Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: kn0wsiav29ZXid1mXiDNqmauGJG7QNYn6w71fqtyCes=
Subject key identifier: 10:AC:C7:2E:B7:54:C6:9F:8B:B7:6F:E2:D3:46:03:96:A7:81:19:91
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 019CE4B5728396BEBD45E2EC390B19FC7E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 0479
Signing time: Fri 13 Mar 2026 01:00:22 +0000
Manifest this update: Fri 13 Mar 2026 01:00:22 +0000
Manifest next update: Sat 14 Mar 2026 01:00:22 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: z4WIndF+FEH6AhIpHwCHAAJ9FePEggrwSfFbRycUzDY=)
2: PchT168ujFib-nY79tBpP-zJgdY.roa (hash: X54RZoJH7rp6pAWMbh3u6FOekQubaYZ6ugL/JB3twaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:72:83:96:be:bd:45:e2:ec:39:0b:19:fc:7e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Mar 13 01:00:22 2026 GMT
Not After : Mar 14 01:00:22 2026 GMT
Subject: CN=10acc72eb754c69f8bb76fe2d3460396a7811991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:ac:ba:0d:1a:e2:f0:c9:a7:59:da:42:e9:
4c:d8:bf:60:e0:a6:d6:b1:31:f7:18:29:40:4e:79:
37:f5:20:cf:a0:4f:24:8c:bc:9c:a4:76:46:3f:fa:
17:f3:d7:da:2e:c6:1e:1c:5f:b5:0b:cb:90:b6:5a:
d5:a4:53:98:0d:ab:51:8e:4b:69:0e:b9:e6:4f:ae:
2c:2f:f8:42:41:b6:7c:db:04:35:70:d9:aa:9c:80:
72:62:99:cb:31:a2:da:87:d5:a2:31:8a:ad:c0:c5:
5c:13:7f:d1:87:99:2a:b5:43:5a:99:71:ad:47:31:
9f:0b:5a:ec:99:74:80:9b:b8:0a:c3:53:3e:5e:ac:
c6:e8:44:28:68:2e:f3:74:42:6f:ea:1a:e5:10:04:
5f:b5:3e:33:b5:2a:60:06:9c:90:11:dd:9b:fb:37:
2f:10:fa:a5:2e:07:bd:bf:64:5a:4e:8c:2a:8d:32:
cc:d1:22:dc:a8:96:65:79:95:59:38:3d:10:fd:ec:
74:07:12:16:1e:bb:09:25:9d:f0:b3:39:78:5e:c6:
8b:28:9b:7a:33:fd:55:28:6c:03:29:4d:52:1e:f2:
da:d9:99:34:0c:98:46:0e:5e:c1:2c:1d:51:45:b2:
d0:75:e0:07:e0:4e:e5:ec:52:de:d3:47:6d:87:75:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:C7:2E:B7:54:C6:9F:8B:B7:6F:E2:D3:46:03:96:A7:81:19:91
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fc:ef:29:97:be:e8:39:4a:c6:0e:d7:a4:95:cc:71:e4:f3:
c9:9f:a3:60:4f:4c:7f:56:e2:d8:6b:56:5e:04:65:b6:b2:2f:
5d:86:d2:b5:b9:51:9e:57:35:d0:8b:19:a4:d4:03:4e:a0:42:
00:a5:e9:c5:fe:28:b5:74:86:18:17:e8:06:3d:a3:2d:c8:be:
f3:ed:d8:1b:31:f9:e2:9e:c3:03:df:4b:02:10:36:bc:4d:f7:
7d:06:b6:b8:d7:5b:bf:b9:b9:9f:cd:0f:c6:90:ac:4c:0b:6b:
30:e1:bd:02:c7:3a:96:9b:e4:4e:7d:a4:d1:ac:04:ff:0e:90:
aa:58:30:29:8b:1c:03:c2:ce:35:ba:90:0a:a3:fd:de:f5:f8:
00:42:da:55:e3:83:ce:48:23:23:14:c0:b4:00:ed:81:f4:80:
5d:60:05:39:44:05:f8:89:38:f7:e4:17:87:1b:64:35:d5:ca:
11:62:46:9f:eb:96:ee:96:93:49:4e:57:aa:e7:7c:ed:2e:92:
0f:56:ca:ea:6f:0e:7e:e7:46:6c:93:0b:7a:57:64:ec:c0:84:
56:b3:50:f5:dd:59:a6:b3:88:8f:74:29:72:3d:16:58:ea:3f:
be:bf:ae:a1:f1:9f:6f:cc:8a:e1:05:b2:b1:55:2b:02:c7:db:
39:db:7b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:26 2026 by rpki-client