Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: RosndPBUw7p7F7MjZVeN2dJtLe2D3h/7/d5aiwQmYko=
Subject key identifier: 6F:F5:7A:6E:49:56:C0:09:D5:DD:02:05:AE:42:F0:95:E2:E0:4C:90
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019D26964F1F585103B5C941996358E94055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:01:18 +0000
Manifest this update: Wed 25 Mar 2026 20:01:18 +0000
Manifest next update: Thu 26 Mar 2026 20:01:18 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: hqLPkgDmtGV/z177Mkhqe2XsZDLNOnnpeIS/aEwW/8Y=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:4f:1f:58:51:03:b5:c9:41:99:63:58:e9:40:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Mar 25 20:01:18 2026 GMT
Not After : Mar 26 20:01:18 2026 GMT
Subject: CN=6ff57a6e4956c009d5dd0205ae42f095e2e04c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:90:79:6a:53:52:47:8a:eb:45:32:e1:e5:
7e:d5:ad:b6:ba:24:fa:48:c4:f5:f1:39:a3:6f:04:
e1:10:2d:44:2e:2e:88:1e:84:9c:36:7f:16:94:1a:
45:c6:26:37:67:d3:bf:6d:75:93:0b:db:db:0d:9e:
62:62:e1:f8:ef:db:9b:fe:f5:06:11:47:8c:d1:6a:
e8:92:ff:12:56:5a:23:b1:76:bd:f4:c8:b9:1c:13:
f4:da:f4:6f:5d:e6:dd:6a:ec:6b:f7:37:9e:3e:bc:
e0:c0:ed:7c:75:89:7a:60:85:d6:ef:01:07:7c:29:
26:9a:5e:43:54:fe:83:b7:66:da:59:4c:0c:90:86:
0a:2f:b3:58:35:a6:54:02:d4:58:cc:09:77:00:04:
b6:40:6b:9f:63:aa:13:51:5c:24:df:1c:df:36:e0:
95:47:33:6f:1f:b6:23:32:7a:7c:a8:df:20:bd:1e:
b5:f0:29:c1:11:a1:6e:a3:37:67:8c:04:6c:e7:32:
2b:01:ab:83:18:9a:21:41:34:2b:e4:13:a6:a8:84:
ff:61:35:d3:8f:07:cf:91:dd:52:75:2e:2e:b6:38:
73:f9:f7:bb:0c:c5:5c:1b:2f:4e:96:0d:e2:73:32:
21:db:86:72:25:7f:e9:bd:22:87:5f:91:be:d0:58:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F5:7A:6E:49:56:C0:09:D5:DD:02:05:AE:42:F0:95:E2:E0:4C:90
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:01:cc:13:6f:74:b1:23:b0:f0:c6:30:a1:c4:22:c8:4b:cd:
20:ef:6f:2f:97:bf:97:40:c6:41:45:19:e5:30:e4:b2:e6:bd:
83:f6:62:68:2c:ed:f1:f8:55:05:fa:a0:23:4d:d3:ae:5d:06:
f2:cd:31:7d:6b:d9:cd:7f:4f:e9:dd:57:82:9a:f3:df:fb:44:
32:ec:0b:d8:e6:54:fc:5f:d6:18:bc:eb:a5:9c:15:48:5c:96:
7b:28:61:5f:50:37:cb:bd:48:7e:71:be:09:d6:ab:6f:27:97:
e4:b7:17:47:84:ac:46:c3:41:fe:c5:9e:ec:d0:c0:b2:9c:06:
7b:88:2b:f9:a5:da:89:07:c8:46:c5:f8:33:b5:01:7d:d4:6b:
5b:70:bb:a5:1d:3d:22:72:3c:89:67:ab:09:e6:a9:6b:39:c5:
85:a2:48:73:2a:16:93:d1:5d:46:1b:10:07:27:ee:57:96:cd:
31:dc:fa:b9:10:f8:6f:4b:95:aa:a2:62:9d:fa:b7:52:39:be:
63:36:23:76:38:56:b0:d6:f5:81:28:21:86:2c:5e:e6:a3:e1:
10:b1:2a:2a:e0:a9:b8:83:c0:45:a9:58:c8:db:90:03:70:6f:
d8:97:37:b7:2c:b8:ff:65:89:ed:84:24:60:0d:e9:02:36:9c:
8f:cb:f9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:11 2026 by rpki-client