Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
File: 3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft (raw, json)
Hash identifier: fopayfrvJ+jVV+88MjhzAUWUJeAvlNRv/zcEXb6j9YQ=
Subject key identifier: 1E:C7:1F:A7:12:6C:94:10:89:B9:68:CE:AB:91:DC:34:4D:41:C3:8E
Authority key identifier: DC:71:D0:F6:3F:56:1C:EC:B3:A2:8B:0C:BC:24:59:10:2F:6F:03:FA
Certificate issuer: /CN=dc71d0f63f561cecb3a28b0cbc2459102f6f03fa
Certificate serial: 01A0D01238511D1E1D84A3C59D2D2E5B8257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:50 +0000
Manifest this update: Wed 23 Sep 2026 21:00:50 +0000
Manifest next update: Thu 24 Sep 2026 21:00:50 +0000
Files and hashes: 1: 3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl (hash: tr1GJKr46P096zdJAJrDqjMC0EXEHfg8/rA4rRVXiA4=)
2: BApSbsESE-proQA3IjR2Fc5FrQg.roa (hash: tsQTTQkFusyAqW/gQnJmPH0odJMuP2a12omZQ3HbkX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:38:51:1d:1e:1d:84:a3:c5:9d:2d:2e:5b:82:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc71d0f63f561cecb3a28b0cbc2459102f6f03fa
Validity
Not Before: Sep 23 21:00:50 2026 GMT
Not After : Sep 24 21:00:50 2026 GMT
Subject: CN=1ec71fa7126c941089b968ceab91dc344d41c38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:28:d5:7b:e7:7c:26:8f:92:4d:c7:63:f7:
49:af:96:ac:53:7d:c2:c1:c0:c5:14:e8:e8:e0:ee:
cc:ec:5e:22:a6:19:be:05:f8:89:91:b1:61:9a:8c:
0b:a7:6e:47:26:81:f5:54:c4:c2:83:49:47:ed:3d:
8c:2a:26:fc:75:53:c9:f2:bd:a0:78:c0:4e:dc:d8:
c4:00:dc:85:44:97:a2:e3:11:f4:5f:09:54:8f:0c:
c3:b8:54:72:97:b0:1a:1a:68:3f:f2:fa:bb:67:f0:
9b:79:3d:73:52:23:c9:90:0f:3c:30:ea:37:10:d8:
b7:3a:11:74:ea:34:ab:7d:14:91:04:72:7b:42:cb:
3d:31:c9:75:f0:00:e7:5f:52:e8:b3:65:f0:c6:e9:
b1:a1:13:a5:bc:ac:90:14:3c:63:5f:05:56:36:1e:
2a:99:6e:73:9e:25:27:fe:a8:d7:bf:28:aa:59:6d:
59:82:79:60:c3:41:e8:a1:03:06:0c:e3:24:07:bd:
fc:f7:a1:dc:4f:ee:e2:53:16:d7:a0:8b:84:b6:bf:
3f:af:ea:25:4e:e7:8c:43:0e:6a:42:9a:0e:ae:29:
2c:1f:3c:e1:d1:4b:60:9a:c2:e9:13:a7:4f:98:c6:
67:1e:b9:b9:73:2b:15:b8:f8:d6:4b:59:fa:26:ea:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C7:1F:A7:12:6C:94:10:89:B9:68:CE:AB:91:DC:34:4D:41:C3:8E
X509v3 Authority Key Identifier:
keyid:DC:71:D0:F6:3F:56:1C:EC:B3:A2:8B:0C:BC:24:59:10:2F:6F:03:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d2:7e:fc:19:f8:35:be:ce:05:bd:d9:19:c2:57:7a:75:34:
2f:75:5b:b8:cb:c9:24:6d:d1:76:6b:67:6b:cd:90:f6:ed:20:
3b:ce:1d:15:d0:30:4d:d2:98:01:8e:10:e9:3a:2c:c3:f0:93:
a1:33:2f:da:98:3b:4f:33:f9:0c:39:96:7a:fd:f6:6c:a8:72:
f7:24:9d:8e:30:3b:4b:e0:0f:e1:1e:fb:59:61:20:74:cd:a0:
5d:33:04:e5:98:b7:e3:ce:3a:9c:5f:ac:ad:ad:07:d3:9a:14:
f0:8d:88:42:9a:e9:29:d3:5f:23:5a:ce:e5:8e:51:76:33:6e:
1d:47:f9:28:d1:d2:03:95:83:89:2f:a2:86:47:84:a1:d1:e7:
6b:75:a2:aa:f2:fc:39:4f:97:b1:85:93:40:7d:8d:2a:81:fb:
f2:b5:74:5b:00:c1:20:ed:4c:b3:79:a7:4e:2f:8a:db:25:13:
cd:fd:2b:c1:25:7d:52:65:b3:e4:ed:44:4c:2e:d9:4d:bb:0d:
0b:02:3b:4e:21:db:6e:35:d2:87:a3:24:ad:6b:59:4d:ab:86:
0c:cb:f2:59:d5:04:38:51:12:fb:b3:97:ba:b4:48:23:55:f2:
0a:b2:31:42:b1:7f:a2:2d:90:c8:33:8c:0b:ee:cc:a2:a2:10:
e7:30:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:07:50 2026 by rpki-client