Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
File: H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft (raw, json)
Hash identifier: AMpAEgMhMl43wNeNfNCczWAoM8c9cmskdwIvlc3+Qz8=
Subject key identifier: 39:3A:A8:EA:A5:81:E5:D8:7F:AB:8B:3A:0F:99:A9:BB:53:B7:FF:BD
Authority key identifier: 1F:77:DA:D2:AD:7E:BA:81:40:DE:33:4A:AF:AF:DF:0C:84:16:BC:8A
Certificate issuer: /CN=1f77dad2ad7eba8140de334aafafdf0c8416bc8a
Certificate serial: 019FA0E0FD88A30F914136FF6E13F3B83651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:02:07 +0000
Manifest this update: Mon 27 Jul 2026 00:02:07 +0000
Manifest next update: Tue 28 Jul 2026 00:02:07 +0000
Files and hashes: 1: H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl (hash: 5yqBgOIdoMnkvNytxgGnW98wn14p9C8LLy+5jz5EGkI=)
2: NF7wh5XtVzQFP8XtslPI32haJaQ.roa (hash: 5uh23E8ZYXbA1nwKA2QCUC1wPKEuO5kBSIdtC8OVFYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:fd:88:a3:0f:91:41:36:ff:6e:13:f3:b8:36:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f77dad2ad7eba8140de334aafafdf0c8416bc8a
Validity
Not Before: Jul 27 00:02:07 2026 GMT
Not After : Jul 28 00:02:07 2026 GMT
Subject: CN=393aa8eaa581e5d87fab8b3a0f99a9bb53b7ffbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:9b:9c:9b:b9:7f:10:30:4f:f4:79:1d:3b:
de:75:10:25:98:6d:8e:8d:c1:f9:bb:7f:c6:9c:03:
cc:7e:67:e2:bb:d9:06:d3:7b:bc:d8:f1:fe:b5:da:
4f:26:a0:79:75:a5:6a:42:2e:87:48:24:f3:d7:2a:
e9:64:78:2e:a3:ff:2a:a8:a8:ec:da:02:fe:03:cf:
c9:40:79:c3:c5:a3:96:11:43:e6:9e:be:6f:09:3a:
64:45:58:c1:e1:70:65:31:71:bf:74:c9:63:58:e8:
16:69:5d:73:2c:04:6d:ce:c4:12:ab:1f:09:6c:47:
03:9c:d6:6f:97:fe:6b:e7:bc:32:20:59:1b:cd:1c:
a5:e1:17:39:3a:2c:d9:ea:ea:86:c5:2d:49:02:c0:
56:40:e1:7a:c8:77:a7:24:a3:32:b9:51:d2:8f:e0:
af:cf:90:bc:e6:6e:c6:13:e8:63:f0:8f:05:80:3f:
4e:78:70:79:b2:d2:7d:52:44:95:84:f0:e4:4f:a6:
e9:86:bf:d1:fb:05:e1:c6:e7:05:61:ea:9f:e0:b0:
d2:af:7c:10:a0:93:71:29:0f:0e:f7:ea:c7:aa:8a:
cf:18:f6:8e:b8:7d:5a:0b:70:71:e0:4e:42:8c:bd:
24:3c:7e:cb:37:a0:88:82:2e:36:ca:fa:17:26:a0:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:A8:EA:A5:81:E5:D8:7F:AB:8B:3A:0F:99:A9:BB:53:B7:FF:BD
X509v3 Authority Key Identifier:
keyid:1F:77:DA:D2:AD:7E:BA:81:40:DE:33:4A:AF:AF:DF:0C:84:16:BC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:14:fd:62:8d:23:9c:10:7a:d5:41:16:4b:9c:05:e2:b5:a2:
ce:b9:78:12:96:0e:7a:57:83:19:ee:5b:95:0c:8a:b8:19:1f:
ac:b8:3a:7d:1c:99:94:8c:d0:f0:b8:86:52:ac:73:e1:1d:30:
c6:9e:44:2d:b4:8e:c3:af:a3:f2:6f:eb:8f:2a:39:7a:67:41:
3d:d6:3c:84:07:58:83:83:e7:91:12:09:46:f2:ea:84:1d:3c:
73:e4:56:98:be:cb:e9:fe:d3:e8:e2:50:1c:ad:bc:bf:0d:53:
55:c5:66:14:3b:07:97:d6:86:f3:c6:0f:77:d7:3b:d3:0b:c4:
f0:07:8f:6e:dd:15:30:55:61:ac:d4:1e:f5:ed:73:f5:46:12:
40:ad:d1:6e:68:6d:c5:b5:3a:f5:f7:dc:22:65:bb:d1:d3:8e:
1a:c8:1f:0d:ca:b6:f5:a9:14:d2:83:48:67:b0:d4:eb:f3:c7:
7e:4a:5a:97:f3:de:e4:41:d0:44:25:6a:ce:fe:df:1f:36:d3:
a4:d1:e5:5a:71:61:0b:ad:60:f5:60:01:e9:6c:92:04:56:e6:
69:01:93:73:0d:54:d5:a8:c1:66:98:3a:05:60:56:2b:15:ec:
c1:73:7a:ad:c1:9f:5f:91:18:69:ca:77:99:76:dd:a1:05:49:
cf:59:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:56:50 2026 by rpki-client