Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: BSsAk7Yfs41YZfqjuL9HwQnUo6MIzBEaxci0BmAB8Sk=
Subject key identifier: 2D:72:0E:B1:F6:1F:6B:32:8F:C3:E9:DB:0C:C5:55:77:8B:4E:E0:15
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 01A1310F58F0D8515E848FEF328CDE5C06DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: 01E3
Signing time: Mon 12 Oct 2026 17:00:51 +0000
Manifest this update: Mon 12 Oct 2026 17:00:51 +0000
Manifest next update: Tue 13 Oct 2026 17:00:51 +0000
Files and hashes: 1: AhAcdKgAbaxev6WZheq94rPVhy4.roa (hash: jnz0tuvjSI9nchLY2GePdtWDuCFuuGK4nahWThqEMJU=)
2: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
3: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: gZZ1KqcwpHdnnWmov1AKZUJBlFe7BQRFVB0Y+7c+XGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:0f:58:f0:d8:51:5e:84:8f:ef:32:8c:de:5c:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: Oct 12 17:00:51 2026 GMT
Not After : Oct 13 17:00:51 2026 GMT
Subject: CN=2d720eb1f61f6b328fc3e9db0cc555778b4ee015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:5c:77:01:0f:c5:eb:f4:09:66:13:94:39:
c1:99:f7:93:ab:b6:9a:ea:14:21:b0:cd:78:23:ab:
09:3c:9d:74:0b:9d:3c:6e:ff:28:2f:b5:99:3d:27:
53:e5:7c:b0:a2:0d:c5:bb:2f:71:09:20:02:1f:ac:
23:ed:35:c0:7a:35:2a:be:66:72:e7:ab:0d:9a:2e:
72:fb:11:c8:51:03:6d:66:36:df:ea:c8:d4:2d:7a:
5c:af:85:a4:89:8e:13:53:79:c8:1e:ee:b9:0d:45:
45:70:7d:86:14:6d:f9:2e:4f:76:a6:34:ea:fa:72:
3d:5f:19:92:4b:48:79:37:47:16:2d:8d:44:5b:34:
12:5a:6a:29:74:92:66:68:dd:29:ad:1a:7b:bb:1e:
b3:f9:35:7b:87:96:62:31:2d:27:ee:fa:24:e5:28:
ce:b8:5d:8e:86:0f:ef:dd:77:93:c4:4c:26:48:e0:
77:c8:3d:a1:6a:90:21:de:59:8e:cd:33:7d:22:7c:
37:28:ef:69:18:a4:8f:2c:94:ef:67:8d:e1:09:2e:
1a:d0:c0:57:1e:eb:1a:f2:be:d9:91:64:8f:94:eb:
0e:2f:5f:b8:fb:32:ca:aa:15:d8:65:b3:6a:b5:46:
73:9f:1c:18:43:92:3d:e1:e1:6e:6b:e0:27:88:2f:
59:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:0E:B1:F6:1F:6B:32:8F:C3:E9:DB:0C:C5:55:77:8B:4E:E0:15
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bc:8b:d8:32:4c:c1:69:f0:da:f4:6d:c7:2a:fc:b1:b3:6e:
7d:d7:40:67:e8:8f:64:71:04:fb:c2:3a:51:f2:4b:81:a6:e8:
da:0c:16:05:27:0d:6b:38:ce:9e:db:37:d5:4e:ec:23:6a:37:
be:90:32:1a:7d:d4:e1:ec:6e:1a:01:ba:80:3e:5c:bd:a0:d1:
b2:1a:69:75:29:4e:d4:7f:69:4c:11:dc:64:62:7c:1c:e1:e3:
31:9c:a8:c2:d0:be:b6:a9:7b:49:1b:00:fc:1c:76:07:67:d5:
64:32:48:a1:65:c6:32:e4:34:84:b7:f3:b2:0c:c0:20:4d:40:
e2:3c:67:0d:4c:36:72:52:cb:a4:52:d9:b9:a3:39:7c:ce:15:
78:62:e1:b5:38:f8:ef:0e:fc:ca:12:0f:13:d1:65:56:16:b6:
5c:e4:80:37:71:1e:4f:1a:e6:20:c0:af:76:a7:d8:27:04:f1:
e8:c1:8c:6b:1f:c6:d1:b8:88:b0:15:a0:85:ac:ee:fd:06:85:
42:ee:85:3a:cc:a7:ce:17:8a:24:2c:1b:75:d4:70:b6:fb:12:
b3:e8:4e:d2:7b:5d:f7:ee:6e:1f:53:3f:23:4d:3c:78:eb:25:
13:2f:32:73:ea:ed:1d:b3:33:22:63:bf:73:cf:2d:2d:5e:a5:
ed:47:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:51:05 2026 by rpki-client