Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File: H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier: 25hTzs29RoM9IgsUdNSUVLro2Dnm9ymCtp1Nurl9zAk=
Subject key identifier: C2:96:C7:E9:F1:EB:CB:B5:7A:72:65:BD:3D:20:4A:CA:A8:E1:CD:A4
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial: 019D38656FADCE0E3DD1420EEC971ED69038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number: 17E6
Signing time: Sun 29 Mar 2026 07:01:04 +0000
Manifest this update: Sun 29 Mar 2026 07:01:04 +0000
Manifest next update: Mon 30 Mar 2026 07:01:04 +0000
Files and hashes: 1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: WwdR9877mfMEDO6asRZQ6q2mYnA6fgZdvDSnBAgSudY=)
2: XVtEjdzoGD2Cf2ZS_WqTxpdKmHw.roa (hash: PLd3AjjjU/YjEzgvUwnUvjyB10O7EBQqmUUYsFik7AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:6f:ad:ce:0e:3d:d1:42:0e:ec:97:1e:d6:90:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Validity
Not Before: Mar 29 07:01:04 2026 GMT
Not After : Mar 30 07:01:04 2026 GMT
Subject: CN=c296c7e9f1ebcbb57a7265bd3d204acaa8e1cda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:19:32:29:97:f1:1f:49:0a:1c:62:f5:4f:
ff:f9:48:b2:c8:cd:1a:62:d2:c0:29:28:7f:f9:02:
8f:26:82:f7:5f:08:96:35:13:7c:25:29:1b:2f:4d:
00:ac:24:7f:58:84:99:01:6f:83:c9:da:d6:17:1c:
4c:48:08:49:5e:71:f3:f0:89:f6:9b:2c:8a:73:90:
56:10:fa:75:f1:cb:09:1a:23:79:56:19:f4:59:b8:
6c:a3:0f:7a:5b:27:74:07:89:25:18:48:9a:fb:e6:
67:00:a9:e8:a7:5a:12:73:e2:07:af:a9:03:6b:e6:
2f:59:34:73:d0:71:0d:e9:53:ec:c6:09:35:e5:62:
7b:48:7b:0e:ea:02:be:2a:b2:db:b6:f8:23:82:48:
74:68:b7:b0:44:62:cc:2d:40:ad:c2:c2:6c:1e:9e:
28:f1:12:7d:97:24:2f:8e:95:32:83:78:ae:45:69:
e2:67:12:5c:d5:8a:e7:7b:6b:08:43:57:60:9e:05:
53:5d:58:d2:22:00:45:63:95:63:9b:a4:bb:f8:6d:
3e:c3:87:01:d0:16:c9:83:3b:ca:a6:96:5c:ee:3e:
45:70:e1:e0:06:2d:30:19:f0:30:bc:b5:0c:37:f9:
72:83:d1:72:1b:14:bc:0d:ba:0a:21:48:05:36:3d:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:96:C7:E9:F1:EB:CB:B5:7A:72:65:BD:3D:20:4A:CA:A8:E1:CD:A4
X509v3 Authority Key Identifier:
keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:12:9d:a3:b6:dd:e3:36:9a:33:d3:e6:c1:d7:ea:ed:63:9e:
b6:09:db:31:86:dc:95:fd:d8:1c:99:5b:b5:80:3e:6d:e8:28:
ad:7e:83:a7:e9:ad:14:1c:86:75:fa:ed:bf:7b:72:93:99:39:
74:2b:1d:41:c2:7a:b4:43:8e:ea:12:18:e7:82:60:21:7c:0c:
77:37:dc:ca:d1:a1:56:77:e2:33:b7:a8:20:5d:d3:33:3e:fa:
58:2c:15:1a:12:24:ab:46:60:ba:a2:47:1b:4a:64:24:c6:b5:
e4:90:7e:c2:da:67:7f:d8:3d:af:66:46:ea:6d:8f:28:f2:84:
2e:16:49:a8:33:72:78:97:96:94:17:4b:6a:10:a5:78:90:ec:
c8:4d:24:bc:fe:2e:c3:d2:87:74:9b:61:26:af:d6:0a:55:9e:
3f:f7:c6:5f:48:6f:8a:31:21:3c:c6:d4:8b:76:00:dc:c1:85:
02:9b:29:80:d4:0c:c3:70:e8:f9:70:c9:e0:f3:ed:40:d0:47:
f5:55:93:97:31:f3:7c:26:b4:4a:19:b1:68:bd:6e:b6:38:26:
4b:7a:63:99:32:6e:cc:f9:0b:d9:1c:e9:cf:0b:14:d7:e1:e3:
72:75:d9:56:2a:c4:e0:3d:4b:d6:9b:8e:b0:76:cd:22:03:80:
80:f9:fe:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:14 2026 by rpki-client