Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: 7nHh9y5I9VkK333X2DzMg54nmOSelb8ujZndhYRdOmU=
Subject key identifier: 00:21:90:0E:80:CF:B9:5F:A2:15:1C:B4:9A:78:04:E7:12:DE:7D:AF
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019D375228B7A5E0ED2B2BA70BAB6C843A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 02:00:24 +0000
Manifest this update: Sun 29 Mar 2026 02:00:24 +0000
Manifest next update: Mon 30 Mar 2026 02:00:24 +0000
Files and hashes: 1: 8gHT_lp19vgQo-djG0BRf5eWAE4.roa (hash: Vche9wHHqKAp5aWnmI6EY8xEE+HzW3Pog606cPmiZs0=)
2: B_EncHrDvifkg2nCGMklUrOo0Ug.roa (hash: xcZDiT2m5lq0I5LG6Q29RjfmHvdiXJHBI+h2WR1rfvY=)
3: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: LkE+6eZHFSKi1J07cvCh7hR/RojQzI5HVnegKE85UDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:28:b7:a5:e0:ed:2b:2b:a7:0b:ab:6c:84:3a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Mar 29 02:00:24 2026 GMT
Not After : Mar 30 02:00:24 2026 GMT
Subject: CN=0021900e80cfb95fa2151cb49a7804e712de7daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:47:93:57:3c:a8:28:d5:f1:f1:e6:c7:01:74:
f5:be:b6:fa:d7:d5:d2:2e:24:c2:be:5a:95:bf:16:
7c:9e:22:2f:af:a0:84:d7:53:d5:84:da:3b:cc:c5:
8d:18:91:5a:47:2c:49:cb:14:0c:13:d8:cf:27:f0:
5d:01:ac:1b:85:3f:85:35:94:9f:68:8d:5a:e6:6c:
dc:54:7f:53:56:18:ba:e8:2a:94:2e:bc:06:bf:30:
8b:42:98:50:82:ab:a7:5c:d7:a1:09:db:88:64:0e:
cd:f7:09:68:b2:3b:21:86:21:e6:a9:75:55:64:ee:
c5:d5:6d:2f:a6:c6:89:56:20:a1:c2:91:78:61:c0:
fb:88:b8:28:bb:a3:18:43:72:b1:27:cb:cc:a2:27:
61:cf:dd:e1:a9:4c:62:91:d8:ad:8f:26:ac:d2:a0:
56:90:1b:95:6d:38:93:f2:e1:00:25:77:36:4f:22:
17:44:a3:c4:23:34:26:57:a8:0d:9b:a6:bf:28:ff:
b8:6f:52:24:c7:ca:5c:4c:88:8e:5e:80:9c:1b:a1:
fe:f4:b7:fe:32:a5:10:7c:d8:46:26:96:d7:f5:54:
91:a3:e6:d0:44:f4:fa:dc:9d:c9:0d:e6:98:10:2f:
76:39:35:a3:4d:75:d6:d8:05:15:3b:dc:1e:b6:13:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:21:90:0E:80:CF:B9:5F:A2:15:1C:B4:9A:78:04:E7:12:DE:7D:AF
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d8:ca:39:12:07:db:90:fb:f2:ad:b5:97:f2:33:49:b1:a0:
f9:9d:c1:09:a1:5e:db:1a:19:ab:be:4e:ea:ec:d4:cb:83:74:
c0:24:8f:10:d0:ec:0f:62:f7:0f:be:b9:4f:4a:a1:b5:16:b9:
26:56:5f:0f:fb:f6:bc:ee:d9:af:01:b2:86:9b:b2:f4:66:e7:
1f:89:75:4c:34:62:c1:59:b6:e4:f6:f1:fe:69:b2:9e:31:af:
22:4a:3d:b2:41:f6:d3:52:09:c2:fd:30:1b:53:ec:b5:f7:fe:
e0:9a:25:ae:bd:09:ea:23:6c:19:e5:06:48:c6:60:89:4c:e5:
0a:4e:24:26:2c:10:c1:d1:8b:c5:fe:70:b3:e6:3d:bf:fa:d1:
26:1e:33:6b:bb:d9:e7:24:6b:1d:ad:f5:82:f3:a9:a7:3e:6d:
62:89:4a:d0:54:59:3c:be:2c:d8:54:ab:09:16:30:b0:be:78:
28:89:11:a0:c3:2e:f9:66:3f:06:dc:4e:93:15:06:d1:e4:f2:
cd:5c:31:85:28:94:28:04:c9:00:a9:ce:6e:1a:b3:98:3d:e2:
df:08:34:45:39:a5:9b:f6:ae:41:6f:ca:6d:6c:f6:d0:89:1f:
a4:9f:6e:62:0b:89:7f:03:39:98:e5:02:7a:e4:39:b7:ed:18:
cc:82:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:49 2026 by rpki-client