Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: BagLfGLh0fdNoKIrCIt9bcdUYhNbihlqGMYC0YSjslc=
Subject key identifier: 60:4F:9B:20:64:46:83:FB:0A:B0:EA:63:EA:92:64:91:12:3E:65:36
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019E1DC73B5147779DA944670F43AFD828A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 20:00:56 +0000
Manifest this update: Tue 12 May 2026 20:00:56 +0000
Manifest next update: Wed 13 May 2026 20:00:56 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: 1Qnf/bXLwQOZppidGjQ6w3vnefGQhjBiBW36wwFBCFg=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:3b:51:47:77:9d:a9:44:67:0f:43:af:d8:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: May 12 20:00:56 2026 GMT
Not After : May 13 20:00:56 2026 GMT
Subject: CN=604f9b20644683fb0ab0ea63ea926491123e6536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:80:ef:e7:32:27:61:bb:d7:f9:cc:59:e4:
42:5d:81:0c:c7:d1:84:e2:c8:7a:9b:46:8d:c9:2c:
99:42:87:69:4e:55:75:52:9a:ba:68:d3:0a:30:84:
48:04:d9:72:b8:9f:b5:00:ff:02:c2:71:dd:c5:31:
1c:fe:f1:3f:8e:8f:11:d9:8f:7e:95:60:c3:6b:ef:
e2:cc:b3:d6:b1:fc:dc:aa:58:03:19:78:c8:26:59:
f3:67:d7:c6:bb:b3:73:29:bd:b6:10:89:66:d3:56:
e2:6d:66:ff:f9:2a:9e:f4:e4:4d:2d:0a:5f:1a:79:
08:60:b7:8e:59:40:ee:43:c8:bc:0f:ca:cf:0f:cf:
96:f2:10:ad:05:bf:51:0a:a7:ed:a9:b4:10:56:13:
c4:28:98:15:93:fe:db:d7:7c:22:20:2f:51:57:bc:
39:bf:9a:1b:8d:60:73:94:6d:24:08:4a:8f:f4:b0:
1b:62:ee:ab:78:3a:8a:4c:68:30:b9:5f:c9:02:ed:
de:ae:2f:7f:ce:6c:33:be:12:57:31:c3:4e:25:f7:
76:7e:a8:d7:cd:32:2f:7a:e5:30:e8:31:9a:0f:58:
d8:95:6a:4e:b3:78:5f:2c:a1:d1:34:52:31:24:3d:
d9:7d:08:db:94:88:13:de:89:89:a0:7c:d7:75:89:
66:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4F:9B:20:64:46:83:FB:0A:B0:EA:63:EA:92:64:91:12:3E:65:36
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:5d:f4:2b:05:fd:7d:20:21:79:97:5f:84:96:d8:9e:3f:31:
02:fd:3c:af:52:55:14:32:bc:7f:21:57:fe:2f:40:63:f5:8c:
f3:64:e0:eb:69:58:78:a0:0d:59:08:91:ea:29:19:82:ad:66:
2f:65:9b:b9:93:16:21:77:26:f3:6a:8f:93:c2:33:46:8b:2f:
b9:7c:81:6c:77:0b:3f:5e:dd:c5:31:00:d0:da:3e:76:43:b9:
21:7b:bf:32:cc:f9:b1:71:3a:c0:41:5a:13:21:7d:5b:ac:e1:
31:8b:db:73:4b:ed:a8:ef:c4:db:1e:f1:15:37:f9:e9:29:0f:
c6:5a:b9:cc:4c:cc:17:b5:ee:93:4e:7a:9d:c1:b3:33:37:03:
f4:44:c7:f0:78:1d:8c:44:48:4b:ca:63:f7:6f:23:f9:17:55:
39:50:31:f6:71:f8:be:88:29:cd:4e:ab:0b:c9:4a:01:64:64:
76:67:34:48:89:9c:98:2f:dc:02:51:9a:e7:c0:6f:76:44:2d:
3f:b0:ec:38:d7:39:6d:6a:f7:e5:c9:41:09:3d:00:a5:99:b9:
a1:b3:76:4f:d4:86:6d:b6:21:b8:08:78:03:4f:80:48:28:4d:
ee:af:26:20:a7:35:f0:ab:1e:86:a0:be:61:21:07:bf:ec:48:
7c:ca:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:46 2026 by rpki-client