Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json)
Hash identifier: pCtgafnKfBkYalNrYK+keuztWFZKNicKQ+EJ61Xas7U=
Subject key identifier: 7F:14:46:3A:22:92:32:D2:5B:2D:C2:45:08:AB:84:1A:FF:BE:ED:B0
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 019D382E04B43BFE95C61EB94A8B95BB5A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
Manifest number: 09ED
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: lZWH-2ISRkDqDMQnCqDWW-98xnk.roa (hash: JDtc5t6fobEneseGSEO/aqOB7d3WkNL4mqQCpDAemQg=)
2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: RHJ5ZFRynvUXHeGr0bfMQW6f9nnzeeUWS4zGCYoWSDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:04:b4:3b:fe:95:c6:1e:b9:4a:8b:95:bb:5a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=7f14463a229232d25b2dc24508ab841affbeedb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ae:b1:b4:43:5a:91:8a:48:10:55:8d:73:8e:
51:01:b2:5e:6d:3f:f5:b8:c3:19:2c:69:eb:15:34:
80:0c:2a:70:07:85:ee:e9:e5:96:3d:d6:7c:cb:e4:
95:ff:40:a0:07:81:e6:46:29:4c:d1:60:7b:4a:93:
f3:51:66:dd:0d:fc:bc:75:fa:36:9a:b2:24:e7:4f:
bb:7e:1c:2a:6f:1b:ab:c0:34:b3:d9:f7:ba:68:81:
cd:e0:ab:6e:86:9e:76:ea:27:e4:ea:c6:99:f2:d6:
13:f8:db:6a:34:c5:e8:cc:ca:92:83:16:00:40:01:
ed:cd:9b:62:8a:05:fd:7d:50:ec:97:0d:c3:00:94:
20:c5:3a:2c:89:d1:56:b9:0e:b9:f1:e8:23:0b:9b:
4d:16:69:80:1e:29:27:ab:03:78:7e:ea:73:be:7b:
fc:8b:ab:a5:8e:04:7e:cc:df:c7:dd:13:f3:61:6b:
cd:3a:d3:d6:4e:ad:5e:23:36:98:f8:8d:63:92:63:
0a:c6:7c:aa:67:62:49:57:44:6b:2d:34:c8:99:5d:
77:98:5d:cd:8e:ee:90:04:cc:c5:76:7e:39:23:20:
02:5b:4d:80:5b:d3:15:bb:20:e0:70:0c:09:7b:8a:
95:46:b5:e4:b4:d3:69:5e:42:a3:6a:fa:e4:51:15:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:14:46:3A:22:92:32:D2:5B:2D:C2:45:08:AB:84:1A:FF:BE:ED:B0
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:43:49:eb:50:f5:28:33:9b:67:f8:0c:d7:6a:ca:aa:a9:5b:
f7:0c:6e:26:17:75:08:a4:17:e3:17:8b:bd:0f:02:54:95:4a:
1e:64:9b:a8:1e:c8:fb:17:88:37:68:86:cc:d0:25:20:9e:9c:
a0:02:67:42:26:89:c8:56:47:92:8b:10:9b:c5:b0:ce:08:3b:
45:ac:d1:5a:a7:0b:bf:f2:7c:b0:e1:ca:74:d3:89:3e:39:69:
39:71:a7:be:94:25:36:26:31:5a:b3:14:49:08:2a:82:ad:f9:
cd:12:a4:8e:78:4e:35:72:a9:3a:ce:b7:45:23:a7:0b:8e:03:
88:07:73:02:c1:ad:f4:a1:44:eb:7e:ff:01:66:9f:e3:2a:21:
00:5f:dc:f6:a9:20:fa:20:18:dc:da:10:49:d6:cc:79:80:4f:
b7:74:cb:e1:82:41:80:fa:4d:aa:a1:4d:e4:9f:36:ee:97:2a:
ae:17:22:7d:fd:e8:5a:14:49:31:cd:dc:82:ac:d4:98:e0:e6:
18:96:81:21:e5:08:d5:82:e9:11:45:57:a7:eb:5d:a7:45:77:
ce:46:09:65:53:28:93:82:46:4b:1a:c4:ca:eb:be:18:ef:0f:
a9:8a:a6:1e:ed:7f:a1:65:8a:55:a2:ec:2e:65:25:3c:5c:bd:
f4:64:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:50 2026 by rpki-client