Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
File: H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft (raw, json)
Hash identifier: T2koR7pNf8EVgi9Z+kpz5tpbAPLFuDNnK9QmZSkngtM=
Subject key identifier: 93:20:B1:46:81:8B:A9:0F:67:88:DF:D8:DF:4A:66:24:FC:C5:95:5B
Authority key identifier: 1F:77:DA:D2:AD:7E:BA:81:40:DE:33:4A:AF:AF:DF:0C:84:16:BC:8A
Certificate issuer: /CN=1f77dad2ad7eba8140de334aafafdf0c8416bc8a
Certificate serial: 01A08A8CBD1DB6E3017E6E807E0064F60D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:14 +0000
Manifest this update: Thu 10 Sep 2026 09:01:14 +0000
Manifest next update: Fri 11 Sep 2026 09:01:14 +0000
Files and hashes: 1: H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl (hash: d+sEKCBzN2VL0JlLjnV4iPVyg7O7lo4YVVgpF1vQDeQ=)
2: NF7wh5XtVzQFP8XtslPI32haJaQ.roa (hash: 5uh23E8ZYXbA1nwKA2QCUC1wPKEuO5kBSIdtC8OVFYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:bd:1d:b6:e3:01:7e:6e:80:7e:00:64:f6:0d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f77dad2ad7eba8140de334aafafdf0c8416bc8a
Validity
Not Before: Sep 10 09:01:14 2026 GMT
Not After : Sep 11 09:01:14 2026 GMT
Subject: CN=9320b146818ba90f6788dfd8df4a6624fcc5955b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:42:7b:ed:fa:77:b9:23:77:df:cd:4e:9d:
20:88:22:2a:c2:85:47:24:5f:e7:b1:1b:0f:cb:0e:
62:3f:c0:b3:9d:1a:5d:87:a5:fb:d5:93:39:df:b6:
51:de:3f:f5:29:f8:60:7d:53:67:0d:3e:d4:4b:e1:
94:55:48:97:96:93:18:f7:41:dc:de:e2:d0:3e:2b:
f3:d0:c0:5b:ff:6f:dd:83:b1:07:80:c7:a9:b2:e7:
87:ec:50:73:f0:eb:ff:b7:79:63:0e:c5:e1:53:57:
18:72:ab:93:2a:90:82:78:b0:d0:59:91:9f:a7:c5:
c4:05:dc:69:ae:6a:cf:5e:4d:e1:c4:1c:49:8c:95:
44:ea:86:4c:47:2d:bc:42:e8:fb:b6:65:4d:06:52:
55:b2:af:6d:d2:b5:92:d7:e4:96:ff:46:ff:c5:24:
23:2b:25:e2:86:41:3d:18:74:a8:bc:43:fe:88:37:
0e:50:97:1f:3d:af:13:99:5d:a1:51:fc:80:45:cb:
6a:76:51:59:4e:71:a8:29:0e:60:74:86:75:36:50:
43:bf:5c:c8:c6:21:53:d6:83:17:67:11:05:21:00:
8d:2f:88:68:c1:d2:74:7b:cf:00:af:3d:32:af:a0:
76:92:57:36:eb:c5:07:2c:aa:b7:30:a9:27:76:e6:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:20:B1:46:81:8B:A9:0F:67:88:DF:D8:DF:4A:66:24:FC:C5:95:5B
X509v3 Authority Key Identifier:
keyid:1F:77:DA:D2:AD:7E:BA:81:40:DE:33:4A:AF:AF:DF:0C:84:16:BC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7c:a6:9a:60:a9:41:8b:69:6d:97:c9:2e:cc:18:5c:86:9f:
23:f4:77:68:12:9d:7f:0e:67:f7:a0:99:d4:e6:30:7d:23:7b:
0b:69:ae:3b:75:3e:1b:42:f5:8d:4c:4f:d6:1a:2f:98:3a:ff:
da:a1:7a:13:75:fd:ef:34:eb:c3:6c:c9:ba:40:35:b1:6e:4c:
58:8a:21:20:e6:1a:c8:e1:09:32:7d:28:5a:3f:b4:17:bd:ce:
30:c2:0c:0a:4a:31:00:b3:62:8a:0a:92:c7:68:bb:81:4f:09:
0e:8a:15:15:47:00:bd:66:18:52:fe:d6:bc:bc:55:d4:13:58:
ba:15:c8:27:e9:d3:c6:bb:69:ab:95:91:d1:1a:55:1e:ca:dc:
94:45:0d:6d:52:71:ea:54:3d:7d:ed:dd:07:57:d5:9a:79:f0:
22:d8:7a:30:22:fa:21:29:8e:bd:a3:2a:00:fe:14:db:c4:e4:
3c:c5:92:b1:10:66:aa:2c:2e:13:47:bd:c0:c9:d6:20:5e:b5:
48:73:99:a5:1f:73:c1:f6:83:54:62:27:5f:95:80:ab:17:5e:
9f:f9:74:80:81:c1:5c:7a:9d:cb:b7:80:b8:1b:fb:35:06:8b:
4c:80:b8:aa:bb:3b:98:55:dd:7b:80:60:7e:b0:13:ee:e4:e5:
ac:2b:da:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:03 2026 by rpki-client