Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
File: H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json)
Hash identifier: sCrS1oUeJTmwCTSg7irwlFK4+FMuyTKaEU+a2aVO+9k=
Subject key identifier: D2:56:C1:66:04:2F:2D:A0:1E:E4:ED:B2:0D:09:EE:B2:DF:96:AE:66
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 019D390A136D65C4E67949558D5C202A0D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
Manifest number: 09A9
Signing time: Sun 29 Mar 2026 10:00:54 +0000
Manifest this update: Sun 29 Mar 2026 10:00:54 +0000
Manifest next update: Mon 30 Mar 2026 10:00:54 +0000
Files and hashes: 1: 3lrznUDu_RYJXoCA6T2-RqC6f2U.roa (hash: hPVXT+slJzISzm2tkyQwcR1eVSvzD3ViRToSxorCndY=)
2: C_5yyZCFvKCe1q25gF_5oZ_pygY.roa (hash: blUVsXaM11h0aXpR0/ZhyzARymiUeJDD6sZq8PuA4SY=)
3: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: Y6YmSezrg61QT+Sam940DYGchVRyMVLUh1KQYw7j/j8=)
4: U7dOPr8aIxZqqFvoN6CicfjLnZI.roa (hash: va8TN3ROTz1PexP26HjmTHBuqhoh3cPlg+O3J7QZ94E=)
5: qoYEAqhri4bUdYVpI1skjqF8iFo.roa (hash: XRgJrR2oLoLBzNI7/ZXQmYkUAt4y3ZosqwuZaOVv078=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:13:6d:65:c4:e6:79:49:55:8d:5c:20:2a:0d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Mar 29 10:00:54 2026 GMT
Not After : Mar 30 10:00:54 2026 GMT
Subject: CN=d256c166042f2da01ee4edb20d09eeb2df96ae66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a6:4f:46:15:7f:39:5a:07:4e:c9:45:78:9c:
9a:06:c9:0e:75:ff:bb:24:53:93:a3:78:d0:4a:45:
1a:c6:0d:5a:eb:52:63:76:ca:22:04:1c:64:27:8f:
53:1f:19:a0:0f:1d:0a:d0:72:f8:f7:5f:87:82:25:
c5:b4:7c:0c:96:4e:41:46:3f:cf:08:2b:a8:bc:c1:
b8:aa:51:03:bd:e2:d5:d0:06:90:0b:70:48:01:9c:
0b:c5:d8:23:cf:ce:5b:9a:54:29:72:5e:57:2d:5c:
06:da:d9:b5:87:1c:f5:14:20:57:77:a7:5b:ca:1d:
ee:e5:0e:44:c4:bb:60:96:73:cd:b8:44:96:a4:6b:
1c:8c:f2:1b:d8:1e:0a:0c:50:68:99:b7:0b:70:e3:
d9:53:f0:54:19:c5:96:ce:44:07:4b:64:33:17:6a:
ad:ec:fe:ee:9f:8c:62:31:81:f4:bc:52:4c:e4:d5:
ef:80:df:43:54:5c:15:8a:f1:cc:f2:a8:3f:72:ee:
4e:9e:a6:0f:42:cd:0e:bf:bc:af:28:cf:c4:06:fc:
e0:b7:b9:31:19:43:28:3b:9e:12:69:c2:f0:12:f0:
63:ed:f0:ca:1b:6b:60:d4:07:c3:fb:11:6e:51:c0:
df:43:22:bb:be:be:6a:bc:ff:19:f6:a2:94:a4:d1:
de:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:C1:66:04:2F:2D:A0:1E:E4:ED:B2:0D:09:EE:B2:DF:96:AE:66
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ad:d4:c2:3a:6e:5f:56:32:d4:c8:41:58:7e:2f:68:1b:a9:
7b:e6:7e:1c:bf:e1:b8:17:f2:ec:3c:f0:11:76:f4:fa:50:f1:
49:fc:63:cf:81:19:dd:53:33:1f:cc:0d:b7:19:30:31:ac:a9:
a6:91:7f:b3:cb:9b:24:33:29:4d:56:cc:55:ff:88:7b:3e:61:
56:3f:db:bf:52:9f:ff:2d:1f:49:5f:c8:cf:ea:4b:0e:00:02:
77:bf:59:24:3e:b3:45:01:a9:a8:7c:d9:2f:4f:ef:9d:67:31:
b0:9b:6c:7d:32:1f:51:44:ca:4a:34:f4:fd:c1:9d:b3:df:90:
6a:95:b4:12:97:15:26:d9:8d:8f:c2:e7:5f:c1:c4:0e:19:ad:
92:07:b0:46:fe:e5:36:b1:59:58:b5:dc:08:06:26:cf:d7:04:
5d:08:98:82:8c:d2:6e:97:49:8c:1b:2f:22:6a:53:33:a8:dc:
08:15:a3:79:b8:39:f7:e2:dc:b7:eb:a8:b1:71:7f:2a:f8:96:
dc:31:6e:bf:5b:67:1d:24:24:98:6a:f9:7c:76:37:21:36:71:
8a:20:48:e0:81:d6:ac:28:24:7f:7c:1f:8e:72:a7:31:80:75:
2a:22:8d:5e:18:10:a4:97:2c:04:d5:7d:1c:69:42:14:7a:b0:
27:e2:45:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:14 2026 by rpki-client