
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json)
Hash identifier: ph2ZUX7PCGrsdW3Yn6tiPPhVbr6vIryiCa7MWzODCew=
Subject key identifier: E3:8A:88:03:F4:FC:56:76:18:96:DE:2B:E9:F3:01:76:5B:DB:65:93
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 019D38D33E06AE25F80018B4679B6599BF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: 6dTjaeSW/3WGcuNX/WFImKz/8tQ5YD/KjjKU+0JxMJE=)
2: ceYmE1oaPyKVZRonjYP1PTafzn8.roa (hash: 0/TxJlznPul/CoRcib1v0fGMrVkoJzg/UmlQz2/FZNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3e:06:ae:25:f8:00:18:b4:67:9b:65:99:bf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=e38a8803f4fc56761896de2be9f301765bdb6593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:e7:7f:88:d3:23:25:9a:a6:49:37:92:82:
f0:de:cc:bf:2f:a5:9b:37:7e:a5:77:09:64:71:d7:
3e:f1:9a:8a:23:d2:81:38:f6:a5:97:f8:3a:c6:16:
54:b4:40:ec:a5:7e:36:a7:a1:32:9f:ea:a3:96:47:
5b:a4:61:3c:1b:3c:2e:4f:4f:98:bb:cf:74:5a:00:
9d:a1:d6:b6:cb:8c:f3:ae:5f:75:3b:d4:75:76:b9:
4c:21:bf:20:a7:8b:2a:f6:4d:36:2b:4b:cb:49:32:
89:e4:ba:77:c7:b5:a3:f9:fb:e5:f7:72:3f:cf:8c:
9d:2e:37:9a:ac:91:f8:95:b5:0a:39:d6:56:bd:21:
87:c7:b3:3c:72:52:ff:0c:c4:bf:9c:44:e7:a5:85:
fb:d2:20:0a:ea:c0:25:68:ed:ce:db:1a:7e:45:63:
8b:b3:c5:d6:22:eb:ea:01:c2:7c:08:12:57:9e:47:
08:14:95:7c:10:bb:36:e4:ed:9e:91:7b:bc:af:05:
d2:15:51:6a:b7:ce:b4:11:9e:a1:aa:aa:03:ba:71:
0b:ad:ed:9a:55:ab:fa:85:cc:5b:21:5a:30:0d:57:
16:bc:fe:32:27:70:9a:06:e2:75:a0:46:de:80:36:
56:bd:94:4c:24:98:e2:f9:9f:1e:70:e6:62:6e:14:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8A:88:03:F4:FC:56:76:18:96:DE:2B:E9:F3:01:76:5B:DB:65:93
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:01:0f:57:a3:99:62:79:cb:ce:c4:72:5b:a3:6c:59:02:26:
6c:06:9c:c1:17:4c:67:69:ef:c5:32:ca:8c:07:98:b8:ed:ff:
73:19:de:4b:88:2d:f4:fa:9c:cb:85:c6:1f:c2:06:39:80:c5:
fe:e1:1e:f9:a5:9f:56:ba:2f:38:de:c0:bc:1a:c6:70:de:43:
ab:08:08:a7:bc:85:9a:5c:9d:26:a9:0c:48:78:b0:40:af:fc:
e6:36:fd:7f:59:04:df:be:6e:e5:87:97:3f:aa:6b:e5:09:7d:
12:42:42:e8:b4:6e:93:56:de:f6:af:ad:11:a9:d4:34:d2:5d:
d6:ab:de:b0:b8:ce:2c:6b:a4:55:97:cc:35:f3:a7:ad:96:a2:
7c:da:21:07:4c:6b:31:1f:f2:52:43:d4:5f:cb:60:0c:09:32:
1c:d1:17:7e:59:a3:03:8b:6c:9f:31:72:b0:de:87:3c:df:4f:
a1:0f:8b:09:3f:96:08:cd:14:cb:ad:22:97:12:10:73:e4:72:
52:c5:8d:00:00:6d:87:15:6c:2c:9a:6c:c7:3b:4e:a0:2b:3e:
5c:a7:80:28:8c:a6:e0:49:49:3d:52:91:3a:35:a6:4f:7b:24:
e2:e9:a1:6d:de:34:91:dd:42:9f:5b:11:fb:b7:98:24:3a:3a:
84:96:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:33 2026 by rpki-client