Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: WFIR7KlgQKWE0ZkRxSAVjiB+qb1pX4rMRjC9xC0PuVQ=
Subject key identifier: 17:AC:2A:D2:F8:2A:30:E8:BE:76:2D:D6:68:7E:4A:86:EA:C5:0E:0B
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 01A0DEE0FDBAE63397A6807FE9D0FA73DA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 0EAA
Signing time: Sat 26 Sep 2026 18:01:21 +0000
Manifest this update: Sat 26 Sep 2026 18:01:21 +0000
Manifest next update: Sun 27 Sep 2026 18:01:21 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: NDugaBZVAf7h17DmPUlA15mpqzOtdU2yeXry5JXvjrk=)
2: Ma8H1fgQEZiykkTlF-Y0HcwTumQ.roa (hash: V4dnLv6J0q+xgKJjM9hxw2pa2vp40VWjdBqsBD1NqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:e0:fd:ba:e6:33:97:a6:80:7f:e9:d0:fa:73:da:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Sep 26 18:01:21 2026 GMT
Not After : Sep 27 18:01:21 2026 GMT
Subject: CN=17ac2ad2f82a30e8be762dd6687e4a86eac50e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:e8:78:70:0f:0d:3b:8d:0f:3e:05:d6:72:
42:9c:43:e0:3d:4f:22:d9:be:26:49:14:eb:20:c8:
bb:07:5b:a9:1e:00:26:d2:bd:04:17:27:e6:7d:f3:
f5:0f:97:30:b1:8a:73:cf:6f:ad:4c:69:02:7d:e1:
d5:cc:17:8d:8d:46:97:63:a5:6a:1a:46:f3:fd:74:
ac:7c:7d:a4:ee:fb:bc:b3:e2:44:07:da:ef:04:d4:
68:0c:c3:8b:8a:b3:b8:95:65:ce:9c:35:25:07:dd:
12:85:6e:f0:02:51:f8:91:77:ca:97:e4:a3:6d:3e:
55:05:04:c9:a0:1d:f4:fa:7f:51:d0:5a:5c:d4:22:
90:31:e5:01:51:dd:ff:76:67:91:32:e0:29:75:fd:
25:74:3f:21:d0:5e:33:07:bb:9a:c9:19:0d:83:88:
57:25:56:fc:4d:59:76:01:75:84:ec:af:e5:2e:4c:
84:b3:09:a7:45:60:45:f2:fb:c1:1d:78:9e:04:ec:
ef:bf:62:b9:68:6f:0f:d3:c0:3c:77:cf:a8:e3:9f:
16:63:53:c1:57:81:91:2c:5b:06:31:e4:68:82:91:
bd:4e:79:eb:b3:ef:46:ec:d3:c1:d0:de:2c:97:db:
87:a4:1e:75:a1:bb:a1:02:dd:ac:1b:a5:07:40:52:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AC:2A:D2:F8:2A:30:E8:BE:76:2D:D6:68:7E:4A:86:EA:C5:0E:0B
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:35:0c:ed:6e:ba:83:56:a7:d3:39:7f:6c:14:1c:9d:0a:95:
93:93:6c:10:92:ad:01:fa:10:4e:58:0d:65:36:8c:3b:78:e6:
95:d5:d9:ec:8c:52:b8:db:0d:b4:77:0a:de:ea:b4:c8:18:77:
19:f3:f2:a3:7a:45:e9:ed:7a:80:36:8a:dd:19:d3:00:29:c8:
13:8c:29:83:a6:20:d0:31:d8:a0:bf:21:ba:f7:aa:1f:12:b0:
ae:6c:94:6c:6e:e1:82:25:06:ec:83:cc:55:40:60:fc:47:fe:
c6:8a:67:f2:08:ee:1f:13:69:a0:d0:9d:e0:3a:5c:b8:e4:77:
92:7e:a7:08:01:19:e1:62:38:5c:d7:ff:81:79:7a:36:18:00:
b1:10:08:28:0d:ba:97:97:25:26:08:d5:e9:2f:d2:8a:9c:ac:
d1:9d:a5:75:4f:f1:7d:93:aa:78:36:34:a8:29:f0:b6:d8:51:
b1:ca:cb:da:2a:9e:9d:18:83:40:d9:f9:b0:21:47:b7:ed:64:
81:e2:d0:62:2f:54:69:ae:a6:b3:1f:06:df:74:0c:e1:70:54:
b5:18:eb:08:1c:e7:1d:11:cf:de:46:08:d0:63:e5:25:cb:37:
a1:c3:7c:8e:48:1c:65:49:41:78:a6:49:5a:3f:5b:44:2c:0d:
ad:55:a5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:11:58 2026 by rpki-client