
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: JSR4DW+gXQqDd47Y4vGPtDDk1aV2m2xqYlBqGUS2TLY=
Subject key identifier: 8F:56:E8:00:7A:13:9E:DC:64:C2:61:D1:F4:A5:EA:D1:F8:CB:17:03
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 01A0D1C910BCAA5194D919A0F42031C9AF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 170B
Signing time: Thu 24 Sep 2026 05:00:10 +0000
Manifest this update: Thu 24 Sep 2026 05:00:10 +0000
Manifest next update: Fri 25 Sep 2026 05:00:10 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: T0fkAJSDJ458UoLr2Ps1+Pfp8wv0mHKEW/R8t4GWpO4=)
2: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (hash: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:10:bc:aa:51:94:d9:19:a0:f4:20:31:c9:af:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: Sep 24 05:00:10 2026 GMT
Not After : Sep 25 05:00:10 2026 GMT
Subject: CN=8f56e8007a139edc64c261d1f4a5ead1f8cb1703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:d1:80:34:31:5b:80:b0:f7:24:3e:58:7e:
74:f1:4f:04:53:d5:a4:e4:1a:52:14:03:d8:36:f4:
22:e3:7d:7e:66:15:53:8d:20:27:00:15:79:d2:a9:
c7:ff:33:c9:5f:02:6b:99:16:31:27:06:23:86:4d:
de:06:37:7e:82:98:70:58:7c:01:64:0f:3e:1c:20:
e2:57:7a:e3:09:8d:95:5c:6b:4d:b1:14:13:c8:a0:
d7:a9:62:4a:35:68:77:6c:d3:4b:01:b2:7a:1f:e6:
f3:1e:d9:7e:98:94:9a:db:f8:c9:03:2a:0b:53:c5:
7c:23:7e:cd:81:19:55:87:0f:c1:1e:2d:bd:68:d6:
8c:6b:eb:e2:04:1c:1c:77:c1:72:42:bf:94:a0:53:
52:4a:47:60:87:8e:90:e6:15:16:18:53:20:7a:1c:
f2:52:7b:1f:94:37:bd:68:f7:b8:a6:f2:6c:39:6c:
73:99:6b:c3:c9:ce:50:f0:ed:7b:6c:af:9b:03:ce:
1b:3c:7b:f2:2a:3d:62:e2:35:84:2d:5c:c8:4b:10:
94:9e:c6:17:4d:0a:10:05:2a:cf:11:81:b0:8f:f1:
54:7f:74:76:f4:be:c9:f4:43:b5:99:94:06:af:76:
e6:5d:7a:15:42:df:ac:d1:ca:94:e1:e5:23:11:9b:
2d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:56:E8:00:7A:13:9E:DC:64:C2:61:D1:F4:A5:EA:D1:F8:CB:17:03
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:81:fd:aa:df:f0:2b:62:dc:ee:87:87:01:07:23:4b:4b:14:
14:b9:e0:cb:3d:95:e7:35:1c:0c:9a:7f:03:b5:71:dd:e8:b4:
2f:d7:26:e9:dc:cc:91:c8:70:b8:c1:4c:ed:44:a5:a4:9b:be:
b6:2f:27:90:14:d3:de:a8:64:55:57:86:c7:60:0b:2f:f8:85:
7d:5c:d5:5e:61:fa:0f:ba:af:12:de:db:09:26:ab:73:77:aa:
ca:c0:8f:05:47:e8:1c:4b:f2:3a:d7:5f:f4:c6:55:a5:09:41:
f4:7f:54:38:82:89:b5:64:07:a9:a3:44:d7:b6:82:1b:40:69:
13:37:f6:55:b5:e4:1d:5f:b0:52:89:8d:08:92:0d:34:87:61:
7f:ed:22:b0:d6:7e:10:ab:90:a2:03:a5:03:46:09:d1:b2:ca:
c2:55:c0:59:de:91:14:f0:67:60:7d:65:74:bb:37:48:5b:5d:
41:b2:54:fc:c6:d7:3f:22:49:77:8c:59:6e:da:5b:fc:ee:d1:
b2:e4:2e:9e:7b:c4:8f:23:fa:69:62:5f:33:cb:00:1e:fd:2e:
c1:e6:10:53:f3:06:ce:d2:2b:c5:50:6b:45:00:40:ca:5c:11:
a2:33:0b:7b:f3:d9:7b:14:c1:bd:54:e7:93:ac:27:38:57:44:
03:4e:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:24:15 2026 by rpki-client