Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: AWa9wPj7nK8HSHAA23Q2qEtbdf5+H2qLo+5pBOGC7M8=
Subject key identifier: D5:77:FD:58:72:27:43:5D:06:12:40:0D:8A:65:C7:65:86:43:25:F9
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 01A0CFA3EB916F9CB4AB651AB291D167B2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 19:00:21 +0000
Manifest this update: Wed 23 Sep 2026 19:00:21 +0000
Manifest next update: Thu 24 Sep 2026 19:00:21 +0000
Files and hashes: 1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=)
2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: TI3w59o9TbrN3FjJbWnnRcg+xYkkdL4x2Z7m2xJIYHM=)
3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:eb:91:6f:9c:b4:ab:65:1a:b2:91:d1:67:b2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Sep 23 19:00:21 2026 GMT
Not After : Sep 24 19:00:21 2026 GMT
Subject: CN=d577fd587227435d0612400d8a65c765864325f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:c9:60:c1:68:fc:2c:9b:02:49:e8:be:10:
6c:9a:b7:87:ea:45:a3:c4:09:11:78:11:39:e4:54:
8f:d4:2c:8f:74:0c:e3:4a:e6:af:ca:2a:31:ba:c4:
4e:94:d5:f6:a5:f0:bc:c6:19:5c:4a:b0:0c:1a:4a:
e8:3f:eb:eb:bc:51:b3:b6:df:41:03:b2:d3:5b:77:
c0:59:52:b4:11:c4:72:f6:ed:18:73:b1:e2:58:1b:
62:b5:e9:ac:78:d2:51:36:41:b7:06:aa:c6:50:62:
8e:40:9d:6f:ab:6a:cf:c6:55:4e:77:db:b5:76:09:
6a:c1:0d:44:de:e3:16:16:28:e0:b4:54:f8:11:98:
8a:bf:11:5e:86:fe:c9:c6:a9:ed:58:3e:ea:46:2d:
14:50:0e:cc:86:72:6b:9b:cb:6f:51:0d:04:a7:bf:
7d:cd:3c:89:d3:a0:89:26:9b:5b:5f:82:83:f6:1d:
53:bf:25:b8:1a:a2:76:aa:d2:ff:47:f9:40:7e:50:
d3:92:aa:bb:02:90:52:f1:a9:b2:41:07:b4:a1:62:
e9:ce:89:58:16:88:89:f8:ff:17:99:38:a1:13:c4:
92:fd:d7:aa:63:f8:bc:1e:02:41:5f:1a:7d:da:e6:
95:d6:90:ca:14:a1:0c:50:00:20:99:19:6d:13:ae:
69:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:77:FD:58:72:27:43:5D:06:12:40:0D:8A:65:C7:65:86:43:25:F9
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d5:dc:aa:51:7e:c1:b4:b0:85:1d:dc:51:48:95:f7:f9:a8:
42:e9:8f:5f:5f:a7:e3:86:62:84:af:ef:7f:26:02:6b:5d:97:
cb:5d:2c:49:a6:5f:68:ac:ac:a0:74:97:07:37:c2:81:f5:82:
0a:8d:38:e1:7a:fe:b7:c0:c5:06:88:c0:5c:39:80:75:3a:5b:
a5:fa:3d:19:ed:ec:5d:ba:78:1e:3a:3e:c4:61:d7:f6:2b:1b:
ac:ad:14:7b:b5:54:5f:84:a8:bd:c6:2a:95:61:8a:f8:9b:b4:
bd:c2:e6:4e:a6:db:be:ce:e4:3d:4c:8f:cc:48:ca:7d:22:50:
50:26:e2:e7:b6:df:82:41:2a:4a:bb:9a:fc:16:79:42:3c:f7:
02:5f:20:41:83:3f:fa:0c:90:7d:60:ea:7b:71:07:31:42:58:
23:98:f7:e1:9d:e6:6d:dd:14:84:fc:73:eb:0f:04:ea:a0:1c:
ef:d4:eb:e6:3b:9d:80:5a:31:73:0d:64:11:37:5c:b2:4e:32:
19:7d:a3:b0:e1:f4:52:ec:5d:c9:71:d0:dc:75:0f:b0:84:af:
7f:3f:9c:69:b8:ea:6b:5d:bc:90:d1:67:d0:f8:1b:1a:e9:d2:
a6:f7:2b:ff:36:e6:71:c9:8e:92:97:3b:a7:78:c2:09:54:23:
3d:e8:49:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:21:21 2026 by rpki-client