Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: Zu4ZGOotRxuxcOWecl37D3snJcSd4DOOMqrM+nLmdjU=
Subject key identifier: 4C:EA:33:64:F8:60:6E:8C:F5:5B:2A:22:E9:31:EA:AE:82:8E:80:FD
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 01A001386E7366EA1EE53A3D32B5C1E09134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 0326
Signing time: Fri 14 Aug 2026 17:01:10 +0000
Manifest this update: Fri 14 Aug 2026 17:01:10 +0000
Manifest next update: Sat 15 Aug 2026 17:01:10 +0000
Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: aFX56nwv9U5vMJdg2k8g76jU7ZJ3ychIRK9Z5aWUh50=)
2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:6e:73:66:ea:1e:e5:3a:3d:32:b5:c1:e0:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Aug 14 17:01:10 2026 GMT
Not After : Aug 15 17:01:10 2026 GMT
Subject: CN=4cea3364f8606e8cf55b2a22e931eaae828e80fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:2b:ff:73:28:e5:5f:6a:68:35:d5:0d:2d:
f6:87:c1:e0:58:b7:d7:97:8f:52:3e:a1:d6:1b:27:
31:62:a2:03:c1:ec:28:b1:51:22:a1:e6:55:8e:97:
1f:63:6e:3b:7a:80:44:df:30:20:1c:e1:6e:20:30:
f1:bc:28:5c:ba:2c:95:2d:94:c5:b4:9f:6d:76:4c:
86:24:a8:e5:e3:60:a2:fa:27:98:25:5f:8a:c3:c4:
ea:43:fd:64:27:7b:a8:e8:96:63:39:cc:4f:4f:32:
6a:2c:c3:67:13:14:fc:48:b7:06:2e:fd:3a:08:52:
67:14:de:c9:5a:75:2b:f9:9d:23:f6:41:51:bf:53:
e0:66:df:bc:a5:65:66:44:2a:89:b6:51:6d:c2:60:
db:55:4a:47:2e:87:18:e0:12:1f:9b:93:0e:ec:b4:
92:e3:7a:5b:95:79:9a:62:cc:ef:47:76:85:47:d0:
e6:fd:e2:4b:47:e8:fa:fb:f5:05:84:65:f6:7e:31:
3d:d3:f0:5b:c5:73:43:42:7d:75:4f:e8:4f:eb:59:
8a:52:9c:e9:fd:32:49:54:96:d5:dc:05:62:9b:a1:
0f:a0:a7:29:3b:dc:91:60:00:5c:48:62:9c:aa:9b:
21:ba:cb:9c:44:97:c5:14:bb:09:75:ad:81:f9:2c:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EA:33:64:F8:60:6E:8C:F5:5B:2A:22:E9:31:EA:AE:82:8E:80:FD
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:00:88:c0:5d:c0:ec:57:11:9f:56:d4:0c:e4:1d:0b:7e:7b:
e5:7f:9d:e0:e9:fc:37:70:38:29:09:e5:3c:5a:a4:51:0c:60:
3d:37:14:25:8f:b9:9b:55:cb:f1:51:77:1b:17:53:cb:31:52:
a1:71:29:48:14:23:ae:8e:9c:a3:43:84:fa:28:65:76:bd:9f:
28:5b:1b:0a:da:11:ec:33:e4:b6:6f:4e:8f:e1:4e:81:32:01:
42:36:40:fd:a2:c5:34:40:f8:d8:d9:57:d0:bc:14:77:cb:a6:
33:85:c4:69:70:ef:07:e5:39:ab:85:c7:2e:4b:f0:0a:17:96:
13:33:ba:14:6f:23:1c:99:0c:b8:d8:73:d1:2b:ef:eb:9f:9a:
d4:d0:e1:d8:64:17:92:30:5b:a4:5d:61:bd:61:08:2d:80:98:
79:70:83:dc:7e:19:6e:2e:bf:a5:1d:79:84:db:38:03:c1:bb:
7f:a0:98:97:3f:b1:b7:25:74:03:3e:be:03:10:1e:5c:32:1d:
a3:52:30:85:4c:5c:59:6f:a1:8c:9b:4b:fd:1b:c7:dd:42:26:
85:7b:9a:f5:9b:cd:32:31:12:15:f0:ea:4b:50:72:37:cf:4d:
22:d1:b3:62:69:06:94:21:03:c8:9d:88:ce:b7:88:db:a6:3d:
39:de:b3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:17:15 2026 by rpki-client