Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
File: H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft (raw, json)
Hash identifier: +pTLv/xu5OlO1yAs+d0liORVVFpD6r7qIdELniHqKB0=
Subject key identifier: 76:96:0A:B5:89:4C:80:10:48:1F:1A:51:73:CF:3F:83:D8:0B:D6:C4
Authority key identifier: 1F:77:DA:D2:AD:7E:BA:81:40:DE:33:4A:AF:AF:DF:0C:84:16:BC:8A
Certificate issuer: /CN=1f77dad2ad7eba8140de334aafafdf0c8416bc8a
Certificate serial: 01A18D540DF8884837759F9DAF7A463507CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
Manifest number: 0147
Signing time: Fri 30 Oct 2026 15:00:58 +0000
Manifest this update: Fri 30 Oct 2026 15:00:58 +0000
Manifest next update: Sat 31 Oct 2026 15:00:58 +0000
Files and hashes: 1: H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl (hash: 5kxjhaja5Itjxd/VjOSXVHOyRNpGj2UU1zmCQNv1u4w=)
2: NF7wh5XtVzQFP8XtslPI32haJaQ.roa (hash: 5uh23E8ZYXbA1nwKA2QCUC1wPKEuO5kBSIdtC8OVFYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:54:0d:f8:88:48:37:75:9f:9d:af:7a:46:35:07:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f77dad2ad7eba8140de334aafafdf0c8416bc8a
Validity
Not Before: Oct 30 15:00:58 2026 GMT
Not After : Oct 31 15:00:58 2026 GMT
Subject: CN=76960ab5894c8010481f1a5173cf3f83d80bd6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:43:5f:c2:12:15:91:f1:93:a9:7f:f5:4a:3a:
9e:bb:4c:3b:ff:22:34:3a:e8:02:35:ac:d9:e0:ca:
3e:78:d6:a9:85:4c:b6:1f:b4:d8:e1:ea:bf:05:84:
c4:a6:cd:02:5d:8a:29:d0:8b:01:07:5a:aa:02:1b:
74:f8:fa:1f:c5:97:1c:61:a4:2b:59:ec:00:5e:ac:
1e:db:61:31:68:42:59:22:26:9f:7d:08:bf:2c:6a:
67:cf:15:bd:23:46:60:35:11:6f:6a:99:74:00:ba:
a1:f3:e6:d7:f3:2a:92:4d:30:73:4c:68:d7:50:7f:
9d:6f:8e:2d:1f:0c:c3:68:27:42:6b:35:85:a0:29:
1d:26:57:11:66:3c:dc:61:d2:4b:14:dc:e0:69:32:
83:b3:27:9e:4c:75:66:3c:18:02:28:86:10:4b:95:
a9:65:4c:63:c1:60:58:63:3e:81:e5:73:cb:46:72:
0a:19:d1:d6:6a:7e:af:1c:26:98:5f:dc:bf:45:5c:
0f:e1:48:2a:a3:e2:01:de:25:e7:f8:de:e9:77:38:
da:ab:eb:12:b8:6e:90:86:8b:b3:4a:51:10:6b:34:
5e:ba:18:ae:9b:75:56:30:7a:26:6e:7c:10:33:64:
87:a0:d2:41:07:42:5c:83:3f:18:b0:65:1f:da:5a:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:0A:B5:89:4C:80:10:48:1F:1A:51:73:CF:3F:83:D8:0B:D6:C4
X509v3 Authority Key Identifier:
keyid:1F:77:DA:D2:AD:7E:BA:81:40:DE:33:4A:AF:AF:DF:0C:84:16:BC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:39:f5:e0:55:50:9f:4b:4d:01:18:14:92:4e:d5:e9:9a:6d:
2d:64:dd:22:0a:d1:1e:0e:62:e9:0a:1b:02:3d:83:12:6a:d2:
04:ac:ba:41:f9:02:98:c2:0e:9b:78:98:f9:04:c8:08:93:f4:
dd:b2:b3:18:60:08:9e:3a:0e:b6:ca:3d:18:4b:ef:fd:a6:22:
2e:fc:e9:27:d9:c6:88:b3:eb:1d:62:76:da:d4:41:49:7b:8e:
4b:f7:31:71:2f:c3:d4:ca:76:55:77:e2:d1:b9:a4:43:a9:15:
a9:54:34:30:d5:49:7a:40:df:92:c4:a2:d2:fe:b1:98:a8:e8:
48:df:db:e6:d2:95:95:81:0c:9a:4b:34:98:18:48:fc:e0:e2:
1f:2c:00:f6:fe:85:1d:75:cf:a1:66:03:f5:65:af:d7:7d:72:
04:d5:9b:34:a6:46:ca:39:ff:2c:8d:ef:bc:f6:90:b9:76:00:
fc:96:8d:80:dc:e6:3e:96:1f:40:ec:96:0f:88:85:5b:8a:e4:
6a:1f:99:df:f7:cf:aa:7a:62:47:c1:c6:81:5e:44:08:da:23:
e9:75:fd:bc:e7:06:0c:44:fe:c2:ac:bc:04:c7:18:e4:15:25:
77:f4:74:8a:8e:77:e5:c3:d0:0c:19:a2:79:c1:29:3a:d5:fe:
5b:51:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:04:59 2026 by rpki-client