Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: U+3Dn2f4S4QsOyacbAze/b7kNnI6D9/zyyjpebDd6WA=
Subject key identifier: FB:A2:94:76:48:D3:1F:C3:83:EC:19:C0:88:A3:13:BC:E2:D7:3E:94
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 019E314E358A5001A5C4AD47EAEFC5D5BD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 0A32
Signing time: Sat 16 May 2026 15:01:09 +0000
Manifest this update: Sat 16 May 2026 15:01:09 +0000
Manifest next update: Sun 17 May 2026 15:01:09 +0000
Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: nW3wWtZVG0c1dU2gAXgFmnLCrFXiQauyY4+6afAeuec=)
2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:35:8a:50:01:a5:c4:ad:47:ea:ef:c5:d5:bd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: May 16 15:01:09 2026 GMT
Not After : May 17 15:01:09 2026 GMT
Subject: CN=fba2947648d31fc383ec19c088a313bce2d73e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:ac:b4:ee:da:3d:29:11:6d:bf:79:36:c7:
d0:71:b0:8a:24:bb:8c:66:7a:68:07:af:fe:11:bd:
eb:41:ca:c8:b5:8a:78:3b:4b:df:50:4d:77:c3:81:
59:6a:d5:b5:c2:d5:04:26:a8:d6:7e:2a:b2:c2:5a:
01:9b:6a:2f:13:9c:49:56:13:8b:6d:2f:a6:7e:00:
25:7f:75:13:09:18:3e:17:82:9b:2a:53:d9:4f:ed:
45:db:42:a1:76:71:40:cc:92:a9:5e:04:a8:3f:b9:
97:e8:45:39:ca:5b:65:e4:05:da:7b:e6:45:82:72:
d1:17:6a:bd:8f:3b:88:60:9d:37:79:b6:85:70:ed:
cd:74:a7:8a:0e:43:8e:10:4e:c3:f2:42:e7:a5:82:
54:6d:f2:9c:5a:27:95:1c:37:02:55:a2:e0:33:57:
6f:b0:b9:1a:7d:49:52:3f:39:70:af:4d:8e:69:dd:
88:86:18:98:25:e1:2d:7a:8a:c8:97:e2:42:13:b9:
2d:59:bc:66:f0:75:bc:ad:c9:2d:af:a6:5f:d7:78:
45:1c:d1:30:a1:5a:9f:e8:d7:fe:ac:e4:6f:fe:d9:
e3:b1:35:43:8a:5a:f3:ea:95:84:02:0d:18:18:ad:
53:88:b9:c3:1c:d6:6a:b7:a0:71:67:8a:a2:6a:cb:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A2:94:76:48:D3:1F:C3:83:EC:19:C0:88:A3:13:BC:E2:D7:3E:94
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:52:8e:6d:71:90:2c:4b:9f:87:4d:25:f6:77:ab:f8:21:03:
30:ee:60:a7:63:da:2b:4f:fe:5b:e1:bf:37:bc:39:f7:e8:86:
a0:64:2b:d3:69:40:f5:e9:7b:db:80:cb:33:e1:73:91:b3:e8:
e7:92:f8:e8:18:3c:93:c4:b5:95:45:7b:1b:a0:8f:06:2d:5c:
10:98:76:d0:dd:34:25:f0:c6:dc:b9:aa:89:54:b8:0d:56:37:
c0:83:96:f7:f4:27:81:dc:99:c4:75:ab:c1:f5:74:33:7c:b7:
b7:ec:da:c5:f4:79:ef:a8:92:7f:aa:60:01:e0:3b:79:bd:41:
c4:3a:3a:89:b0:80:e6:17:9e:d8:e6:23:fc:ee:69:4d:09:7c:
d1:29:29:04:e2:c9:47:c2:7a:24:f6:5c:20:62:01:77:11:a6:
de:18:c3:d7:27:d2:c4:c4:65:93:9d:95:01:7f:9d:31:30:8d:
82:70:29:1a:99:cf:0e:a4:b1:0a:a2:70:15:0a:74:d3:43:9e:
c0:d6:7a:ad:e9:8a:6a:bc:cd:cb:9f:24:4e:e0:99:f8:63:d9:
06:10:d6:0e:92:57:da:85:2f:9e:9d:4e:31:44:73:79:c8:93:
99:2a:c4:4d:f1:99:4c:e0:9a:71:52:80:4e:8a:b1:04:2d:9f:
55:5d:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:31 2026 by rpki-client