
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: Eo8/XrU7Ur5USXELXv1cCf8MGHPJBLWsu+EjuQsONLA=
Subject key identifier: 71:BC:39:7D:B0:58:DE:97:C2:AF:07:08:AE:4E:B7:D2:B6:D6:D5:85
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 01A002B8F5EA6D1ADD6E8DAA146094CC0CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 0B23
Signing time: Sat 15 Aug 2026 00:01:11 +0000
Manifest this update: Sat 15 Aug 2026 00:01:11 +0000
Manifest next update: Sun 16 Aug 2026 00:01:11 +0000
Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: AOXz6WvXNWDrJr9pTfFukexIV9LYBDWsiL8ttLGYFBc=)
2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:f5:ea:6d:1a:dd:6e:8d:aa:14:60:94:cc:0c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Aug 15 00:01:11 2026 GMT
Not After : Aug 16 00:01:11 2026 GMT
Subject: CN=71bc397db058de97c2af0708ae4eb7d2b6d6d585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:9f:46:ea:c5:cf:c0:3c:f9:00:9a:01:a9:
68:b0:bf:db:3c:b2:a6:24:ed:0f:8f:90:c5:e1:a8:
d5:ae:49:fb:33:79:b7:28:77:8d:6f:66:2f:9a:0b:
39:56:9b:97:05:8d:ed:7a:62:23:1f:71:fc:a1:d6:
78:a8:9b:14:01:7b:a0:40:f4:b1:da:96:6c:31:bd:
55:84:11:49:65:be:ec:d1:6e:b6:91:2b:d8:87:18:
0f:c3:7a:34:6d:b9:15:fd:a1:73:39:b8:70:c5:59:
a5:38:0d:1f:5a:08:dd:4c:4c:27:74:cf:bd:45:87:
3f:26:18:45:99:0d:3b:47:07:d4:80:6f:9b:5a:8b:
a6:0a:e6:5a:45:eb:b2:5d:4a:c8:b1:07:50:81:99:
21:ed:6b:11:cb:d1:61:44:5a:8f:18:52:8d:fa:99:
82:5e:bd:78:fe:37:d4:60:01:4d:7b:70:cc:34:b1:
81:34:05:a4:78:fd:70:e0:7c:e9:2e:09:24:9c:8b:
b1:da:93:3b:aa:c1:5f:72:23:ee:fb:15:44:16:1b:
c5:67:3b:5a:2f:72:a1:6f:fd:1e:fd:9c:ba:87:86:
d8:9d:c7:ab:b8:f1:b3:5e:ce:c4:37:aa:14:65:41:
b4:af:d7:55:53:42:24:31:92:06:b3:34:36:9c:68:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BC:39:7D:B0:58:DE:97:C2:AF:07:08:AE:4E:B7:D2:B6:D6:D5:85
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:33:5f:be:ec:50:59:1d:63:5e:19:52:e1:7b:ba:9f:c6:9b:
de:02:a5:de:26:a6:18:45:55:7f:da:b7:b8:af:d7:e6:96:35:
c4:7e:b5:1d:b1:6a:b6:8e:b4:a6:a5:56:a2:33:5d:d1:62:2d:
22:28:ad:e2:25:92:d8:12:48:24:ee:36:b9:60:87:d4:af:c5:
ee:e0:0b:33:5c:59:56:84:e9:d3:a7:47:d2:ed:9f:58:97:70:
74:7a:07:b5:dc:97:13:16:87:d3:ca:4a:6c:e5:53:69:a4:99:
67:3f:6b:dd:36:ef:81:69:76:02:57:33:01:2f:31:91:b5:7b:
f7:03:81:14:4e:2c:dd:56:7a:1c:49:db:77:bd:8f:31:ff:77:
05:b8:92:c9:82:14:30:68:2e:a0:af:5e:48:08:ad:34:1c:51:
8a:59:da:20:58:26:91:62:e1:98:71:6e:71:28:0e:83:79:09:
b4:91:6b:41:71:b8:1a:ad:53:85:31:c9:8a:5a:a0:6d:14:82:
19:a2:6a:56:22:48:85:46:25:60:ad:e9:ec:a7:c0:80:d4:ed:
ce:02:ce:9e:dd:8c:33:38:04:04:e1:f5:98:b1:d0:e7:77:cd:
7f:49:ab:c2:c5:ac:35:a6:f0:85:f6:0c:51:d5:94:94:67:63:
da:73:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:40 2026 by rpki-client