Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json)
Hash identifier: Rxx6/6MXoauVo4/R3dN20oEKknfAuNBIVq3GJ9t9bxg=
Subject key identifier: EA:82:D7:9E:4C:3D:E8:88:D5:BA:08:14:57:71:6D:F2:F9:B8:E4:42
Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Certificate serial: 019CBF9743B6B7A276597C5B31BCAC2D3B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
Manifest number: 01E9
Signing time: Thu 05 Mar 2026 20:01:27 +0000
Manifest this update: Thu 05 Mar 2026 20:01:27 +0000
Manifest next update: Fri 06 Mar 2026 20:01:27 +0000
Files and hashes: 1: H6uqUGEMkw_GDxczJD1M696P_zE.roa (hash: nWnw8H8sn82+YCkD2O0kI6uMQ5WeKNqhPpnI/ZrVopY=)
2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: UdJtuyjcwygGVYDIDR4PQzthnLww9k+9dyuFOR43r2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:97:43:b6:b7:a2:76:59:7c:5b:31:bc:ac:2d:3b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Validity
Not Before: Mar 5 20:01:27 2026 GMT
Not After : Mar 6 20:01:27 2026 GMT
Subject: CN=ea82d79e4c3de888d5ba081457716df2f9b8e442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:26:ff:62:4b:6e:02:d6:4a:80:b0:f4:f5:
21:da:d2:74:5e:85:f5:31:7c:ed:b5:41:83:fd:39:
6f:bf:20:27:85:b7:06:c1:7b:a4:a2:13:ea:76:bd:
d0:17:16:7b:50:18:20:69:9d:1d:4f:8e:c4:4b:39:
bf:7b:97:2f:ac:05:ad:3c:46:5b:e8:c2:58:51:c9:
e8:be:63:e3:e0:16:d8:0b:49:7d:be:f2:cf:8a:9a:
d8:7f:83:91:64:d9:9b:50:a3:a5:c1:71:cd:5e:85:
94:2c:14:40:0c:9e:c5:5d:91:0f:86:3c:13:d6:83:
f3:85:74:49:1a:61:53:44:6d:c0:8a:28:5b:58:dc:
db:88:4b:d8:c4:51:7d:f0:75:b5:85:59:7d:cf:4f:
a2:db:49:69:c5:4d:50:5f:a5:dd:08:f7:25:00:1f:
d2:48:0e:3d:77:76:db:2e:1f:f1:ef:21:88:b3:48:
3e:ec:6a:ca:5f:e7:6a:66:fa:bb:4c:98:05:bc:f3:
12:d3:d5:00:c9:40:b1:e3:60:69:c9:51:d9:2a:50:
02:de:6d:8e:46:f6:d3:f7:48:56:84:02:dd:76:07:
12:21:05:30:e4:72:ae:57:a4:3d:19:92:c8:f7:b5:
64:6b:48:8a:f8:2f:d7:2c:9f:fc:70:ef:c4:7c:90:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:82:D7:9E:4C:3D:E8:88:D5:BA:08:14:57:71:6D:F2:F9:B8:E4:42
X509v3 Authority Key Identifier:
keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:61:f6:f1:94:2a:01:6a:2f:fb:21:c1:2e:7b:e5:1b:a4:bf:
de:64:d9:e9:24:b9:cc:a6:b2:9a:a3:23:7a:63:c7:d5:bb:18:
c1:1a:e8:5e:3c:bb:c3:64:5b:fd:71:48:cb:62:70:10:cf:b4:
0a:58:a9:0c:58:e8:6a:ec:a2:7c:83:bf:49:c2:63:a8:a4:84:
c7:7f:53:dc:c7:c9:7f:2b:46:c5:61:1f:d6:99:d4:a7:69:48:
92:6f:27:a5:ba:ff:26:2e:da:b2:e6:9c:2e:bc:4d:8b:41:b7:
c5:99:58:22:89:88:9e:71:4c:a7:0a:52:06:66:b2:c7:b7:1c:
5d:e3:22:60:70:27:54:b5:d3:1c:77:e6:08:31:79:56:e5:ac:
9a:f4:6d:c1:fb:1b:ac:c4:73:fd:0a:78:e2:81:69:79:ab:0f:
61:29:18:ea:d1:29:1e:7e:49:8f:31:1f:07:cc:d0:ad:89:c1:
a2:89:70:24:4b:57:a1:43:71:89:f7:a2:27:9f:b3:56:b5:d7:
bd:6a:4a:70:4c:58:99:7e:14:14:a8:c1:1d:50:f9:e0:de:b8:
d1:2d:1a:19:04:3c:47:39:de:a2:8b:45:27:29:56:b2:1e:95:
06:59:0c:12:9a:26:26:be:28:ef:41:93:9d:5a:10:95:55:8c:
bb:91:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:04:52 2026 by rpki-client