Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: sLrE8N96yUZo8Assu3nGjPCWYWhHCo5NYdflaXEYfEs=
Subject key identifier: 77:6D:B7:9E:89:50:5A:A7:FE:32:27:14:AE:2A:A9:A7:0C:D5:B1:98
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019D3865CFA0961606A9F838D9E14539EA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=)
2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: rnyPeaRag/wm6cadi+Hy+Yuuo4+ub23yhJYtrfDz6u0=)
3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:cf:a0:96:16:06:a9:f8:38:d9:e1:45:39:ea:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=776db79e89505aa7fe322714ae2aa9a70cd5b198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:58:1b:62:d9:30:7d:52:cd:66:39:ac:ea:95:
8a:a7:27:7b:5f:44:46:c4:47:71:cb:0f:6f:e9:70:
1a:4b:ec:54:7e:f0:06:93:a0:4b:fd:6f:b1:f3:43:
b9:06:61:0f:4b:c2:74:ca:e3:34:40:31:ab:43:3a:
a3:dd:4f:70:9b:ad:e7:4b:f4:3e:96:66:49:d3:5c:
f9:b1:2e:e5:b9:14:51:6f:97:83:c1:55:0e:56:7f:
2c:91:ab:b5:c1:7c:40:db:0a:da:b5:9f:90:a7:c0:
8b:84:51:d7:86:1d:d2:a3:4b:cf:ec:41:68:58:1d:
da:6c:57:e1:3a:90:7b:58:cc:03:16:be:1a:62:a4:
24:4d:32:b9:33:b4:e9:53:bc:de:9a:96:af:47:7f:
e1:99:93:1d:cc:b7:4f:34:e4:2e:a7:f2:4c:e0:58:
e1:5b:0d:8d:58:3f:38:4b:35:39:16:89:51:47:e9:
82:de:25:13:3e:c9:a1:f1:70:ef:8c:f6:58:ce:b0:
6c:66:a9:44:7d:5a:d6:52:d0:c6:7b:3f:d1:98:45:
a5:76:a3:39:22:0d:91:12:74:23:e1:03:c0:db:fc:
0d:dc:cf:9d:a5:63:40:12:e0:e4:4d:29:fc:de:e1:
24:0a:de:42:b2:86:2f:0d:20:23:ed:fb:5f:2f:73:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6D:B7:9E:89:50:5A:A7:FE:32:27:14:AE:2A:A9:A7:0C:D5:B1:98
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e7:d8:17:05:ef:10:32:e1:6a:a4:af:97:69:d8:a6:9c:fa:
8f:e5:f6:fb:1d:5c:14:3f:ac:c2:d2:ee:0f:c0:f6:d4:8e:8b:
46:0c:5b:95:5f:fb:eb:8c:eb:90:04:0a:59:5f:49:cf:cc:24:
91:9e:e0:24:fb:3d:0a:2e:1b:c4:41:08:60:bf:cc:88:0d:78:
d0:19:5c:bd:bf:32:24:09:b6:b7:87:9b:61:77:42:d1:47:1c:
59:b1:66:d1:60:f2:e9:f1:b0:82:f9:1d:71:01:aa:2e:6d:0c:
4a:1e:d0:99:4a:76:11:ce:e0:bd:1e:1f:2b:ad:9e:34:be:35:
f2:d4:31:31:b5:a4:9d:34:e5:a3:2e:41:22:cc:5b:c9:71:18:
e6:00:fe:f9:de:ff:66:e2:9b:87:65:67:55:f3:9e:7e:d2:0a:
3b:69:33:a4:8e:86:25:e9:8d:5d:5f:fa:91:6c:41:fb:07:28:
c8:32:bf:a6:45:b9:fa:d4:7c:f8:f4:c3:26:fa:a5:90:a5:69:
ca:91:c1:78:52:ff:fb:57:43:48:d5:dd:c9:2d:d0:ae:d3:eb:
ec:55:db:9b:09:98:ac:a8:71:df:d4:07:84:91:db:51:90:55:
2d:1e:fd:5f:49:b0:91:af:1b:5f:c5:fe:1a:e6:27:5c:58:b5:
c9:44:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:52 2026 by rpki-client