Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
File: h16pmc28YATHGlRwyg7HrnOCCPo.mft (raw, json)
Hash identifier: T95OI2Ppy7uyQQp47cg9EhsfDTVb0ie0NCDtrPTc9y4=
Subject key identifier: 79:A5:F2:A6:9C:F5:F7:6A:78:E7:8B:F4:F9:4B:06:33:29:C4:ED:0A
Authority key identifier: 87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA
Certificate issuer: /CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa
Certificate serial: 019D38D34CF9296DDADC877E725FBE1575CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
Manifest number: 07F0
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: h16pmc28YATHGlRwyg7HrnOCCPo.crl (hash: ociipA5TUvTFyQiPV6NzISe+qu2ZJtLeSJwX/0lcBsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4c:f9:29:6d:da:dc:87:7e:72:5f:be:15:75:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875ea999cdbc6004c71a5470ca0ec7ae738208fa
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=79a5f2a69cf5f76a78e78bf4f94b063329c4ed0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e4:d5:3b:52:b6:fb:4b:13:30:86:e9:2c:97:
5b:43:80:3f:14:2e:0f:cd:f5:84:07:ce:fc:59:a8:
61:59:49:18:38:81:95:32:96:0a:14:03:aa:a8:68:
7c:4d:93:63:a7:65:7d:c2:b9:76:a9:fe:98:a8:fc:
3d:50:4c:72:d0:7c:97:fe:26:3e:06:6a:96:e5:31:
01:a9:5a:45:6d:c1:d5:bc:bb:9c:78:9e:87:78:25:
27:7e:4f:51:a7:9e:ad:05:06:e3:b3:37:fd:76:12:
c7:23:f1:ab:0e:e5:d6:b5:03:e8:0d:f0:94:04:69:
b4:e1:1e:54:4f:fa:19:c6:fc:71:19:83:65:ec:3d:
73:ac:8c:3c:d0:8a:02:ff:a5:e8:5f:1e:d4:34:83:
0b:9b:90:1a:fd:a0:37:23:ed:2d:ef:6e:cc:4e:c5:
95:61:5d:62:02:17:86:08:28:af:76:27:8b:bd:33:
60:e7:2f:f4:e2:0f:92:56:4c:e1:45:5b:68:20:92:
fa:94:c6:3a:5a:2f:da:39:25:63:3a:87:82:db:b9:
b6:95:26:4c:28:25:7f:15:eb:61:21:93:08:3a:f6:
14:5c:58:72:bd:9c:70:db:7f:8e:dc:fe:2a:5b:ce:
39:1f:8a:11:09:9a:19:e5:c8:57:93:73:96:2b:ba:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:F2:A6:9C:F5:F7:6A:78:E7:8B:F4:F9:4B:06:33:29:C4:ED:0A
X509v3 Authority Key Identifier:
keyid:87:5E:A9:99:CD:BC:60:04:C7:1A:54:70:CA:0E:C7:AE:73:82:08:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h16pmc28YATHGlRwyg7HrnOCCPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/687f10-1744-49df-bd7e-4d12fd25d978/1/h16pmc28YATHGlRwyg7HrnOCCPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c5:16:4e:3c:99:60:0a:3f:bd:75:a1:5e:a6:0f:d7:36:a5:
00:82:27:31:a6:32:7e:2d:52:7f:ae:7e:d5:8f:42:a7:a0:e3:
de:8b:39:13:a5:7c:f6:25:68:c1:19:b3:cf:af:3a:86:55:ac:
da:ec:a0:b8:87:12:c3:34:d1:57:dc:9e:bf:c4:a6:f2:dd:c9:
ac:07:cd:82:f6:a5:fb:fd:df:45:70:00:ac:44:eb:ed:20:d2:
b0:c6:d9:c1:fd:3f:3e:e9:42:25:ec:32:aa:cd:70:87:36:89:
34:8b:0c:6e:65:28:97:0e:93:6d:fa:10:88:da:ee:05:e6:40:
2a:67:d8:d2:79:2b:a6:97:7c:bc:1c:17:a6:52:a8:69:1c:1a:
1b:2d:e1:9f:65:0b:a9:5f:e0:c9:f2:5f:76:c1:81:77:be:68:
06:d9:88:df:83:f7:2a:39:7a:4e:cc:9c:3d:45:5c:20:93:15:
d1:64:46:a2:46:4d:fc:d3:85:96:86:91:d1:d2:c1:6f:a7:93:
b9:78:8f:52:88:0a:58:5a:48:6c:56:bc:dc:97:ad:eb:5b:78:
f8:d7:72:38:ae:0b:27:ae:d6:12:61:e7:24:e2:d7:64:d7:0b:
75:1b:4e:e9:e6:70:70:c5:24:d1:7c:55:6e:06:b9:fa:9d:8f:
e8:af:e6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:24 2026 by rpki-client