Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: onP+C0IbDXQKYync/ccqqMkr7IBHPod+R2bY4G8HIGg=
Subject key identifier: FD:1D:55:AC:00:D1:11:2D:78:AB:D4:6C:8C:C3:28:EF:D0:F3:DE:EF
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019E20FEF1F8F7E297297753C3C4306FFF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1912
Signing time: Wed 13 May 2026 11:00:39 +0000
Manifest this update: Wed 13 May 2026 11:00:39 +0000
Manifest next update: Thu 14 May 2026 11:00:39 +0000
Files and hashes: 1: 8gHT_lp19vgQo-djG0BRf5eWAE4.roa (hash: Vche9wHHqKAp5aWnmI6EY8xEE+HzW3Pog606cPmiZs0=)
2: B_EncHrDvifkg2nCGMklUrOo0Ug.roa (hash: xcZDiT2m5lq0I5LG6Q29RjfmHvdiXJHBI+h2WR1rfvY=)
3: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: yKCrWQpG2W2aknplQQHbsDSAng9NRtAbrDTa7aKA4NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:f1:f8:f7:e2:97:29:77:53:c3:c4:30:6f:ff:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: May 13 11:00:39 2026 GMT
Not After : May 14 11:00:39 2026 GMT
Subject: CN=fd1d55ac00d1112d78abd46c8cc328efd0f3deef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:09:a4:68:e9:1d:9c:62:d4:73:23:d4:f2:
b5:d2:60:5a:3a:7d:9c:1a:ef:c0:03:34:6d:bd:65:
fc:d6:f1:44:24:47:c6:16:59:7b:8b:01:38:07:b8:
8f:9b:d5:71:6a:c8:a7:1c:84:d8:17:56:8b:a8:d0:
3d:81:68:c0:d9:fe:0c:9f:0a:62:65:0d:6b:18:75:
36:ee:ac:92:3a:3c:87:b0:f3:57:13:70:f5:01:ce:
fd:59:6c:d6:f6:23:b5:7e:cc:48:4e:13:46:dd:8e:
2e:74:60:9c:f0:94:ab:9a:1b:e1:e5:b6:5c:e2:9e:
59:bb:50:ad:88:1f:9d:f2:cc:5e:14:f1:c8:5f:ac:
7a:7b:84:c9:64:c8:f4:09:02:36:13:51:06:07:4b:
3e:02:3a:02:2c:c3:17:1d:f1:ac:87:b7:7f:02:fc:
cb:d1:24:49:40:01:9f:0f:5d:a4:46:6a:e1:a0:fe:
49:90:18:e7:bc:b9:9d:69:01:c9:35:59:3d:e1:08:
d8:63:70:84:f3:71:b2:ba:d4:1f:96:c0:79:b9:43:
fa:23:fe:c5:46:00:3f:3b:db:21:ec:39:62:b5:0b:
78:e8:71:97:4a:1a:f0:41:ef:94:bc:78:28:60:6a:
64:5b:95:71:e6:34:e1:a2:b2:f6:88:4d:db:f3:94:
66:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:55:AC:00:D1:11:2D:78:AB:D4:6C:8C:C3:28:EF:D0:F3:DE:EF
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3b:10:ef:b5:db:59:0b:35:7c:e3:94:ef:bc:4b:09:b1:12:
54:b9:d0:28:14:af:34:b1:1c:25:f1:4a:d2:38:bf:ec:e5:d5:
36:9f:05:48:b1:54:a2:f0:51:4b:aa:d5:6a:2a:04:fc:3d:a8:
56:45:da:18:3a:7a:4f:00:3e:ea:01:d5:d3:5d:63:65:9f:2b:
83:30:11:26:23:84:b3:d0:64:56:5b:1b:a8:e1:88:0f:1d:e4:
95:60:b3:84:b3:10:1b:f1:69:25:2c:e6:8a:ac:31:9d:c1:fa:
b8:a2:a4:bc:0a:3f:cb:21:2c:bd:05:7e:e9:0a:1d:67:74:36:
4e:83:ca:60:96:8a:f3:79:ce:9d:81:ed:71:0a:d8:43:05:ed:
53:39:28:43:83:65:ce:bc:c9:a9:69:cc:a6:93:fd:4e:3b:8a:
ca:90:c4:78:d3:6e:34:a7:aa:b7:7d:e1:e0:f0:9d:f2:0e:29:
25:d6:09:88:14:ea:d0:e3:11:80:50:d6:35:55:f9:30:a6:3d:
48:7b:bf:1c:09:cf:5c:6c:3c:f8:97:37:50:e6:2b:e6:bb:6e:
46:3c:7f:78:2d:c2:43:27:71:c2:65:d0:d2:84:92:46:69:7e:
c3:4f:07:29:da:ac:ab:af:7f:e0:eb:50:7f:eb:25:7b:fa:40:
33:44:ef:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:31 2026 by rpki-client