
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: HXjxIH7SzEafD3cxIEXLJRIPquAB5bMLz29uJkZ4E08=
Subject key identifier: 5C:A7:AA:1A:E1:14:D4:B4:82:64:8B:D1:50:14:39:32:6E:CD:85:15
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 01A126C2E7C8C2C100814BBD4BE24C8F64B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 03BE
Signing time: Sat 10 Oct 2026 17:01:09 +0000
Manifest this update: Sat 10 Oct 2026 17:01:09 +0000
Manifest next update: Sun 11 Oct 2026 17:01:09 +0000
Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: cb79+JVwWjSR4FYAlleezAMHBkdfTNAKoBtzrUQoXnM=)
2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:c2:e7:c8:c2:c1:00:81:4b:bd:4b:e2:4c:8f:64:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Oct 10 17:01:09 2026 GMT
Not After : Oct 11 17:01:09 2026 GMT
Subject: CN=5ca7aa1ae114d4b482648bd1501439326ecd8515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:81:47:5b:e5:75:dd:84:39:29:1f:8a:7f:
0b:41:50:eb:ad:ed:57:c5:f6:50:fb:dc:f6:da:b5:
ba:d3:bc:ea:d8:38:97:e0:fe:48:4d:b9:42:eb:23:
9b:4b:0a:fc:69:c9:c6:eb:b5:83:fd:67:2a:37:f5:
03:d0:8f:a5:dd:c5:14:42:0d:ce:6e:6b:c2:fb:a0:
63:6a:92:59:8e:2b:63:9e:9d:01:4a:ec:88:f0:23:
33:e4:26:0b:6c:12:6d:7c:39:72:a9:41:e0:93:06:
d9:f9:20:01:34:84:1e:4a:f6:a3:95:96:23:e0:07:
79:cf:fe:97:09:54:0a:b2:10:6f:04:b3:d9:be:9a:
21:d9:6a:52:88:d8:c0:25:41:fe:80:3c:43:b1:1a:
c4:ea:f4:a3:6a:05:30:6a:e0:8d:b9:7f:c8:43:ed:
77:84:bd:75:9b:56:15:08:de:09:ec:6e:8f:75:39:
f3:79:2c:0a:d0:69:52:32:69:22:5c:6f:0e:58:29:
dc:ff:d2:e3:f3:6e:54:29:29:45:ef:a4:2f:51:e2:
de:e3:37:85:0c:28:c2:ff:e3:d1:b1:6a:39:8b:8a:
cf:d3:13:41:b8:d8:9d:36:ca:eb:9c:ed:ea:65:f4:
10:76:93:20:9a:19:13:13:52:b7:ac:d5:9c:6d:78:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A7:AA:1A:E1:14:D4:B4:82:64:8B:D1:50:14:39:32:6E:CD:85:15
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3d:c6:c3:b2:9c:ce:c1:4d:90:2d:fe:24:ef:24:72:0b:a4:
7d:c3:fc:2d:93:41:99:76:c4:c4:21:74:e2:8f:5a:e0:8a:53:
14:f9:35:74:58:ee:88:7d:dc:42:e7:2a:de:74:77:b8:be:79:
1c:c6:e8:1f:1a:fb:a3:20:2b:e0:1e:5c:5f:bd:46:2e:ca:da:
2f:d4:90:ab:0e:f2:c9:3b:1b:cb:40:95:2e:a5:44:4e:2e:30:
78:b2:44:ff:cc:c5:e9:6a:58:87:fb:aa:ec:d0:a7:a4:cf:47:
73:93:05:a3:f9:3f:39:f7:22:23:d7:17:74:9a:10:da:a1:53:
a5:42:3b:ae:b7:f1:32:f3:ff:08:6f:fb:c5:67:57:37:3c:91:
68:78:41:cc:ee:19:1f:f2:4a:9a:6e:51:14:6b:26:c1:0b:cb:
1c:52:03:97:a9:27:3a:64:92:74:1e:1b:84:3b:86:81:4e:bc:
17:38:22:1a:a3:af:5c:2d:00:9e:c8:f7:07:7d:8a:67:1d:62:
f5:ac:8e:bf:89:62:0e:2b:b5:15:db:14:41:fe:36:ce:ff:65:
98:02:66:e4:cc:5f:e6:a5:8a:10:a9:7d:7b:00:e8:c9:2a:24:
57:9b:45:be:4a:fa:a8:03:f8:87:aa:90:31:4f:bb:20:3a:b4:
18:43:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:09:38 2026 by rpki-client