Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
File: H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft (raw, json)
Hash identifier: X9Q5ut6Xi5TlWosd2hBfjUMm33BgIxGJBjqu0ctY9rM=
Subject key identifier: 7F:65:02:19:19:58:2E:4D:AD:CA:8F:8C:F7:21:3B:65:C3:8A:18:D7
Authority key identifier: 1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
Certificate issuer: /CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Certificate serial: 019D408C6333D74DB9AE86C51DD4DD45A4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
Manifest number: 028E
Signing time: Mon 30 Mar 2026 21:00:35 +0000
Manifest this update: Mon 30 Mar 2026 21:00:35 +0000
Manifest next update: Tue 31 Mar 2026 21:00:35 +0000
Files and hashes: 1: H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl (hash: gMyM8LKc0EtllOa1W7JcEgi8d60oqZMnK3E55+AHR2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:40:8c:63:33:d7:4d:b9:ae:86:c5:1d:d4:dd:45:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fdd87ab1154fed5f9bd2b8b551a152b1275c001
Validity
Not Before: Mar 30 21:00:35 2026 GMT
Not After : Mar 31 21:00:35 2026 GMT
Subject: CN=7f65021919582e4dadca8f8cf7213b65c38a18d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8a:73:53:1b:91:f0:a2:e3:7b:10:c4:e8:17:
99:2d:4a:af:c1:5c:b4:9c:66:0c:ea:11:5a:bc:4b:
5c:cb:ce:e3:e2:8a:49:cb:47:df:4c:62:a3:34:5c:
da:2c:3c:52:97:d8:e3:ab:04:35:a5:e4:72:e3:6e:
33:b8:0c:37:bc:64:ba:bb:af:73:ff:0b:f7:48:09:
c0:b5:0b:b2:ce:a3:a0:f9:dd:79:7c:0f:d2:ae:1b:
de:90:76:d7:ec:6c:60:e5:98:67:c4:7b:b9:ce:4c:
c4:94:b0:dc:91:72:9b:19:2a:b1:e5:1d:f2:15:2a:
36:e0:50:1f:04:61:22:cf:51:11:55:bb:d4:6c:6d:
d0:0c:63:9c:d7:7c:03:5a:19:99:a6:48:40:34:83:
f4:b6:9b:f2:82:a0:81:b9:06:b5:30:51:5c:ff:da:
a4:db:0d:18:77:32:4e:ae:67:ac:08:de:20:c4:eb:
aa:23:36:64:68:19:ac:b7:c5:ca:5c:20:02:ef:1b:
42:30:a1:4d:ae:e0:7f:0c:12:72:76:7a:70:62:1a:
45:20:48:b4:af:89:f2:52:55:82:8d:d6:4b:cc:a3:
6f:9a:c5:cb:01:39:15:65:13:55:aa:72:67:46:5c:
e4:cf:b0:df:36:d3:77:9a:ff:2a:76:a7:db:66:bf:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:65:02:19:19:58:2E:4D:AD:CA:8F:8C:F7:21:3B:65:C3:8A:18:D7
X509v3 Authority Key Identifier:
keyid:1F:DD:87:AB:11:54:FE:D5:F9:BD:2B:8B:55:1A:15:2B:12:75:C0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H92HqxFU_tX5vSuLVRoVKxJ1wAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/966ba4-e683-4b04-9f45-b417ac9bbfa3/1/H92HqxFU_tX5vSuLVRoVKxJ1wAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c6:51:2a:35:df:44:7c:b9:c1:44:7a:20:17:90:f2:6a:31:
49:f1:c6:bd:56:9b:b9:a0:53:51:87:d2:20:26:ce:31:df:82:
08:09:7b:2e:fc:ec:c1:b4:d9:80:50:11:22:23:50:99:f7:d0:
5c:48:2e:8c:17:12:cb:b4:f3:e5:80:3f:36:e2:ee:74:f7:2f:
96:e1:79:79:28:61:6d:82:e9:7e:e0:72:c1:ab:7d:a9:2c:e1:
84:83:22:3d:f0:5c:c4:79:c5:0a:1d:39:b5:db:9e:f2:88:33:
c7:30:57:94:df:02:71:54:d2:34:0e:5b:ae:a5:50:0d:d3:86:
48:58:94:b4:14:1f:29:e4:c8:0d:61:1e:6c:2b:8f:7c:f5:72:
b3:5f:59:c8:af:7c:42:4c:f4:32:9b:c2:25:0a:4a:cc:a9:ec:
31:77:98:cf:2f:09:c7:9d:b3:dd:55:71:57:43:85:f5:9d:76:
96:78:ea:3d:6b:43:2e:df:a2:d5:f3:bd:5f:23:a9:06:41:40:
59:ce:ac:08:81:b0:c1:9d:39:1a:e6:f4:9d:a0:8e:89:82:36:
78:0d:95:60:e8:96:e7:e0:dc:a5:08:64:68:12:8b:8e:14:3b:
5c:f2:0d:b2:f4:4b:b1:28:89:58:8b:7c:86:02:d3:14:17:70:
2e:fa:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 08:10:27 2026 by rpki-client