4:d1:3b:21:f0:8d:20:50:fc:78:29:75:
ff:17:b0:a9:30:51:f5:b8:65:83:cc:8b:b3:f3:c5:
3d:86:1a:11:41:6c:07:25:43:a2:e8:a6:75:a0:5e:
fb:f6:ed:b1:bd:22:93:ed:b2:21:3e:cd:a7:18:e2:
f0:48:b5:d0:b3:68:a7:c8:e4:9e:1f:52:16:61:33:
e1:f7:be:cc:8d:bb:80:69:35:bb:26:bc:a2:11:4d:
48:20:d1:18:49:0a:b1:52:bd:db:b3:da:55:9f:51:
06:4b:0e:d8:9c:94:0e:7c:3f:a2:e2:ea:f8:77:9b:
33:ac:62:80:d1:da:7c:16:25:0e:ba:27:82:40:08:
2d:34:64:39:04:e9:db:a5:6f:a8:e3:78:c3:18:dc:
dd:7a:73:83:fa:a4:00:41:93:bc:1a:cd:7f:33:a6:
2b:74:31:5d:a0:7b:f6:70:b9:43:b1:03:60:f6:95:
03:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:FA:5D:83:DE:D4:63:30:81:8E:5F:A7:57:04:A4:A2:9B:2B:F2
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:93:95:96:4b:5d:8d:9d:6e:69:d6:99:70:55:44:b4:29:f7:
6e:a9:ab:d1:e2:e7:66:1c:dc:24:6c:fc:49:15:49:e1:14:2f:
31:c7:86:db:cf:0e:14:83:13:ef:44:73:0e:8c:d1:21:51:0d:
ba:40:51:c5:ac:8b:a4:7a:b1:d3:88:9e:86:c7:7f:74:7f:f1:
c5:8b:e5:fe:a5:b4:d3:29:a0:51:c3:42:cd:d8:c0:2e:97:a4:
8f:73:e5:d4:cc:67:56:bb:26:b1:82:96:4e:89:86:75:21:3d:
8f:b1:ea:9b:ee:ba:d9:f1:5d:61:1d:68:55:2a:3a:ab:2d:70:
0a:7c:46:7a:c6:62:82:3f:36:04:0e:00:18:36:05:8b:5e:2f:
16:65:cb:60:73:2d:69:02:71:ca:92:7a:fd:4c:bd:25:15:c1:
5b:0a:c0:b8:01:3d:8a:ea:b9:f4:1c:ca:8e:5c:0d:b0:58:bf:
cc:5b:aa:04:f9:a7:e8:86:5e:56:0f:68:c2:f9:a6:96:fc:50:
18:3a:a1:0f:0b:6c:31:b2:fa:80:63:31:af:44:04:1d:4c:2b:
d2:a9:b1:d9:58:f2:ce:4e:a2:d6:4e:83:67:30:72:96:38:ad:
57:09:e8:86:5d:16:7b:1d:d2:b2:13:b5:39:5b:fd:81:52:f9:
e4:d3:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:01 2026 by rpki-client