Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: LhVCknm4KcsZrHos5v1+WDlySMaHnxRgpA5PERjln90=
Subject key identifier: D0:1E:14:43:C0:BB:A8:E1:CF:27:ED:C8:47:FC:C1:5E:D6:89:3C:7E
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 019D37C0B94E6FB1F285171F60F3145F6576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:01:10 +0000
Manifest this update: Sun 29 Mar 2026 04:01:10 +0000
Manifest next update: Mon 30 Mar 2026 04:01:10 +0000
Files and hashes: 1: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: 8DEaxftLE0KiPFuHne3Y5CNllGGSSSh4E5X1RMsQmHM=)
2: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (hash: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg=)
3: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (hash: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b9:4e:6f:b1:f2:85:17:1f:60:f3:14:5f:65:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Mar 29 04:01:10 2026 GMT
Not After : Mar 30 04:01:10 2026 GMT
Subject: CN=d01e1443c0bba8e1cf27edc847fcc15ed6893c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:82:ba:d3:16:f2:e2:f7:80:6e:09:7c:a9:
42:f8:a1:7e:48:d7:8a:4e:7c:2a:aa:cd:f9:6e:10:
66:df:a4:37:3e:07:d2:05:76:26:57:b4:79:78:bc:
e8:38:8a:25:0d:e2:27:1a:f5:60:d9:79:09:a8:79:
a3:a9:89:3b:f9:13:d3:c1:93:8f:cc:a3:35:dd:02:
e7:8d:c0:cf:d3:89:7a:a4:04:3f:6d:e3:f7:32:ac:
6b:01:bb:4a:44:89:03:7a:05:e6:a5:01:5b:b4:c5:
a0:2f:3a:f1:00:e5:cb:49:c0:b5:55:5a:23:a9:89:
50:20:e3:4e:65:4a:b2:75:50:dd:97:b0:94:66:cc:
b0:50:2b:b4:89:1f:75:25:93:fa:05:da:0f:25:16:
14:6d:ee:3a:8a:b0:b9:20:ce:8c:08:23:5e:e6:55:
ba:56:63:a7:57:59:a6:8c:2d:e2:a2:f0:08:32:38:
1c:4f:3e:6d:fb:65:e1:1b:30:c0:d3:ec:06:23:d0:
1c:4f:1f:c4:a9:50:eb:7d:74:5f:ea:93:3d:c7:5d:
66:cc:ac:c1:cf:66:af:7b:31:99:63:b7:82:ca:10:
fb:5a:d8:0c:87:5d:d0:e1:60:a7:8a:2e:37:b1:a4:
0f:4e:30:34:86:d4:4e:9a:bb:4d:ce:ca:66:02:c1:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:14:43:C0:BB:A8:E1:CF:27:ED:C8:47:FC:C1:5E:D6:89:3C:7E
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d7:41:6a:6f:91:8a:7a:8a:3a:6d:ac:9f:81:cd:82:9a:32:
2e:5d:4f:d0:25:8f:f0:6c:03:2c:af:8d:37:bd:22:0e:29:79:
3b:25:de:4a:94:8e:00:c9:db:b6:25:3b:ba:79:49:31:12:b4:
a8:18:49:79:8b:2a:7c:f4:41:c3:53:fc:9e:1e:46:e9:47:fe:
63:5c:2f:06:47:42:0f:b2:26:d1:85:77:fc:aa:d4:89:54:28:
4e:49:19:0a:52:68:62:cf:f5:79:f5:22:36:0a:e3:73:dd:1e:
ab:5e:64:3e:9d:88:fb:40:7c:a2:b7:89:50:8c:8b:2b:6c:63:
75:7c:87:c6:e8:64:b6:63:0d:0a:d4:06:4c:c4:1b:ba:33:48:
6f:90:a3:bd:64:69:35:35:f4:01:93:e3:b1:42:15:65:a0:a6:
66:69:2f:be:94:7f:5a:d7:c0:32:ed:55:4a:ff:06:37:c4:c0:
e9:e6:0e:af:f0:66:b0:9c:73:6b:fc:9b:f7:cd:4f:7b:c1:04:
7a:1a:0e:07:71:3c:5b:c6:e2:32:40:25:3d:56:19:f7:59:40:
21:ec:38:92:28:03:e0:b9:55:e8:17:79:71:61:2f:15:4b:e8:
50:1d:ea:ab:c6:f0:c4:20:76:8d:1b:d3:2b:67:a9:25:61:59:
17:a3:98:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:56 2026 by rpki-client