Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: hFvEgG0pUDhcVOyG8yV/8XGkQA+vUiz+R1h9X2UZE+Q=
Subject key identifier: CB:EA:1C:30:AB:46:65:88:FA:B6:7D:6E:D0:4E:DB:FC:EB:3E:F4:E8
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 019DCE630A49CFAD96F9DD1696834B798F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 04F2
Signing time: Mon 27 Apr 2026 10:01:30 +0000
Manifest this update: Mon 27 Apr 2026 10:01:30 +0000
Manifest next update: Tue 28 Apr 2026 10:01:30 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: zEyYNlgW+fRo9KU8XgG6SK2NqikNZ1uNpurjXDWOIhw=)
2: PchT168ujFib-nY79tBpP-zJgdY.roa (hash: X54RZoJH7rp6pAWMbh3u6FOekQubaYZ6ugL/JB3twaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:63:0a:49:cf:ad:96:f9:dd:16:96:83:4b:79:8f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Apr 27 10:01:30 2026 GMT
Not After : Apr 28 10:01:30 2026 GMT
Subject: CN=cbea1c30ab466588fab67d6ed04edbfceb3ef4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:a2:ed:68:ed:36:3e:d8:7f:a1:e2:d3:99:
21:95:1e:45:a6:6b:e5:fc:90:17:a3:89:9c:44:f6:
91:4e:6f:b7:0b:9d:a4:95:21:8b:d7:ee:78:d2:4b:
6f:97:d0:88:a6:21:08:fa:41:69:d3:d3:66:77:56:
24:ba:e2:fb:69:4f:29:e8:04:b5:a8:51:4b:84:43:
5c:e9:a2:5b:4b:c8:e0:5a:14:8b:04:60:b4:b8:e3:
33:62:50:ca:46:21:c7:da:2c:0d:01:2c:29:11:7e:
2e:d3:53:b6:d3:35:e9:83:e4:91:3a:e5:d9:de:3c:
68:b1:d1:3c:b4:98:45:7d:3b:22:68:be:73:b1:07:
4e:be:0d:20:d2:f7:91:4b:2e:4c:10:45:e3:05:c7:
c2:10:ee:dc:ef:2e:92:f9:32:9f:bc:44:86:91:e9:
e1:b9:a6:2c:f0:7b:c3:e4:aa:7b:ff:37:84:a0:ee:
8c:51:ee:07:81:c2:10:6e:a7:0f:ab:20:47:65:3a:
ee:bd:3d:02:e9:aa:29:4e:74:61:a3:55:1d:e0:74:
02:d9:65:05:2e:a8:64:83:11:cd:af:53:41:8e:7c:
2c:0f:3a:ac:7e:2c:f0:37:2d:1a:4e:d8:e9:a3:2e:
44:a1:12:28:e0:fa:f8:b6:65:ec:98:20:e9:1b:d5:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:1C:30:AB:46:65:88:FA:B6:7D:6E:D0:4E:DB:FC:EB:3E:F4:E8
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:90:ab:98:f4:b4:7b:16:f5:9d:26:e1:b5:68:b0:06:0b:c0:
53:1d:b7:e7:e5:9a:95:d0:9e:02:0a:c4:38:d0:c1:3d:1a:48:
b4:54:43:6c:c6:4c:4c:e8:cf:e3:87:c5:4e:83:4e:33:58:40:
52:1f:f8:81:7b:80:99:d6:99:85:83:8f:97:2b:b9:27:39:7b:
f5:49:9e:d1:ae:87:af:89:e5:07:bd:1b:7f:07:1b:b2:c7:ea:
08:30:4c:05:ba:51:22:2d:ef:de:87:58:43:88:80:62:34:81:
a5:58:a1:56:4c:33:9a:b6:2b:56:c5:4e:eb:9a:1c:e1:c7:bb:
b9:d7:b7:e9:44:f2:52:b9:33:65:b6:80:32:b2:c3:d5:65:5f:
1e:c0:18:11:8b:b0:fa:10:e8:61:b8:dc:d4:7f:7b:11:50:12:
44:56:d2:e2:0e:c1:dc:66:64:bf:fb:05:5c:eb:b0:e2:c0:66:
95:9d:06:27:5d:d6:d6:08:79:05:00:36:71:5f:da:ae:44:8d:
74:a9:3e:a5:73:c4:5f:b9:7b:79:09:50:dd:97:ca:15:c7:03:
2e:d7:f1:23:0a:47:f6:6a:b8:2d:15:5d:ba:12:41:bc:b6:01:
00:28:a4:62:9c:06:42:5a:e0:ea:14:92:eb:24:d8:c6:01:93:
15:39:91:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:47 2026 by rpki-client