Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: imbhwaZ2WE6IvX8i87BgASJwVx/bbZVvA6Nhf7MU24c=
Subject key identifier: D9:BA:86:B7:18:8B:63:C0:85:23:FA:FF:2C:31:38:AE:90:79:EB:C4
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 019D27A90C46D31958F275CCB35D8BDC94C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: we+BXQSenFM0FhvNeTGAjR+NTPRWxS3+wWuEgXC3FKI=)
2: WbZZ0bsB0Dkjf22adEANEIVciOI.roa (hash: +91x+OdHLOJGO9VKUPZYkd68HxtgAtv1r1GZzY3/TUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0c:46:d3:19:58:f2:75:cc:b3:5d:8b:dc:94:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=d9ba86b7188b63c08523faff2c3138ae9079ebc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:58:da:0b:b1:53:7c:6a:7a:68:f4:7a:b1:
43:a1:a3:bb:e2:2a:11:ba:23:7d:3c:52:d3:19:ca:
33:fb:c0:36:6b:82:51:86:69:9e:ae:25:a8:e5:f3:
25:e0:33:cc:99:b1:c0:99:87:65:26:98:2f:4f:f1:
b1:67:34:ac:90:b5:44:58:dd:f1:bf:94:a3:32:a6:
d2:26:99:fd:57:27:7c:f6:c9:99:a7:93:34:f0:1a:
2b:4c:0a:27:ba:73:42:03:1c:8a:7c:99:8f:3b:f3:
e7:bd:71:85:fe:fe:2c:fc:51:65:f8:d5:b0:b9:d7:
4c:1f:c8:5e:91:ad:63:99:46:09:ec:83:16:76:37:
67:44:b1:18:1d:c8:3f:1a:ee:00:ad:a9:64:a8:c3:
d1:0f:36:ae:5b:0a:72:2e:00:ae:97:b8:64:88:fe:
ad:42:ce:b5:b2:5f:7f:4c:24:06:cc:07:36:f5:7b:
3d:af:5e:0a:45:0a:5a:5f:6b:23:b1:0d:16:89:92:
67:a8:74:21:52:30:35:4f:26:d1:31:4e:04:1d:16:
8f:19:22:53:dc:50:3c:1a:e9:28:40:3b:be:b8:d6:
95:ce:3c:d1:fe:eb:25:db:b0:67:55:93:f2:ed:84:
02:e7:7c:56:d1:d4:55:a1:d4:25:55:30:e7:83:00:
20:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BA:86:B7:18:8B:63:C0:85:23:FA:FF:2C:31:38:AE:90:79:EB:C4
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1b:07:6c:b2:56:84:89:ac:8d:46:d2:05:0f:59:a0:16:da:
de:42:a1:3c:95:5c:77:61:6d:b5:73:7c:7a:67:30:f5:e6:c5:
45:c0:17:1b:9d:d7:c1:ec:a0:52:fb:4a:ab:65:3a:42:10:ca:
39:7f:63:dc:c2:10:7c:0a:4c:42:bc:ff:12:12:12:df:0c:7e:
e4:de:75:71:2a:cc:d5:27:9f:df:06:e9:af:21:ac:fd:98:b3:
cb:8d:71:0f:04:d5:0b:72:98:a6:09:39:68:15:e8:51:c6:9d:
ad:a4:6d:71:df:f3:fd:04:26:dc:e4:38:04:98:82:1d:75:57:
4a:c8:b5:db:29:67:57:99:66:43:31:3e:85:d0:51:8c:9e:af:
60:42:5b:eb:1c:6a:01:45:50:84:44:20:d3:42:5b:27:00:a8:
7c:f5:4e:0a:77:01:86:be:e6:56:7d:53:62:cf:7b:e2:47:0b:
d4:53:30:cf:dd:8a:ac:13:fd:13:85:74:62:8b:9f:c4:bd:f2:
35:98:e2:e7:9f:25:25:15:ef:a4:90:e2:98:d9:d6:d2:f2:a3:
28:e0:9a:d8:4a:89:21:9e:8a:c5:6e:9e:d4:86:c8:7c:46:6a:
dd:ca:a4:8b:d1:52:ea:5c:aa:a4:8d:fc:6d:8e:69:73:f7:e4:
e7:fe:16:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:59 2026 by rpki-client