Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: 8h/KkRO8ELYAtBoa/jIJqH/kwDeCvYkIpYGMp97d5TI=
Subject key identifier: 9C:55:E7:48:58:37:49:D4:F4:1E:45:B3:89:4F:F1:ED:F9:F4:EB:50
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019EEAE9F0985F2DB31C9022017868A828BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1972
Signing time: Sun 21 Jun 2026 16:01:00 +0000
Manifest this update: Sun 21 Jun 2026 16:01:00 +0000
Manifest next update: Mon 22 Jun 2026 16:01:00 +0000
Files and hashes: 1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=)
2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: L6l5kZGoY7lRusI33YUG5ci8oODXu/HGogOScl1fDe0=)
3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ea:e9:f0:98:5f:2d:b3:1c:90:22:01:78:68:a8:28:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Jun 21 16:01:00 2026 GMT
Not After : Jun 22 16:01:00 2026 GMT
Subject: CN=9c55e748583749d4f41e45b3894ff1edf9f4eb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:46:cb:24:fd:9c:79:91:71:6e:43:42:52:f4:
b9:b0:24:d2:b5:77:65:17:fa:66:01:9c:e9:b6:89:
9f:73:a9:6b:16:f4:65:ba:0c:af:53:43:a3:a7:1c:
50:c0:9c:24:12:e1:dd:cb:b9:b9:ec:7c:82:34:3c:
04:9e:c7:a4:97:91:50:f2:ab:1a:65:a1:dc:f6:09:
c2:99:cf:68:dc:c4:4c:15:df:b3:46:aa:01:c2:a5:
db:52:2e:c6:d1:58:5a:28:00:1b:f2:2f:b7:c0:fa:
30:ef:33:09:6b:13:f1:f5:50:4a:dc:6e:05:df:38:
de:5d:c7:0f:71:06:9b:2d:b8:b2:b3:a3:ee:e4:af:
02:0d:31:c2:a5:94:a0:1c:26:3f:53:f7:c4:f4:99:
01:9e:95:4e:55:d1:d1:56:c7:7f:5a:b2:62:2f:cd:
4c:01:16:86:97:bc:73:92:99:11:ee:fb:9f:bc:6b:
9c:ef:f8:59:08:86:22:52:50:7a:c0:fa:dd:ba:cc:
a3:28:b6:94:07:8d:33:55:9c:bc:ba:a6:e3:09:03:
1a:48:62:60:47:81:01:7e:99:72:ed:d4:e7:92:f8:
34:7e:66:1a:18:61:75:f2:0f:0f:77:fe:46:a5:4d:
fd:83:e6:28:7b:ea:7b:c8:9e:5f:bb:5d:0e:3d:95:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:55:E7:48:58:37:49:D4:F4:1E:45:B3:89:4F:F1:ED:F9:F4:EB:50
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6c:5c:86:90:04:11:c2:0e:82:0e:24:02:0d:fd:a7:c0:8b:
9a:23:42:78:5c:01:1b:70:9d:4d:15:f6:fe:11:f1:2d:94:66:
37:93:74:14:65:38:46:35:79:7d:8d:93:08:4a:13:42:cb:02:
52:be:3b:79:dd:d2:7b:4b:6f:54:a2:fb:7b:c5:57:f7:96:13:
f0:b7:e0:e8:ff:f2:da:df:e8:7c:9b:c9:bb:fe:b3:db:12:33:
04:f5:b6:96:c2:9f:31:aa:ef:26:e1:70:9c:1d:0a:d1:6d:36:
23:40:38:a3:b4:25:b7:3a:dd:f2:af:2d:1d:f5:60:c5:93:8d:
8d:03:72:2e:30:35:9d:94:87:70:71:61:8c:05:f2:f0:8c:ec:
4e:cd:c8:9f:79:98:27:75:c4:61:6f:01:c3:93:9a:81:f9:a0:
3b:b6:6e:cf:cd:d7:cc:c8:db:3a:16:00:93:e9:79:e4:d5:6f:
94:e3:58:8e:1c:96:88:16:03:4f:b7:e5:46:d5:f4:39:4d:9c:
be:a3:6e:d9:a2:c5:27:53:2d:9a:6c:e1:db:c0:d1:2a:96:a9:
27:1f:00:21:4d:b6:82:0f:52:bb:21:35:93:25:47:30:64:d8:
41:22:6c:91:9c:98:b8:83:90:4b:28:8e:4f:41:a3:af:24:ca:
af:2b:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 19:41:11 2026 by rpki-client