Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: Al8sFcabb/ScsvDJG6vm0TGjVJnXyg9VrO03P6Iqcqg=
Subject key identifier: B1:31:AC:70:8C:F5:3F:57:56:42:D0:2D:DB:61:03:AF:ED:A3:C4:42
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 019D26CD90604A40006E269E73722655F124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 0CBD
Signing time: Wed 25 Mar 2026 21:01:38 +0000
Manifest this update: Wed 25 Mar 2026 21:01:38 +0000
Manifest next update: Thu 26 Mar 2026 21:01:38 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: yHFl9E1EwrkYtKCkedD6rXoyUlfn9zx+fZ6cWWBvWRg=)
2: Ma8H1fgQEZiykkTlF-Y0HcwTumQ.roa (hash: V4dnLv6J0q+xgKJjM9hxw2pa2vp40VWjdBqsBD1NqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:90:60:4a:40:00:6e:26:9e:73:72:26:55:f1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Mar 25 21:01:38 2026 GMT
Not After : Mar 26 21:01:38 2026 GMT
Subject: CN=b131ac708cf53f575642d02ddb6103afeda3c442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:f2:17:56:86:16:18:96:ec:de:0b:46:83:
05:e4:fb:fa:53:c5:18:70:20:78:db:d5:97:97:04:
36:55:8b:d7:8f:94:42:0f:a0:c1:15:e4:82:f8:35:
a6:90:84:b7:05:56:bb:00:17:80:42:37:36:5d:71:
70:b3:f7:df:2d:9c:dd:0d:47:b3:c2:96:21:5b:a2:
75:e0:b1:a2:f1:09:f8:07:0a:2d:36:46:89:27:c3:
dc:3f:c6:3d:ca:4c:ea:0a:6c:19:98:7f:7d:75:e0:
7b:c8:f7:7c:5e:38:eb:c1:1a:f4:a5:22:5c:60:bf:
da:60:dd:ca:ed:6d:45:f9:a8:05:82:b4:0e:9e:fe:
10:35:91:10:f1:d0:6e:33:d4:1b:48:29:1c:70:92:
27:92:20:cc:1f:df:34:28:1a:d9:d5:08:61:f2:69:
dd:cd:14:0a:c1:01:5d:12:81:18:0b:18:08:69:20:
2b:55:b1:5f:d0:b0:6b:4b:8f:a3:4e:d8:8d:9f:4b:
f6:e3:d0:45:a2:ae:58:40:90:91:07:f2:27:38:ed:
a7:8f:4e:5f:ad:97:20:5c:6d:ac:58:8e:ce:ec:89:
c3:5f:6a:b7:29:28:ec:d6:db:34:8b:d3:a4:bb:f0:
70:54:c0:68:39:12:ab:50:40:5a:4c:3a:f5:a5:d3:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:31:AC:70:8C:F5:3F:57:56:42:D0:2D:DB:61:03:AF:ED:A3:C4:42
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:36:81:a6:22:f0:7b:6c:ca:89:83:0f:40:39:bf:4c:0f:c4:
83:0d:ef:49:53:23:c1:27:f9:5b:ce:1e:5d:43:d0:6b:12:b9:
a3:16:a7:76:e8:be:6a:32:fb:76:bb:f9:4f:72:02:45:6e:37:
c5:8a:63:f2:db:fa:89:99:8a:31:26:8f:a7:5d:5a:91:dc:3c:
f2:ed:13:b2:29:0b:ec:ed:36:38:85:43:26:a3:fe:b9:60:1d:
3f:92:4b:b9:2d:44:37:e7:c3:18:9e:33:98:dd:c8:cf:01:57:
29:50:25:11:66:37:94:5f:4d:de:f3:d7:d8:db:74:e3:af:fb:
e8:87:e9:5e:c7:f3:8b:75:0d:9b:13:bc:43:94:80:f7:0f:10:
c9:09:51:c1:a9:56:ab:25:be:0b:d2:bc:33:fd:a1:cb:06:af:
07:f8:0d:6d:e2:01:9a:96:c8:8c:fb:5a:d9:ef:c9:26:82:57:
f0:cf:15:5a:56:fd:de:9d:00:0e:83:cf:02:6b:c6:21:b4:6a:
01:7a:f3:59:b3:6a:27:cd:c0:ea:b8:3d:11:a3:df:8a:97:30:
26:85:bf:c3:61:72:2f:a2:b7:7f:15:ee:f0:e8:07:93:f4:2f:
43:71:3d:d5:fd:b4:d6:fd:81:e1:8f:6e:2b:4e:91:f0:be:7b:
68:cb:c9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:51 2026 by rpki-client