Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: rA85AH7WutVGw3/jua5aPuZhlaj2MV+TE1WxZSQdTJI=
Subject key identifier: 88:3B:A2:5E:4A:74:E3:4D:FD:AE:9C:CB:A0:1A:1E:87:E9:F6:BB:64
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 01A0D3159D6862D6525F813893F0509A8F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 11:03:24 +0000
Manifest this update: Thu 24 Sep 2026 11:03:24 +0000
Manifest next update: Fri 25 Sep 2026 11:03:24 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: L9jPPeiaIUL0hJV3/EWeM1aQSoBBEdiUHDdK6RqjP+4=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:9d:68:62:d6:52:5f:81:38:93:f0:50:9a:8f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Sep 24 11:03:24 2026 GMT
Not After : Sep 25 11:03:24 2026 GMT
Subject: CN=883ba25e4a74e34dfdae9ccba01a1e87e9f6bb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:d3:ea:50:bb:e8:60:2f:05:85:e1:7d:bf:
5c:f3:4b:8b:d8:69:4b:13:0e:21:13:71:25:9c:51:
cc:44:a8:e7:b4:e0:a8:8a:0f:96:1f:c0:b2:ec:b9:
c6:42:65:1a:35:bc:64:9f:0b:21:41:e3:9a:1a:03:
ee:57:0f:8f:1a:79:6c:15:e1:9d:67:29:23:f9:07:
ca:35:2f:37:38:64:94:f6:e4:58:95:8d:2e:47:d4:
3c:9b:de:fe:8f:40:fe:69:09:4f:8e:64:c7:f3:c3:
ca:cb:0f:6c:cd:35:04:d2:f1:ff:0e:1a:5e:ec:44:
0c:56:c2:cf:c3:bb:7f:2a:1b:18:89:18:ca:eb:2c:
1f:02:37:d5:46:51:18:ad:32:86:45:66:c9:64:32:
37:1e:d4:09:df:8a:f7:fc:15:19:27:bc:e4:11:f1:
6b:ec:b7:c6:ad:a0:f1:9f:41:30:49:a3:5e:7a:7f:
92:74:ad:bd:16:6d:a8:3c:67:4c:1c:ff:84:9c:06:
08:63:ac:73:20:29:12:fd:28:9c:4c:e6:19:e9:53:
72:51:b9:5c:5a:2a:48:71:17:b2:6b:60:60:af:76:
d8:4c:b7:ee:5e:55:e9:55:8c:20:14:9b:9c:aa:42:
8a:65:6b:68:3b:4d:a0:a0:c2:32:14:34:8a:7d:b4:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3B:A2:5E:4A:74:E3:4D:FD:AE:9C:CB:A0:1A:1E:87:E9:F6:BB:64
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:c7:66:c9:f7:0f:c9:10:d8:c4:21:bd:1b:24:25:a6:9d:
d4:23:ed:67:c1:f7:f4:74:35:94:ed:41:be:40:c8:5e:5b:de:
56:5b:f2:6f:0f:53:a7:42:96:bf:52:03:49:bd:c4:95:cb:36:
11:3d:a8:d2:9e:66:f6:74:5c:35:e6:5e:9a:18:d9:ab:a6:9a:
03:68:f7:d5:8a:2c:97:ed:1b:1e:ec:ad:8a:fc:15:9d:5f:f2:
c8:a3:03:43:1e:49:f7:8d:1d:77:60:67:3e:d4:65:15:2d:ba:
5d:24:d0:1e:91:02:e4:9f:3d:7e:30:34:31:c0:f8:9f:a3:25:
f5:48:f3:ca:e1:35:53:13:98:3e:3e:34:c9:ca:da:0b:40:48:
a4:35:01:a9:7d:c2:d7:44:fb:36:12:c7:63:08:90:d1:56:28:
05:46:e9:8a:46:94:83:63:aa:1f:ec:7f:1f:41:e3:d6:57:67:
a6:b2:b8:ee:09:59:b0:60:d3:c6:0e:49:06:9a:3f:18:7a:24:
24:09:e9:66:3f:38:84:f0:05:af:1a:3e:a8:97:e1:da:76:4c:
16:da:62:8b:cd:01:6f:fe:15:8a:54:bb:e8:df:18:b7:cd:14:
f4:3c:c2:e9:c4:fb:ec:e9:bf:1c:ea:b4:ea:16:b7:a4:01:46:
b9:af:02:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:30:18 2026 by rpki-client