Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: Y7/frLKExF71YkvE5cz5M0/Q26mY8Yw++fs4QjSWrQk=
Subject key identifier: F4:4B:C9:05:29:B7:23:E4:32:19:48:2E:1F:0E:67:73:59:6F:E2:E2
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019D27E058C096E61592C3420131D9A7E02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1891
Signing time: Thu 26 Mar 2026 02:01:47 +0000
Manifest this update: Thu 26 Mar 2026 02:01:47 +0000
Manifest next update: Fri 27 Mar 2026 02:01:47 +0000
Files and hashes: 1: 8gHT_lp19vgQo-djG0BRf5eWAE4.roa (hash: Vche9wHHqKAp5aWnmI6EY8xEE+HzW3Pog606cPmiZs0=)
2: B_EncHrDvifkg2nCGMklUrOo0Ug.roa (hash: xcZDiT2m5lq0I5LG6Q29RjfmHvdiXJHBI+h2WR1rfvY=)
3: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: 5tcW9AI7j7XmB1BmjGdCEnWvAzlX84JwTuhDZoqDnzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:58:c0:96:e6:15:92:c3:42:01:31:d9:a7:e0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Mar 26 02:01:47 2026 GMT
Not After : Mar 27 02:01:47 2026 GMT
Subject: CN=f44bc90529b723e43219482e1f0e6773596fe2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:8f:47:7d:f5:a3:2b:fa:9c:4a:eb:3d:e1:
9f:fa:64:d5:dd:10:91:3a:89:6c:f4:5c:94:42:bd:
e7:fa:00:18:e3:9c:c0:f1:4b:ac:2f:49:9c:0c:f4:
90:a2:a5:fe:08:52:3f:ca:41:ee:db:9f:66:1e:7a:
a9:c2:bc:f7:5f:45:2a:c4:ac:e2:7e:c5:ea:b6:c8:
8b:ea:c6:c9:b3:f2:f2:93:61:95:c1:58:c1:02:e1:
af:79:24:de:57:35:01:3b:c6:25:2e:79:dd:ff:e8:
31:ff:f6:94:5c:06:99:53:0f:7a:7a:cb:2a:57:69:
50:86:b2:d7:b6:ff:57:a0:dd:17:3e:c1:ce:3f:2b:
e8:7d:55:7b:73:44:2c:bd:16:5f:3e:b6:51:63:20:
e6:c1:c1:61:ef:b5:ee:66:b6:f9:1a:6a:31:6d:f9:
7a:15:e3:f8:e7:54:cc:9c:d1:44:06:28:d6:e1:90:
8c:cd:2c:21:ed:fa:e6:4e:76:9d:17:ff:d2:d2:ac:
18:f4:a5:f3:e5:7e:f8:07:76:92:8f:73:53:6d:d0:
85:13:0c:9f:f8:c1:0f:41:cb:d8:d6:91:f3:a4:53:
86:cc:4b:ee:5d:05:49:9f:c6:c3:a6:46:e7:55:2d:
cf:ba:bb:b0:dc:cb:a3:08:5f:2f:0b:09:ec:5b:37:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4B:C9:05:29:B7:23:E4:32:19:48:2E:1F:0E:67:73:59:6F:E2:E2
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e3:30:0c:96:bb:cd:e5:0e:40:01:a1:97:84:39:7c:c0:7c:
b2:db:23:bc:1a:65:f7:20:05:2c:fe:7d:43:4b:85:2c:c3:f2:
5f:2d:0d:c2:2e:d0:02:ac:fd:1c:b8:1b:4b:3a:98:97:fb:95:
7e:f1:6d:4a:d0:05:3e:14:e2:78:25:86:30:65:de:d6:c6:68:
fe:e7:8e:05:45:4e:ae:6c:97:2e:97:b8:fa:4a:06:14:e0:7e:
28:83:6e:24:63:6d:0d:ff:37:2f:2f:ee:f9:46:e1:2d:8b:d8:
6d:f9:c9:35:46:dc:cd:10:54:52:82:b6:19:89:b1:1b:95:8b:
bf:05:5a:fa:bf:c7:63:96:df:3e:c8:2e:72:d4:42:13:64:f3:
ac:54:34:5f:4c:9b:3a:e2:e8:ac:29:0c:05:cd:c1:4e:fd:62:
32:e0:93:13:8e:64:9d:70:07:e9:bb:e0:1c:58:a4:94:82:c9:
a2:9d:f7:20:4b:91:e5:3a:24:5e:6a:68:92:f6:d9:41:3b:5c:
b7:6c:eb:6f:64:82:50:69:fe:81:14:3a:ca:2d:86:5a:a7:51:
d4:86:18:03:f8:61:20:60:17:f8:fd:7c:ff:6f:1a:3c:3f:df:
42:45:9a:3e:06:c5:20:ef:d1:77:1e:9a:99:20:34:03:73:ed:
16:7e:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:35 2026 by rpki-client