Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: EP+oQblMqVn3H5eoTbz+3VVVmP0tXTKCFgZccQosX0M=
Subject key identifier: AF:43:6C:71:78:DB:12:41:37:BA:C9:24:51:AC:A1:51:91:F0:A8:7A
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 01A0DCF27BFCC3FD41DE170C39AD2095CACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 0B94
Signing time: Sat 26 Sep 2026 09:01:13 +0000
Manifest this update: Sat 26 Sep 2026 09:01:13 +0000
Manifest next update: Sun 27 Sep 2026 09:01:13 +0000
Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: Wa5BS34AX8b/Z4PaMDFh4bDO5QVJtlwcUVBIvoW/Npc=)
2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:7b:fc:c3:fd:41:de:17:0c:39:ad:20:95:ca:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Sep 26 09:01:13 2026 GMT
Not After : Sep 27 09:01:13 2026 GMT
Subject: CN=af436c7178db124137bac92451aca15191f0a87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:54:31:a4:37:df:e2:51:8b:60:8c:c5:6b:
6f:ff:03:3c:43:df:52:d8:c9:97:fe:be:dd:21:98:
50:bf:b9:95:40:67:cf:5f:0d:db:22:ce:b6:21:84:
0a:df:d3:aa:d4:ba:e2:78:01:a2:04:eb:b6:5b:46:
14:4c:c9:c5:cc:52:06:7b:37:9d:ac:b3:6b:41:0b:
fb:1f:c3:31:7a:bb:cb:75:01:2d:ab:9e:e1:8d:06:
85:10:59:04:ee:73:2b:83:1f:ae:e4:50:f5:f0:c8:
00:36:29:a9:35:88:4e:71:dd:f5:ac:6b:07:c4:d0:
c3:05:93:26:6d:5e:8c:a0:2f:63:36:54:4c:ad:bf:
48:e4:55:4d:43:68:6d:e4:9b:16:b5:a7:75:4b:68:
fb:d6:73:3c:1d:6d:ff:69:11:59:7d:f3:67:7b:ef:
35:e0:a6:c7:3b:82:bb:3c:d0:54:cb:61:2c:52:80:
2f:39:a2:57:22:1b:18:12:31:77:4d:3a:4d:0b:78:
c3:3f:97:ef:fa:27:4e:01:ee:f3:f8:ba:31:93:67:
f8:a6:e6:4c:a2:6c:1c:d7:19:18:3a:8d:29:4b:ea:
7c:f8:65:3a:bb:b0:90:5a:5f:b7:69:25:d4:df:6e:
82:25:10:38:77:6c:cb:fd:56:40:7d:01:85:f6:57:
ce:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:43:6C:71:78:DB:12:41:37:BA:C9:24:51:AC:A1:51:91:F0:A8:7A
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:00:0e:43:bf:4b:3d:bb:77:d1:3d:70:db:57:14:b2:1c:9c:
34:fe:eb:6a:ae:9a:6e:df:61:b7:b0:29:ea:8e:ae:5c:4c:92:
25:7a:d8:85:a4:08:b8:c4:25:33:69:73:2f:6a:77:e9:a1:77:
6c:d2:c3:bf:48:ec:2c:ec:a7:b3:4b:3d:26:f2:ff:3f:96:01:
05:b4:da:69:bc:99:60:30:9e:c8:fa:4d:00:41:a8:88:34:b9:
d7:d6:02:b1:cb:6c:c6:b0:89:08:91:9d:c8:7e:ae:7b:8e:5c:
36:81:b2:63:c7:98:32:bc:4c:84:da:f7:33:a3:13:40:31:14:
1f:6d:8d:e4:ab:94:8a:db:4b:4a:73:cb:61:1b:b7:a1:01:11:
82:31:ab:38:57:d1:88:a5:f8:55:fc:36:46:22:25:1d:29:a3:
d5:d0:8c:85:28:9d:69:10:b4:a5:4e:c6:9f:e8:9f:38:dd:4b:
8f:45:c2:9b:6d:e2:a8:61:e4:26:6d:2b:da:c5:d5:d7:f8:7a:
58:e2:39:b7:d1:2d:d6:3b:c7:ea:3d:b9:5c:0f:3a:06:ed:bb:
3a:50:36:d3:44:39:cf:71:44:32:69:78:1c:14:01:b7:01:9e:
38:8f:5c:42:2e:85:64:52:d6:84:ac:5b:68:0f:b8:49:c2:98:
4b:db:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:49:16 2026 by rpki-client