Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: LrAiXH52x56xQM6v7VKibfV1cALHkqzYVZBO780fryc=
Subject key identifier: C3:DF:DC:01:8D:64:06:19:F4:D4:F5:EF:02:91:B1:B7:AB:9B:AF:E1
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019EB98F372052A88FEB7EF2679D04B5FCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1961
Signing time: Fri 12 Jun 2026 02:00:31 +0000
Manifest this update: Fri 12 Jun 2026 02:00:31 +0000
Manifest next update: Sat 13 Jun 2026 02:00:31 +0000
Files and hashes: 1: 8gHT_lp19vgQo-djG0BRf5eWAE4.roa (hash: Vche9wHHqKAp5aWnmI6EY8xEE+HzW3Pog606cPmiZs0=)
2: B_EncHrDvifkg2nCGMklUrOo0Ug.roa (hash: xcZDiT2m5lq0I5LG6Q29RjfmHvdiXJHBI+h2WR1rfvY=)
3: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: V+jcCXrGqXOidp8k333CAlor75fpmNErIyF8Em4Sj5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:37:20:52:a8:8f:eb:7e:f2:67:9d:04:b5:fc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jun 12 02:00:31 2026 GMT
Not After : Jun 13 02:00:31 2026 GMT
Subject: CN=c3dfdc018d640619f4d4f5ef0291b1b7ab9bafe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b1:8a:29:26:9e:2c:a5:12:f5:23:66:09:dd:
7c:e4:db:e9:26:56:6c:66:ad:ff:6e:3c:99:15:fc:
22:fe:44:d9:37:ad:1f:a7:9e:1f:25:6a:f5:78:41:
d4:cb:34:e4:b1:3d:9d:62:23:6c:34:d2:b2:2d:f3:
47:f7:a5:a0:70:fc:69:22:87:70:2f:8f:72:aa:4c:
23:e5:94:1f:89:6f:7a:c1:d5:08:34:bd:97:48:7c:
d5:9f:58:0a:11:20:06:c0:c8:2b:b0:b4:06:8b:a9:
17:82:f8:ee:c6:d5:87:21:6e:e5:a2:36:b1:2d:c3:
bf:81:7e:27:bb:cc:f6:ec:87:99:10:d2:29:53:9a:
bf:d2:64:1e:c4:b5:7b:e5:d0:77:a3:76:c7:78:7b:
ec:8b:da:74:64:03:76:f0:56:ba:4b:3e:86:2a:76:
8a:c3:ae:33:0a:0a:f1:fe:6d:58:8d:2d:fb:21:1b:
59:af:c1:07:b4:aa:be:a5:41:7e:77:b5:83:b3:cf:
f3:50:8c:16:cd:0f:4b:ad:f7:2f:ad:37:0f:60:95:
91:77:78:84:14:47:8e:4b:5f:fa:71:46:92:58:0a:
3a:93:c4:6b:6b:27:37:a5:ad:d5:24:17:85:74:fe:
34:80:53:70:74:c7:a6:ba:55:d8:86:b6:e6:49:06:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DF:DC:01:8D:64:06:19:F4:D4:F5:EF:02:91:B1:B7:AB:9B:AF:E1
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:05:41:27:a1:50:23:cf:22:1c:fe:14:5a:90:bc:02:25:bf:
76:23:fe:55:5a:32:52:cf:a5:08:d9:9c:33:76:48:d9:4a:5d:
e1:a8:38:9f:11:e4:31:0d:e1:ef:af:f3:8b:c4:3a:ce:ba:a0:
e0:e1:db:07:c5:a6:2c:70:b0:26:f7:ed:1d:08:cb:c0:26:2c:
03:83:b0:ae:25:5d:8d:72:ab:65:3c:b7:3e:5b:c4:0f:ba:51:
4d:2e:a2:2c:f3:c2:07:28:0b:1f:79:71:bc:06:93:17:be:68:
55:db:86:52:b1:36:4e:2c:5f:98:0d:41:7f:97:cd:1e:42:66:
23:8a:d6:c5:cd:01:d8:05:69:d7:64:9f:86:ac:14:de:0e:b8:
fc:cd:2a:fd:9e:90:48:6f:16:e3:2b:59:c3:80:96:2a:61:dd:
cc:94:b3:29:d9:2b:9f:c7:64:62:63:ce:80:34:2d:54:78:21:
11:6d:30:33:62:0b:35:7f:6a:43:89:63:81:13:e7:7c:23:0f:
d5:98:f5:de:44:02:e2:62:14:f8:fe:2a:ca:ea:59:58:bd:62:
18:aa:b2:11:08:be:17:25:48:d5:20:32:1c:97:50:8e:11:a4:
80:a2:9b:a5:d4:cc:bf:11:4b:56:6a:a4:41:95:34:01:ce:e7:
5d:4d:10:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65jzcgUqiP637yZ50Etfz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNzM5ZDIxM2E0MzhmNjc4YjMyMmE4ZjhmODRlMmQ4Yzc4
MTRhY2EwHhcNMjYwNjEyMDIwMDMxWhcNMjYwNjEzMDIwMDMxWjAzMTEwLwYDVQQD
EyhjM2RmZGMwMThkNjQwNjE5ZjRkNGY1ZWYwMjkxYjFiN2FiOWJhZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrGKKSaeLKUS9SNmCd185NvpJlZs
Zq3/bjyZFfwi/kTZN60fp54fJWr1eEHUyzTksT2dYiNsNNKyLfNH96WgcPxpIodw
L49yqkwj5ZQfiW96wdUINL2XSHzVn1gKESAGwMgrsLQGi6kXgvjuxtWHIW7lojax
LcO/gX4nu8z27IeZENIpU5q/0mQexLV75dB3o3bHeHvsi9p0ZAN28Fa6Sz6GKnaK
w64zCgrx/m1YjS37IRtZr8EHtKq+pUF+d7WDs8/zUIwWzQ9LrfcvrTcPYJWRd3iE
FEeOS1/6cUaSWAo6k8Rrayc3pa3VJBeFdP40gFNwdMemulXYhrbmSQY7JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPf3AGNZAYZ9NT17wKRsberm6/hMB8GA1UdIwQY
MBaAFB9znSE6Q49nizIqj4+E4tjHgUrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEt
MzkyZTA1YTg0Mjc3LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEtMzkyZTA1YTg0Mjc3
LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwVBJ6FQ
I88iHP4UWpC8AiW/diP+VVoyUs+lCNmcM3ZI2Upd4ag4nxHkMQ3h76/zi8Q6zrqg
4OHbB8WmLHCwJvftHQjLwCYsA4OwriVdjXKrZTy3PlvED7pRTS6iLPPCBygLH3lx
vAaTF75oVduGUrE2TixfmA1Bf5fNHkJmI4rWxc0B2AVp12SfhqwU3g64/M0q/Z6Q
SG8W4ytZw4CWKmHdzJSzKdkrn8dkYmPOgDQtVHghEW0wM2ILNX9qQ4ljgRPnfCMP
1Zj13kQC4mIU+P4qyupZWL1iGKqyEQi+FyVI1SAyHJdQjhGkgKKbpdTMvxFLVmqk
QZU0Ac7nXU0QXw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 12:07:14 2026 by rpki-client