Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json)
Hash identifier: Q+1TNgn9XmarmT+EPzwmIYn1jsc58+ba+b2DVcY2b+o=
Subject key identifier: 86:25:8A:FA:B7:7E:41:6A:8B:13:00:F9:C6:94:E0:69:F8:33:CD:5A
Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Certificate serial: 019DA75580866B598D2C93073BC91EFC0F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
Manifest number: 0261
Signing time: Sun 19 Apr 2026 20:01:31 +0000
Manifest this update: Sun 19 Apr 2026 20:01:31 +0000
Manifest next update: Mon 20 Apr 2026 20:01:31 +0000
Files and hashes: 1: H6uqUGEMkw_GDxczJD1M696P_zE.roa (hash: nWnw8H8sn82+YCkD2O0kI6uMQ5WeKNqhPpnI/ZrVopY=)
2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: HRl+u0oE84Sjy1l01TD+O9F3iyjZCE5alTd5soHHm7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:55:80:86:6b:59:8d:2c:93:07:3b:c9:1e:fc:0f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Validity
Not Before: Apr 19 20:01:31 2026 GMT
Not After : Apr 20 20:01:31 2026 GMT
Subject: CN=86258afab77e416a8b1300f9c694e069f833cd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:ab:c9:f3:19:4e:b0:d9:c4:e9:b4:f4:84:
5d:89:30:86:b2:fc:45:e0:04:4d:bb:44:77:8e:d6:
c1:65:14:1d:50:c7:2f:44:ec:43:04:0c:83:13:2f:
89:60:a7:d3:ec:13:1c:ab:e0:b0:d1:8f:ce:2d:58:
35:ac:ca:00:50:b0:c7:35:9a:c9:c2:f9:e6:cb:a6:
20:5b:a8:7e:b6:92:fe:cf:f9:77:6d:04:d8:91:6c:
af:4d:1b:8a:91:2e:e4:57:83:84:c0:8f:ae:fe:87:
33:1d:18:ed:52:e0:f5:c0:c5:36:b5:56:27:1b:c3:
b3:1f:b2:a0:90:4b:99:4e:9b:63:7b:aa:31:f4:45:
58:e4:96:fd:3a:5c:01:f8:db:fd:cd:75:e0:8d:6b:
e9:9e:1e:5f:b0:df:22:76:3b:a7:38:2e:39:89:66:
c7:ae:d0:2f:4c:54:44:50:91:9c:7d:fa:93:bb:05:
72:e9:07:81:3e:e0:e9:3f:98:a0:30:09:9e:cf:89:
b7:85:70:dc:8f:1c:aa:93:cf:75:ee:4d:4a:2f:f5:
17:6d:84:17:ab:df:a3:67:8a:f9:40:93:d9:47:6b:
4d:9d:06:78:de:d1:a5:87:31:1a:2a:0f:2a:17:1f:
dd:88:bf:ab:b6:de:ba:3e:9a:44:51:b3:3c:77:da:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:8A:FA:B7:7E:41:6A:8B:13:00:F9:C6:94:E0:69:F8:33:CD:5A
X509v3 Authority Key Identifier:
keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e3:48:60:5e:49:ef:6a:c9:fc:97:2b:cc:b0:72:42:e3:b9:
67:66:0f:16:08:a1:7e:26:cc:6d:f9:70:51:b7:e4:25:1f:c0:
a0:70:a8:7c:31:77:be:d9:ee:86:5d:fd:66:04:e4:d2:31:91:
ca:59:1a:e6:50:fd:95:93:7f:49:8d:5e:52:40:be:34:c1:6c:
03:49:8c:58:10:1e:df:db:8e:4a:0b:93:d4:29:2e:46:76:0e:
11:8e:31:97:01:8a:25:f8:53:4e:97:f5:11:27:da:bb:be:d5:
84:be:b7:b1:f5:ec:36:2b:d4:97:b9:a9:f3:2c:bd:8b:dd:6a:
cf:09:44:40:1f:05:6d:0a:aa:e2:85:58:66:7b:1f:a0:c7:6a:
3b:13:26:4b:13:83:44:1d:d1:52:d4:9d:15:7e:16:01:09:6c:
ed:57:1a:06:c6:be:1f:80:0d:ae:23:c6:af:de:72:f0:fd:f7:
ea:10:cd:77:ef:6e:86:a9:39:b4:11:e0:82:3e:8f:8f:5e:00:
a2:8f:38:07:c1:cd:3f:0a:9e:37:43:b3:e9:d0:67:03:e8:5e:
90:53:f8:bf:bf:7d:48:4f:08:8a:83:82:32:15:70:53:f3:0f:
7c:8b:75:c9:cb:3d:e3:35:09:3e:35:e4:8c:1a:06:e2:e9:e1:
9c:3e:aa:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:57:07 2026 by rpki-client