Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: tsfNc+D8Hg7OwiEFnpypFVMhWMLPp/9t5Hhvf2Gdh7g=
Subject key identifier: 84:58:A6:5E:10:E8:6F:01:01:01:F0:5E:B7:95:65:3C:9A:75:86:DC
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 019D37525E3676858DB99C00194CB71AF6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 02:00:37 +0000
Manifest this update: Sun 29 Mar 2026 02:00:37 +0000
Manifest next update: Mon 30 Mar 2026 02:00:37 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: prMa5AZMU6uAgKTBxnAeJaRf0fYwr1N4F/dhItyIXjI=)
2: x-xatRQzbMJq2QoB7VpakVl_dyQ.roa (hash: FUFQzFRUVGUSKSoKEZzjy+oCv2v1jEvkTjPlxRoTw4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5e:36:76:85:8d:b9:9c:00:19:4c:b7:1a:f6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Mar 29 02:00:37 2026 GMT
Not After : Mar 30 02:00:37 2026 GMT
Subject: CN=8458a65e10e86f010101f05eb795653c9a7586dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:bc:83:0d:59:da:b6:21:6a:19:10:15:62:
74:c0:7d:67:35:60:16:9a:25:9e:14:07:62:d1:1c:
06:eb:ef:5a:2b:c7:c4:78:0c:dc:33:d2:f1:6c:21:
76:7a:c4:64:47:b3:af:01:2d:3c:90:d4:fe:62:9f:
f7:96:b5:83:8b:90:6d:2e:51:40:6a:07:03:f8:4b:
24:25:f1:f7:1f:22:81:1d:19:57:92:5c:3f:3d:47:
bc:1c:bf:50:05:94:20:3b:e8:a9:07:cf:06:bd:c4:
db:4b:93:cc:18:df:9e:e2:7c:51:7c:06:79:94:54:
8e:fe:21:56:b9:ca:93:f9:0d:4e:0c:99:02:bd:28:
ad:92:aa:60:d2:c2:d8:2e:a8:ff:59:3e:af:49:cc:
17:0e:65:30:3a:c7:9c:6f:25:c4:a4:64:e8:74:ef:
d0:6a:3f:b5:1e:39:09:0e:ac:1c:ea:b6:d5:2a:da:
c2:f6:9c:0b:8f:6d:d9:26:52:7a:2d:ea:f8:fa:f0:
f4:1b:c1:b5:06:9f:d1:dc:d2:90:eb:72:f5:8e:be:
14:bd:be:cf:fc:f8:48:30:68:19:a7:00:20:53:35:
cb:b9:80:49:79:5c:55:68:35:d3:09:3f:0d:ba:25:
e7:09:f4:77:75:54:38:d4:9b:a8:55:5d:54:06:8a:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:58:A6:5E:10:E8:6F:01:01:01:F0:5E:B7:95:65:3C:9A:75:86:DC
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f0:c7:6e:d1:0d:d1:5e:5f:99:b6:25:f5:d8:31:fc:dc:da:
b1:37:88:2a:c0:a6:78:72:48:3d:8c:10:8a:26:12:1b:b0:33:
0f:60:8f:8e:87:62:38:c9:1e:b0:69:64:71:1e:d9:1d:75:b5:
27:32:d1:7e:52:4b:3b:b1:cc:23:a7:08:47:f4:5a:cf:4a:5b:
bd:f9:1d:b4:57:bf:4e:75:51:24:b0:ad:28:ae:54:0d:b5:79:
38:2b:a0:c7:e9:8c:f0:0e:04:6f:79:85:a9:7c:88:90:e0:46:
5b:b9:3c:96:00:78:90:8f:1c:68:d4:10:b8:e3:93:99:b4:17:
f2:2e:01:71:86:ca:c3:aa:67:c7:cf:14:aa:81:f2:22:de:3b:
cc:55:94:05:a6:4d:2d:97:53:00:75:0a:a8:6c:a0:12:20:b3:
a6:a1:e4:05:da:f8:0b:42:00:75:b2:30:e7:52:e1:ef:8e:be:
50:dc:47:b3:d4:03:2a:4f:14:e5:c8:19:f2:bb:5b:a3:80:38:
00:2e:ed:6b:d1:37:6d:a9:1d:17:f2:c6:ec:81:00:a7:21:5c:
34:47:2e:7d:0a:26:9e:a7:54:6f:7f:23:ba:ac:0d:5d:a4:19:
56:ea:e2:48:12:72:1e:24:ad:9d:3f:cb:3a:ba:1c:68:62:7e:
03:cf:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:31 2026 by rpki-client