Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: YUmVUqAFiZGFqrSaCME7U3FU5lY/kVak0ciV7Hniduo=
Subject key identifier: F3:AB:F9:67:EB:89:7C:E7:CB:0F:72:A7:9F:65:8F:25:53:7E:BF:BE
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019EB733116AD4F631ECECF181B3FD6F9FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 13DF
Signing time: Thu 11 Jun 2026 15:00:37 +0000
Manifest this update: Thu 11 Jun 2026 15:00:37 +0000
Manifest next update: Fri 12 Jun 2026 15:00:37 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: 7YmkOf1w4DfPWNNqu15gOQRrX5F1s8VZbxmQs2uWXMY=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:11:6a:d4:f6:31:ec:ec:f1:81:b3:fd:6f:9f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jun 11 15:00:37 2026 GMT
Not After : Jun 12 15:00:37 2026 GMT
Subject: CN=f3abf967eb897ce7cb0f72a79f658f25537ebfbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:87:de:a5:46:50:9f:e0:65:40:a5:47:39:
c9:e5:4b:00:41:90:c6:10:79:4d:7e:20:e2:ec:14:
2d:97:ac:76:08:84:8f:aa:71:7f:c9:9e:da:d2:26:
da:bd:f9:0e:03:26:12:05:fd:c9:fd:33:99:24:fd:
19:95:84:b9:bd:a5:f7:35:4a:7a:2e:97:7b:a2:c6:
d1:9d:67:f5:8b:0f:f0:5b:6d:af:b2:8c:dd:d5:1a:
d8:0a:f2:1e:29:49:58:4f:2e:7b:64:7d:9b:f0:b9:
c1:e3:db:01:db:0f:de:45:6c:06:74:4c:b9:21:a1:
33:cc:e4:f7:60:e5:c3:1c:52:fb:e6:51:9e:ba:61:
9e:13:cc:ad:56:1d:e9:20:db:70:d8:05:64:eb:c1:
15:ae:fe:23:13:be:c9:da:b0:be:59:f3:10:ee:e5:
43:1f:4f:de:4a:70:7e:83:43:60:07:35:57:44:05:
9f:fa:c5:d0:f7:65:7f:c0:f4:ea:60:a5:7a:8f:df:
0a:36:ef:fd:8c:4f:c1:e1:af:16:5d:b4:07:9b:2e:
f9:f9:00:41:31:d9:82:8a:ea:5f:3e:2a:b1:38:de:
15:0e:50:73:9b:ec:bd:03:51:eb:6d:30:27:1c:e2:
b4:24:91:fc:41:6a:ef:62:9a:17:01:68:f4:aa:e2:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:F9:67:EB:89:7C:E7:CB:0F:72:A7:9F:65:8F:25:53:7E:BF:BE
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a3:7a:e9:d4:9a:ae:1c:93:b8:33:27:cd:b3:94:20:af:3c:
68:4c:5c:74:74:b2:fb:18:95:8e:c9:d2:17:b2:13:d8:47:c2:
45:7d:7e:fb:70:f4:34:77:f4:d4:a2:5e:a6:f9:27:e6:5a:bb:
b6:24:14:1d:50:18:d1:22:3f:bf:07:b5:96:65:f1:0b:96:98:
1e:ef:df:80:9b:9e:91:b1:bf:0e:bd:be:72:38:ac:47:b9:67:
e3:5e:31:c3:47:3d:4f:c1:8d:67:ee:b7:c8:85:75:b8:d4:c5:
d5:7b:29:99:86:ba:0e:c6:df:62:c0:2b:9a:8b:b5:ef:5a:5d:
ee:e7:48:4f:af:c2:48:0c:0c:19:b1:b6:32:c8:ae:43:3e:eb:
db:4b:91:74:45:61:ca:f3:51:fe:0a:b8:be:13:cb:54:87:2f:
29:9c:e8:49:a3:5e:e2:c5:b3:59:13:98:47:68:77:a1:a8:49:
94:6d:b5:7d:81:a2:67:b3:9f:ce:b0:17:5e:26:dc:20:48:5a:
fe:91:e7:eb:a3:55:3f:b2:e1:43:2c:79:a6:a0:80:8a:26:16:
53:2b:b7:92:a5:60:fc:2c:fc:c2:2d:9b:5f:d0:23:b1:10:84:
e9:89:58:3b:28:38:cc:4e:47:b4:0d:f6:f6:a0:02:4b:6f:5e:
bd:78:71:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:27 2026 by rpki-client