Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: yPAuszUVUx9s95OBKmQ7mIC/ydxT/mtKMyJNUwxKpeM=
Subject key identifier: C9:96:6F:73:15:E9:2D:75:DC:CB:7D:69:4B:78:A7:8E:F4:28:22:74
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 019F92B6AA0B4FEFFE4FE2DF81831D4F025E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 0DFE
Signing time: Fri 24 Jul 2026 06:01:12 +0000
Manifest this update: Fri 24 Jul 2026 06:01:12 +0000
Manifest next update: Sat 25 Jul 2026 06:01:12 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: 4Hsv/TUlNxibBdMTThKsYOdGdrGD2/nSxHERvpN7NKQ=)
2: Ma8H1fgQEZiykkTlF-Y0HcwTumQ.roa (hash: V4dnLv6J0q+xgKJjM9hxw2pa2vp40VWjdBqsBD1NqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:aa:0b:4f:ef:fe:4f:e2:df:81:83:1d:4f:02:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Jul 24 06:01:12 2026 GMT
Not After : Jul 25 06:01:12 2026 GMT
Subject: CN=c9966f7315e92d75dccb7d694b78a78ef4282274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:2c:16:83:cc:f5:0d:44:ca:01:e8:5f:3f:
ce:2c:c4:75:93:98:8d:b0:ce:61:f6:fa:b7:ab:ab:
8c:90:f6:ea:10:22:64:3f:1c:3b:8f:dd:bd:dd:51:
18:24:a3:4f:52:40:82:d1:74:14:6f:7d:6e:02:4c:
c0:a4:e3:ff:47:8f:eb:de:ac:2f:07:85:17:80:29:
02:ac:eb:39:3a:2f:6c:68:92:dc:0a:b0:31:9c:48:
65:11:90:69:70:77:1a:74:9a:15:66:ec:77:24:92:
68:87:4c:cc:d9:81:a3:e7:87:8b:bc:0d:ba:29:40:
52:6d:5c:43:57:69:f0:94:31:4e:b6:89:93:fb:ae:
e9:eb:14:72:61:54:e7:44:91:a5:b0:a0:d5:38:0d:
d2:ab:d1:5d:be:c4:da:90:67:46:6c:ef:25:44:82:
18:57:b0:7e:a3:1b:bc:27:a4:b1:8e:e4:fe:2e:ff:
3e:ea:a2:b9:38:f3:19:d1:30:61:77:46:9a:a4:f8:
4b:a3:9f:6e:82:d1:f7:8c:44:f6:23:6c:f7:d6:3c:
58:4e:ff:ad:32:15:61:e3:80:41:af:1d:bf:b4:cf:
d1:ce:4a:06:bb:69:51:74:ca:f0:90:2a:a6:b7:b0:
b5:1c:f0:ab:59:6c:ba:df:2f:72:4b:a2:c0:08:0b:
84:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:96:6F:73:15:E9:2D:75:DC:CB:7D:69:4B:78:A7:8E:F4:28:22:74
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9b:3c:df:3e:50:6e:44:90:06:e3:b8:66:59:c1:9c:6e:2e:
60:f1:e2:e0:fa:ed:90:08:71:3b:21:c2:f7:33:7d:a6:2e:02:
d1:86:d8:56:17:45:8d:2f:5b:11:d8:f0:7a:f1:6f:61:c6:4d:
4f:44:a5:97:8d:0a:08:7b:39:41:bc:25:26:16:9b:f7:5f:46:
26:83:e3:90:67:28:b0:30:50:ca:c7:07:91:f3:50:5f:dc:8d:
48:75:76:93:16:b6:e7:8d:59:3f:2e:26:04:00:9b:f4:86:44:
93:49:ac:11:b6:8d:95:2b:d8:cd:6e:92:19:59:e2:e6:e9:9a:
d3:fd:26:62:96:b8:80:5c:fd:74:67:57:4d:ba:9b:0c:b0:79:
2f:c7:05:ed:a9:c7:1e:84:79:bc:07:ad:b0:5e:b6:ca:34:02:
d6:03:7d:d1:90:74:da:af:55:05:15:41:c0:c6:f0:aa:25:b6:
5d:fc:7d:91:29:5d:ac:de:66:31:39:c1:3d:8b:a7:f3:d5:f0:
73:3e:2b:7b:f4:f3:65:28:95:25:16:71:7f:1c:46:10:a9:6c:
07:6d:af:4d:5e:16:af:36:50:ab:8e:12:13:2c:42:2a:21:02:
9c:bf:72:ca:96:c5:f5:69:b3:00:1b:fe:32:82:f8:a5:42:25:
5e:af:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:10:17 2026 by rpki-client