Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: zUjYBAWYYvLk6RMzvO2TJfx/0BS4NWYXHr7NeJOsx8c=
Subject key identifier: 2A:69:D2:77:3B:CE:75:B8:A0:31:E4:8B:CF:1F:EE:0E:33:4A:90:D1
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 019F190CD8603B0446B94D5E16F51D062424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 0AAA
Signing time: Tue 30 Jun 2026 15:01:39 +0000
Manifest this update: Tue 30 Jun 2026 15:01:39 +0000
Manifest next update: Wed 01 Jul 2026 15:01:39 +0000
Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: 45ndOhrx8beBXX+QHkIpZaD8V/vy07F5AZOgETorKO0=)
2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:d8:60:3b:04:46:b9:4d:5e:16:f5:1d:06:24:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Jun 30 15:01:39 2026 GMT
Not After : Jul 1 15:01:39 2026 GMT
Subject: CN=2a69d2773bce75b8a031e48bcf1fee0e334a90d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:85:af:fa:b7:4b:98:89:98:95:9a:7b:66:
b0:87:7b:81:5f:dc:4d:4f:d5:f6:b9:4a:37:50:1f:
3d:29:a9:83:86:ae:4f:69:6e:f6:4a:96:65:7d:05:
4b:a0:a9:3e:0d:d2:1a:1e:7a:d8:1f:42:ab:5a:e9:
04:5b:72:0d:2b:c5:f2:b4:17:02:0f:c5:e2:39:33:
68:00:f5:b5:9c:f3:3a:9a:13:58:99:d2:5f:38:c4:
d4:a7:36:18:92:04:a4:33:4f:52:a9:86:2a:25:81:
1a:7d:06:06:0d:d0:c7:d8:8c:1e:02:ce:96:20:37:
04:cd:4e:61:48:f4:1b:e6:39:6e:d8:ac:20:6b:cd:
49:5c:62:d1:6e:ad:39:8b:a7:ae:d9:c7:6f:33:1c:
64:fa:50:f6:59:63:59:b3:fc:ac:8c:81:ef:d2:bc:
78:bc:26:13:34:4b:d9:86:32:1c:b9:be:ed:6a:57:
8a:11:7e:22:dc:fa:65:fe:8a:63:c8:a5:7f:4b:34:
4a:11:6d:ee:84:18:e1:05:cf:04:31:93:0c:bc:54:
d3:fd:e4:59:11:64:aa:f2:ea:10:ae:14:6a:08:42:
3f:d0:d4:c9:3a:71:e3:d6:d3:c8:3b:2a:6d:66:53:
96:13:84:76:12:55:cc:73:26:c2:f2:35:ab:fd:7f:
07:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:69:D2:77:3B:CE:75:B8:A0:31:E4:8B:CF:1F:EE:0E:33:4A:90:D1
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2b:67:c8:74:a1:dc:0b:be:a2:67:1b:1e:09:db:06:f6:53:
79:d7:63:97:9e:fd:ca:11:a8:7b:6b:1f:cc:f0:37:ba:b1:16:
0b:6b:aa:05:44:e7:db:08:1e:08:c2:fc:1a:6c:7a:cd:28:44:
1c:9a:83:a6:ae:00:02:22:10:40:e0:a5:02:9d:3a:dc:e3:c1:
8d:cc:94:ae:87:24:3f:4a:9b:62:bb:53:e5:49:01:5c:c0:15:
89:e6:ba:3b:df:30:44:01:98:0b:87:94:aa:6d:38:1f:ce:9d:
64:ca:30:5c:da:b4:81:42:dc:bc:55:52:a3:fa:9f:c8:3d:45:
7e:30:11:0b:cf:01:d4:a5:37:de:f9:51:ff:3b:d5:a8:c7:e6:
e9:ab:58:9f:87:6d:bf:b7:e1:d7:09:1f:03:5e:91:e0:4e:ba:
b4:73:09:7b:02:6c:28:51:6b:22:46:02:a5:ff:34:c0:4a:67:
c0:e7:8a:55:c4:8d:e3:a1:6b:2e:87:b2:62:0b:ec:a3:e4:63:
b9:08:e5:16:53:01:91:21:6e:2c:b1:77:ae:af:b3:e2:97:90:
d0:c5:a0:1a:7e:b5:7b:2c:a7:85:ae:b0:ae:46:18:64:be:da:
53:f8:0c:df:c8:51:44:9d:84:a3:4c:9c:ef:50:45:95:08:23:
f5:fb:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:35:07 2026 by rpki-client