Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: G5sIqER0BskRYfDEq7bRer7ntejFcv/0aYxb1kQYVKQ=
Subject key identifier: 98:6B:CD:72:2C:62:08:02:6C:4E:9B:E8:79:5D:B3:83:FC:07:79:B6
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 019D277297907C5011CA41A0DB85F6AD5E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 0462
Signing time: Thu 26 Mar 2026 00:01:54 +0000
Manifest this update: Thu 26 Mar 2026 00:01:54 +0000
Manifest next update: Fri 27 Mar 2026 00:01:54 +0000
Files and hashes: 1: 26tifeDJOokQX2xBf_3Nq0FjNP0.roa (hash: 9C1lRs6FbIMhNzNJlmiz4jKcDXBY2F5bdab09+tRw4k=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: SSuiTCW9R5017KA+CKfox8lGQOxAxdIVaGd/C0JmH/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:97:90:7c:50:11:ca:41:a0:db:85:f6:ad:5e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Mar 26 00:01:54 2026 GMT
Not After : Mar 27 00:01:54 2026 GMT
Subject: CN=986bcd722c6208026c4e9be8795db383fc0779b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:b0:cf:61:94:12:9f:ea:b9:12:68:33:61:
1c:21:ce:9f:b6:34:3b:69:1d:a3:b0:8c:85:49:42:
ee:2f:4e:cb:6f:ee:76:51:b4:de:48:47:2f:8f:0e:
b1:fd:33:1e:83:50:f9:44:d6:bf:90:2a:4c:db:2d:
1e:ff:99:bb:34:f1:0e:1a:8a:97:64:98:0f:3f:6d:
4c:f1:a2:f3:53:1b:dd:02:f1:29:b4:b3:25:99:63:
b9:eb:7d:d7:17:e4:6e:d5:65:4e:a1:2f:43:24:a3:
41:08:c1:b8:37:e7:3f:fb:90:9f:49:8a:82:d0:32:
75:09:23:56:1d:27:ef:c3:43:74:27:62:4a:ee:2d:
ec:73:7d:ba:d2:0f:cc:7b:34:1e:b9:56:63:a4:5b:
0c:4a:09:c5:a6:86:d3:b1:b7:cb:6a:72:e4:1c:b1:
73:d4:44:f3:fb:9c:87:b3:48:19:8b:dc:1a:83:fd:
5e:15:5f:b3:43:32:ed:23:04:23:b6:50:dc:ed:53:
f9:1c:53:12:c3:8c:7d:55:11:8a:83:9d:2a:eb:4c:
61:dc:0d:3d:fd:ec:34:6e:1b:19:ca:6f:53:dc:01:
13:ab:1f:43:16:55:8a:cc:e4:b2:b5:b2:7e:f8:d9:
6a:87:f9:d2:72:9c:98:88:dc:87:6a:8f:5f:4f:0e:
72:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6B:CD:72:2C:62:08:02:6C:4E:9B:E8:79:5D:B3:83:FC:07:79:B6
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:af:b4:cb:ee:ee:29:49:f1:97:69:88:3d:3c:dd:13:15:f3:
5e:c0:ca:01:12:2e:18:8f:c9:04:f0:38:3a:e1:1b:f8:35:19:
a4:71:6a:29:63:5e:2b:96:07:a7:64:d7:a6:b7:a7:ac:3f:36:
4a:e5:f2:4a:ce:24:ec:f5:73:aa:65:18:f0:0e:7d:fb:32:21:
d2:5f:32:e4:b9:22:9b:2b:aa:a4:94:e1:f7:14:08:a1:ee:0c:
89:3f:76:a8:29:25:48:4e:21:e8:b4:57:f9:60:bc:c5:9f:92:
f3:b6:a2:c2:f2:19:24:d6:67:e1:22:3a:68:d2:06:34:86:f8:
a8:81:e8:50:f0:af:c5:d1:75:1e:60:9d:3b:15:a3:c5:e4:bc:
48:72:a0:61:75:09:7c:6e:35:eb:a0:26:a8:8a:68:2b:d6:72:
ce:db:85:e0:13:51:2c:bc:97:1b:55:78:94:35:93:75:ad:21:
0e:04:45:83:b7:4e:68:b0:d0:11:d2:f0:7f:7e:7d:5e:99:ab:
28:c9:b7:6b:e0:61:6e:7f:d3:b7:40:86:0f:ee:39:f7:3a:b1:
30:6f:2a:20:03:6d:fc:30:ff:9d:13:7a:21:bb:31:79:15:c3:
03:00:58:ff:c5:61:ba:eb:7b:5d:b5:a7:d1:e5:72:02:05:bc:
01:c8:91:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:08:32 2026 by rpki-client