Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: Af2y4vqzKkz+wZJVZRU6U6oJOcDXDbP1ckhCmcY8XB4=
Subject key identifier: D2:EF:08:84:F6:D3:AE:33:60:70:07:D0:71:0C:86:AD:0D:6A:2C:C8
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019F909169E01CA9523883A1F37C237609D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 20:01:16 +0000
Manifest this update: Thu 23 Jul 2026 20:01:16 +0000
Manifest next update: Fri 24 Jul 2026 20:01:16 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: N3s+MvxGS5Zh8YW1KusIH1cbqMiPUaUC14+EGKTJR7c=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:69:e0:1c:a9:52:38:83:a1:f3:7c:23:76:09:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Jul 23 20:01:16 2026 GMT
Not After : Jul 24 20:01:16 2026 GMT
Subject: CN=d2ef0884f6d3ae33607007d0710c86ad0d6a2cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:e9:97:65:87:8f:03:1b:61:67:46:c7:4e:
d9:d2:a3:31:49:5e:b7:d9:dc:40:3c:7f:0a:0b:d0:
f8:b0:96:a6:70:70:5c:e5:e1:71:19:77:dd:79:2b:
03:fe:81:ba:3b:e4:48:92:67:5a:06:a0:1d:70:8f:
40:ad:4f:f3:14:98:bc:8c:d6:7d:94:fe:01:e3:87:
89:eb:db:c5:6d:7c:d3:29:f5:4a:88:4c:a3:bf:77:
21:fd:c4:51:33:92:54:18:ec:b8:cb:ea:92:5b:d6:
b9:8e:da:9d:76:c9:95:ce:de:99:6a:2d:f8:ee:b5:
ee:1a:d1:37:60:20:5b:08:c1:ec:12:27:aa:de:dc:
38:ed:ea:b0:59:f9:65:d1:58:3a:80:98:f2:7d:99:
2d:0f:fe:85:cc:62:66:ad:ed:4a:fa:5b:be:25:4b:
b0:91:b5:23:36:4b:12:e8:5c:c8:9e:30:32:db:f4:
bb:73:46:dd:b0:35:c2:91:be:36:a5:9b:89:34:32:
53:c8:8d:f8:02:81:0b:d8:5e:6b:c2:83:9c:e0:9a:
2f:1a:9b:48:0e:d4:45:65:18:ce:54:cb:d9:aa:b6:
fc:8c:4f:69:ab:e6:6d:83:af:88:62:84:5d:c2:04:
15:2a:c0:ef:30:ef:9c:8a:d5:92:8a:07:f7:3f:b9:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:08:84:F6:D3:AE:33:60:70:07:D0:71:0C:86:AD:0D:6A:2C:C8
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:75:33:68:bb:04:c5:55:f7:33:9f:8b:b3:89:97:db:a9:33:
31:81:da:fb:a4:05:f2:ab:e0:89:06:a9:54:6f:63:38:ec:21:
89:d9:e2:b4:e8:e0:e1:4f:d1:b5:48:b3:e8:fd:2b:31:52:0e:
2b:cc:f2:f8:f1:77:59:70:d5:49:99:ff:88:b7:fc:93:64:20:
b5:08:c0:35:5b:9f:c1:55:9a:82:68:af:78:90:0a:f4:32:53:
1c:b7:33:28:0b:43:5c:a2:e5:a0:e0:f6:d2:55:fc:3c:02:28:
f4:61:73:30:ae:9d:b5:2b:b1:ec:27:98:67:e0:8e:de:c3:5a:
28:d7:9b:f0:60:08:56:41:23:30:76:76:c3:f0:a3:55:bc:7f:
f0:ae:3f:99:66:6e:80:3e:cd:81:fe:03:a2:7f:04:ce:ad:71:
51:64:26:81:f3:cb:d1:0d:06:f7:da:be:e3:cb:ab:de:62:92:
fe:1d:4e:76:30:41:06:2a:9d:fe:d4:66:a9:c1:ce:31:0f:1c:
86:34:0e:88:36:87:3d:77:c2:3f:83:0b:67:28:d5:00:c3:1c:
45:16:20:05:ff:bc:fd:8f:62:ea:26:bd:d5:44:f9:13:5e:8b:
78:c1:13:0e:ea:36:3f:7b:56:4a:6c:ba:85:b1:47:74:4d:db:
df:a4:9c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:50 2026 by rpki-client