Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: BgAQmCY3n54TJAz2lPJLHathTMe7RTZfTx9SPajpmOE=
Subject key identifier: 0F:A7:5D:CF:55:CF:2B:D1:D7:FB:5A:FE:2A:58:73:DA:19:BE:32:88
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 019E3004A2A15826DCC97CEE889AEAD5D60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 0C51
Signing time: Sat 16 May 2026 09:01:10 +0000
Manifest this update: Sat 16 May 2026 09:01:10 +0000
Manifest next update: Sun 17 May 2026 09:01:10 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: zF8Vou5xTFta/T4OTXlMaaraWcuEOM3Bm33ze5ZKcB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:a2:a1:58:26:dc:c9:7c:ee:88:9a:ea:d5:d6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: May 16 09:01:10 2026 GMT
Not After : May 17 09:01:10 2026 GMT
Subject: CN=0fa75dcf55cf2bd1d7fb5afe2a5873da19be3288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:6e:47:9b:65:ff:f2:00:a0:0a:a8:36:64:
e1:89:37:6a:eb:75:26:e6:8a:7d:32:57:b7:45:d5:
3d:6f:ff:97:c3:c6:ef:44:2b:f7:f0:09:5d:12:90:
d9:c4:f5:52:49:88:66:de:6c:ad:f4:6b:6a:11:ab:
a3:50:37:15:cc:c3:fe:f3:ff:87:fd:72:c2:a7:c9:
7c:cc:b0:46:f8:42:34:3d:ea:e4:b1:93:3d:6f:d4:
4c:72:de:4b:9c:b8:b7:ee:7c:9f:45:d8:02:50:78:
26:26:40:be:0e:ef:dc:47:20:0a:11:a1:09:4f:f7:
3a:3d:12:a5:1c:22:4e:49:14:bb:3c:67:fa:c0:c3:
03:10:3d:ce:31:c5:a1:15:24:f2:69:94:3b:51:09:
3d:2c:4c:bb:75:f4:60:e3:b8:ec:5c:4a:f5:aa:d1:
32:dc:91:5e:62:a9:85:f6:cd:d2:7e:9f:cd:bf:74:
92:18:7d:ee:49:78:1f:42:26:8a:4b:bb:93:1d:21:
d0:79:73:f5:86:69:8b:40:ad:4d:ed:f2:90:6b:b7:
cf:cf:83:42:19:ed:b8:dc:53:f9:41:90:89:c7:66:
54:e8:a6:28:dd:ae:97:7c:1e:99:5a:34:d8:97:22:
e5:12:83:b3:64:fc:bc:fe:97:ab:aa:7a:65:d6:0a:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A7:5D:CF:55:CF:2B:D1:D7:FB:5A:FE:2A:58:73:DA:19:BE:32:88
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a5:7e:d3:10:49:7e:93:e3:37:e4:ef:96:a2:4c:f9:02:a2:
4d:17:89:69:5e:55:7a:fe:58:a3:d5:0a:9f:d8:b2:81:f4:aa:
05:e2:f0:e5:d1:48:f5:01:dc:7c:79:53:13:b5:11:39:f0:49:
ed:3f:60:55:ba:a1:8e:03:d4:0a:19:ab:cf:d6:47:79:36:2d:
07:6c:7d:95:29:7b:0f:8e:3a:c0:e4:db:3b:8d:7b:73:98:1b:
4c:60:62:7c:9a:82:fb:f8:ce:1b:80:4c:23:31:dd:47:e2:67:
61:ea:bb:ac:ce:a8:94:a2:a7:a4:84:86:aa:0c:62:92:85:47:
a6:db:7c:a1:49:45:41:ae:89:14:a2:08:20:fa:84:ed:77:2d:
8a:fe:1a:2e:a3:44:d7:72:4d:d6:40:11:cb:01:bf:6f:5f:fc:
20:d6:c2:12:24:5f:96:48:13:d6:1a:85:02:85:2c:3a:78:08:
9e:0b:90:c4:0c:5d:d9:0b:70:0f:0b:48:9b:1f:e7:36:06:42:
63:c5:2c:60:63:73:70:b9:00:1c:89:a6:f3:77:41:d3:df:18:
56:53:d9:42:83:60:03:8d:c1:05:1e:89:ef:ba:64:fa:bc:92:
ea:86:46:1f:40:7f:3c:ae:df:9a:31:61:24:95:fe:ba:85:4f:
ea:91:5a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:24:55 2026 by rpki-client