
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: nqyNGKK6Bwn0qNN1TtCdlQDAGU2f6PTPPjsrNoYDEWY=
Subject key identifier: 97:E5:B0:18:00:BB:7F:55:B2:53:C6:62:23:27:65:52:F1:67:12:B2
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 01A16C488BC4C314CC3580781D2CA24950DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 03E2
Signing time: Sat 24 Oct 2026 05:00:56 +0000
Manifest this update: Sat 24 Oct 2026 05:00:56 +0000
Manifest next update: Sun 25 Oct 2026 05:00:56 +0000
Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: xyza175+IjnygV2/aYoUYkN30L5GMqn9Dd8wfDEk2t0=)
2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:8b:c4:c3:14:cc:35:80:78:1d:2c:a2:49:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Oct 24 05:00:56 2026 GMT
Not After : Oct 25 05:00:56 2026 GMT
Subject: CN=97e5b01800bb7f55b253c66223276552f16712b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:65:29:60:97:1a:54:02:b7:57:1d:e7:1a:
77:42:be:68:29:42:fa:9b:52:74:84:81:53:c5:8f:
71:34:51:87:a0:1e:b7:b8:78:12:98:45:6b:20:f7:
5d:31:f6:92:35:6d:63:c7:36:bd:b9:ff:76:83:3f:
9e:bb:3e:08:9e:6e:ce:a7:d7:22:fd:9c:9d:59:f5:
7c:55:d6:bb:03:98:23:94:a6:bd:3f:b9:f3:84:ef:
65:31:f5:7a:b2:cf:3d:7e:ae:3e:81:10:d9:af:ba:
95:03:9a:1e:3f:7a:5e:0d:9f:c1:df:43:d1:2d:3c:
52:d1:e6:5f:e9:f3:51:b6:71:aa:ba:40:b9:55:1e:
f6:44:f3:84:af:3f:5b:bb:5b:8c:9a:3f:d4:d5:72:
ed:4a:59:54:96:37:7e:8f:34:d8:69:61:04:03:a7:
1a:72:31:fa:ad:62:93:c4:01:95:a3:d7:f5:9d:fe:
96:31:49:9a:a0:c7:45:3d:29:ed:fb:fa:fb:b1:ca:
5b:88:4b:2a:3d:8f:21:e2:30:1f:35:29:15:68:19:
a6:3c:2a:38:26:b9:16:67:0e:31:a4:ac:8d:79:60:
10:6c:e6:cf:6e:02:8c:87:f2:95:ee:0c:0a:69:78:
bb:5e:8c:18:47:3b:6f:ae:3f:e3:07:7d:21:77:e8:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:B0:18:00:BB:7F:55:B2:53:C6:62:23:27:65:52:F1:67:12:B2
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6a:75:5f:78:20:4c:e5:81:7b:df:16:e9:d1:17:1c:ad:75:
68:96:36:f3:ec:83:3c:ff:5d:26:7d:63:8a:9f:bb:b1:f6:dc:
86:64:0e:1c:b1:62:12:02:94:96:8f:0c:bf:8a:65:e0:71:13:
15:3e:dc:b9:96:4d:3d:3f:be:21:06:37:d3:93:63:e6:e7:3f:
1d:29:f6:73:01:b2:a7:22:ca:fc:53:16:c8:dd:56:28:93:d7:
07:83:61:22:67:6b:4e:20:71:55:4f:ad:d4:6c:fa:21:8e:b5:
00:ed:ba:91:c6:7f:63:43:20:15:0f:35:f6:05:c5:e1:66:fc:
40:43:8a:7a:7c:b5:b0:a5:72:25:50:57:55:24:7a:5d:37:1b:
ea:30:bc:19:ea:14:21:d9:eb:1f:9f:3e:a2:10:20:47:c4:cc:
96:73:6c:72:27:ad:b7:81:41:18:46:35:5d:52:45:2f:10:58:
fb:69:87:29:e8:2d:4d:64:d6:8d:20:59:94:5b:d1:52:4d:63:
ac:60:80:43:24:e9:10:b8:1b:0e:46:36:16:9f:13:1a:39:83:
26:25:b8:88:1d:2b:2c:75:78:06:16:3f:1e:bb:ec:db:8d:84:
30:df:3d:73:75:3c:7e:be:7c:84:e9:c5:90:e0:90:31:8a:f8:
88:43:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:38:10 2026 by rpki-client