Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: eKvlOq1eHjkh5FB/7zQi1yTwXNGAxGghvXCQAi1+AK8=
Subject key identifier: EE:A3:5F:92:DB:61:32:85:98:E9:56:A5:27:60:7E:AF:DA:E4:CA:BA
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019D2704452FBC75879677266461C26B275D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:24 +0000
Manifest this update: Wed 25 Mar 2026 22:01:24 +0000
Manifest next update: Thu 26 Mar 2026 22:01:24 +0000
Files and hashes: 1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=)
2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: etBHubCVtHL7wrlISkYZbTQSkkPpH07OwkZQxQeiTig=)
3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:45:2f:bc:75:87:96:77:26:64:61:c2:6b:27:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Mar 25 22:01:24 2026 GMT
Not After : Mar 26 22:01:24 2026 GMT
Subject: CN=eea35f92db61328598e956a527607eafdae4caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:b2:dd:44:86:72:69:c1:39:25:34:2a:4a:
83:26:5f:b0:51:42:bd:7c:81:da:61:40:6b:03:9a:
d8:ea:a5:aa:c9:2c:6d:9b:6f:4f:70:3b:de:0c:66:
b7:96:9f:9a:f2:aa:f2:4c:63:fa:10:36:e6:92:76:
03:df:49:e3:f0:34:ad:4e:e5:ca:4c:d6:76:ed:21:
eb:30:8c:9b:09:a1:82:79:42:85:fc:1f:b4:25:c3:
9d:c1:e4:b3:a5:a4:cc:3e:0e:ae:d1:37:1a:ed:00:
d6:09:a8:1a:8c:f6:4e:6b:a7:6e:39:89:73:97:31:
b1:81:7e:83:9f:ad:c9:3a:bf:53:7e:7a:89:df:79:
3a:73:9b:09:e5:73:d3:ea:c0:7b:d1:76:13:c6:40:
ea:b4:5a:b0:0c:d3:12:65:16:f3:89:c9:14:97:97:
ad:5b:96:61:9d:a6:aa:12:a2:a1:b0:28:c0:8b:a1:
c5:14:94:35:55:c7:8c:61:e3:60:0a:a2:27:66:a6:
8c:f4:20:4f:5a:7e:b2:f5:4a:0a:b9:9d:d0:f1:76:
66:fc:c4:e5:4e:6c:f8:1d:54:db:d8:94:62:92:b0:
32:7c:d7:2f:cd:25:8f:70:c8:db:39:1a:e3:34:21:
45:de:c7:17:2c:ee:4a:b8:7e:34:cd:6c:1b:98:c5:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:5F:92:DB:61:32:85:98:E9:56:A5:27:60:7E:AF:DA:E4:CA:BA
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:53:c6:91:1a:fc:0f:ed:9f:3c:9f:f1:e9:1e:4c:62:0d:7a:
39:29:1c:a3:f5:64:f8:b5:51:01:5e:34:b1:be:04:5d:cf:8f:
1c:3a:42:4f:c3:d8:da:6b:6a:bb:e5:d9:fb:73:39:8a:47:dd:
bd:3e:63:d3:a4:87:ba:64:50:b5:87:32:de:e8:7c:61:b3:b6:
ab:45:66:a7:bf:4e:55:f5:63:11:2c:c0:13:21:5a:88:7b:e4:
41:ad:31:d9:66:3f:6d:32:a8:37:b9:67:a0:2f:e6:6b:62:a4:
50:86:b2:3b:c2:2f:3d:cb:86:01:75:16:76:5b:dc:0e:77:1c:
d5:f3:3b:e0:fc:45:0a:73:c8:10:d8:6f:8d:b1:a9:06:cb:f7:
2e:93:d3:b7:87:c2:bd:3c:bd:69:3a:3b:0f:6a:79:ed:c5:8f:
5b:d5:66:c6:e3:6d:a8:35:b5:a3:85:b0:87:06:c9:4f:6b:5e:
1b:0b:2c:ad:cf:5e:92:1b:cc:77:4a:bf:5c:36:4b:85:d5:1d:
dd:3f:41:04:b3:87:5a:b9:48:da:0a:0a:76:27:de:1f:49:12:
83:69:d5:81:54:a1:8e:39:f6:6a:25:da:8a:f4:81:19:20:4b:
3e:56:a5:e0:c7:cb:23:67:78:26:a7:58:a9:d8:91:d1:77:38:
cc:d4:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:48:29 2026 by rpki-client