Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
File: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft (raw, json)
Hash identifier: qiw6s7SlkO7BCCDK0HAIkUtK6WtLJEFTg9Ofp5uTGQ4=
Subject key identifier: BC:0E:03:89:A8:95:A4:AA:2B:1B:0B:A0:01:49:A0:78:FC:8B:84:18
Authority key identifier: 1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
Certificate issuer: /CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Certificate serial: 01A0EB1CC0C90401B2C3B459675FB8FAB7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:02:05 +0000
Manifest this update: Tue 29 Sep 2026 03:02:05 +0000
Manifest next update: Wed 30 Sep 2026 03:02:05 +0000
Files and hashes: 1: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl (hash: iOpNGaclCwXveIzJa8FV2EMkra5rs/qkDJ9A40/7PJ0=)
2: V9X49EieL5muWb2FuiaJlUR-F0M.roa (hash: KCwcP0n4ZTZ4GNIBxxk+6aPghXeAJv53hQU1wGojBWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:c0:c9:04:01:b2:c3:b4:59:67:5f:b8:fa:b7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Validity
Not Before: Sep 29 03:02:05 2026 GMT
Not After : Sep 30 03:02:05 2026 GMT
Subject: CN=bc0e0389a895a4aa2b1b0ba00149a078fc8b8418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:dc:a5:67:c9:cc:96:9f:e4:4a:21:57:8b:
b2:c0:67:c7:cc:fd:95:51:f9:33:ff:e0:12:86:00:
81:19:2c:91:f1:ab:26:5d:c3:57:a0:82:8b:d0:28:
1b:9a:12:96:01:d6:77:37:92:0f:f7:ea:b7:55:f3:
1a:db:82:8b:ce:d6:b5:a2:41:c0:e7:57:a4:57:58:
6e:8d:b4:9b:f5:ba:ef:5c:2f:5b:3e:1a:4c:45:9e:
72:5f:df:d3:1f:36:12:94:28:98:a6:40:e6:e1:5d:
d7:19:3e:cb:14:c8:bd:2d:4c:9a:b5:58:81:8d:20:
b0:36:9c:b3:37:54:b1:d0:61:99:dc:97:e3:08:fe:
c9:3d:52:26:2d:ef:be:de:67:1a:ac:2a:af:41:06:
21:fa:7f:3a:c3:50:91:b9:c8:40:ac:31:8c:05:ad:
41:00:58:17:b6:d6:97:d1:48:6b:1f:38:a0:0c:d2:
14:ba:35:c7:6f:84:1c:91:eb:2b:fd:5a:87:87:50:
2a:c7:d2:fe:40:8e:5a:af:10:8c:92:6c:cb:cf:e7:
67:85:3a:c8:a9:5d:9b:37:b9:eb:3e:10:74:fa:03:
a6:cd:d6:e3:e9:58:8f:de:61:bf:d6:6e:5c:65:6a:
24:58:08:73:03:ac:28:e1:0f:1c:2d:5f:99:10:e6:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0E:03:89:A8:95:A4:AA:2B:1B:0B:A0:01:49:A0:78:FC:8B:84:18
X509v3 Authority Key Identifier:
keyid:1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ea:79:9c:21:bb:d4:bb:68:3d:89:e3:b8:2a:e1:a7:2e:63:
cb:9a:97:18:e5:af:19:6d:55:3d:6a:c0:93:9e:16:8c:91:4e:
e7:3f:d6:02:8b:42:f2:ca:b4:41:d8:1c:89:9d:9e:cc:2e:e8:
d3:2b:94:53:b3:53:85:70:94:fd:4d:96:95:b2:4b:36:18:f5:
9c:8c:07:83:a1:fb:39:0a:0c:2d:67:e5:35:59:9d:7b:75:ea:
e5:5f:68:f7:fd:2a:2c:36:8b:62:6e:fe:bd:02:10:e1:a1:2e:
4f:86:63:b7:9e:79:e3:73:f4:8e:d3:de:89:31:a4:23:3b:eb:
76:01:fc:b5:2f:23:89:e2:9a:a3:51:fd:e8:f7:d0:10:45:38:
60:62:99:c0:ee:be:3f:4f:e2:d0:e5:8f:e8:fd:8d:38:3f:c0:
1b:cd:e3:b1:b4:4e:30:f2:03:56:ae:ab:ac:21:45:4f:ff:ae:
7b:2f:1d:c0:41:51:68:56:f7:cc:d2:db:72:10:45:05:5e:b5:
dd:02:11:7f:31:f5:b7:bd:4e:81:6a:9a:c4:1a:e0:54:91:71:
ca:9a:0b:58:65:4f:5b:55:00:f8:85:72:56:82:31:52:04:12:
f7:71:ac:37:78:2f:8f:50:dc:f7:e7:98:c8:98:78:e2:68:66:
ee:db:21:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrHMDJBAGyw7RZZ1+4+renMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZmE1NTgwZGE3ZWQ3MWUyM2RjNmMzNjkwMmU1YzY2YjBl
OTNmOTIwHhcNMjYwOTI5MDMwMjA1WhcNMjYwOTMwMDMwMjA1WjAzMTEwLwYDVQQD
EyhiYzBlMDM4OWE4OTVhNGFhMmIxYjBiYTAwMTQ5YTA3OGZjOGI4NDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPjcpWfJzJaf5EohV4uywGfHzP2V
Ufkz/+AShgCBGSyR8asmXcNXoIKL0CgbmhKWAdZ3N5IP9+q3VfMa24KLzta1okHA
51ekV1hujbSb9brvXC9bPhpMRZ5yX9/THzYSlCiYpkDm4V3XGT7LFMi9LUyatViB
jSCwNpyzN1Sx0GGZ3JfjCP7JPVImLe++3mcarCqvQQYh+n86w1CRuchArDGMBa1B
AFgXttaX0UhrHzigDNIUujXHb4Qckesr/VqHh1Aqx9L+QI5arxCMkmzLz+dnhTrI
qV2bN7nrPhB0+gOmzdbj6ViP3mG/1m5cZWokWAhzA6wo4Q8cLV+ZEOZbzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwOA4molaSqKxsLoAFJoHj8i4QYMB8GA1UdIwQY
MBaAFB/6VYDaftceI9xsNpAuXGaw6T+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSF9wVmdOcC0xeDRqM0d3MmtDNWNackRwUDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2Et
NjRlNTJiOWRkOGQxLzEvSF9wVmdOcC0xeDRqM0d3MmtDNWNackRwUDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2EtNjRlNTJiOWRkOGQx
LzEvSF9wVmdOcC0xeDRqM0d3MmtDNWNackRwUDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOp5nCG7
1LtoPYnjuCrhpy5jy5qXGOWvGW1VPWrAk54WjJFO5z/WAotC8sq0QdgciZ2ezC7o
0yuUU7NThXCU/U2WlbJLNhj1nIwHg6H7OQoMLWflNVmde3Xq5V9o9/0qLDaLYm7+
vQIQ4aEuT4Zjt55543P0jtPeiTGkIzvrdgH8tS8jieKao1H96PfQEEU4YGKZwO6+
P0/i0OWP6P2NOD/AG83jsbROMPIDVq6rrCFFT/+uey8dwEFRaFb3zNLbchBFBV61
3QIRfzH1t71OgWqaxBrgVJFxypoLWGVPW1UA+IVyVoIxUgQS93GsN3gvj1Dc9+eY
yJh44mhm7tshuA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 10:55:47 2026 by rpki-client