Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: 2W8WgxzY94TK0S8gcR2wp1NVLVUmtIm/fT8XRFCJW90=
Subject key identifier: 1F:F6:D9:17:68:5B:05:01:01:73:98:B9:FB:9A:7E:99:45:E1:DB:6A
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 019D371B4F3D21DB281F98806F37E10B21ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:29 +0000
Manifest this update: Sun 29 Mar 2026 01:00:29 +0000
Manifest next update: Mon 30 Mar 2026 01:00:29 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: Yu38CJdG18M+LX7CbJqfYdGK5C5c4vQ+00i+7S5x+3k=)
2: WbZZ0bsB0Dkjf22adEANEIVciOI.roa (hash: +91x+OdHLOJGO9VKUPZYkd68HxtgAtv1r1GZzY3/TUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:4f:3d:21:db:28:1f:98:80:6f:37:e1:0b:21:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Mar 29 01:00:29 2026 GMT
Not After : Mar 30 01:00:29 2026 GMT
Subject: CN=1ff6d917685b0501017398b9fb9a7e9945e1db6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:59:c2:8c:42:04:c7:1e:59:8f:e3:a0:e4:78:
fc:31:50:2e:80:62:36:10:49:28:fd:84:33:79:e2:
a9:be:a1:dd:2b:90:d0:f7:a8:1e:d3:d4:1e:03:7e:
e8:31:ac:87:c3:e5:55:76:36:99:16:ae:82:2f:e9:
4f:9e:7e:cd:84:c6:39:80:be:af:e7:62:b1:5d:5d:
a4:92:94:df:be:79:d4:95:a5:0a:1e:9c:5c:2b:6a:
d4:75:ee:b4:a4:00:a7:f5:cf:5d:e3:54:59:1e:bd:
c8:e4:93:93:b6:d7:d5:8e:3f:07:af:3f:27:d8:75:
ad:b6:eb:82:d8:fc:4c:27:86:15:c7:73:65:6a:4e:
28:be:04:8f:73:fc:c5:9d:01:71:4e:fd:78:de:f2:
15:ff:8f:d8:34:e1:90:18:c1:94:62:f2:8c:bc:01:
9b:39:29:eb:43:b8:6e:05:bd:7e:5f:e5:fc:9c:e6:
a2:ff:01:a4:d1:55:f9:8d:71:81:dc:f0:8d:6a:a0:
ef:26:ee:4c:2b:e1:58:bd:64:a9:ea:3d:b1:e3:ff:
da:51:bc:ba:04:85:49:d2:6d:77:75:e0:4f:7e:02:
a1:a0:c0:43:8c:d5:58:40:20:d0:2e:13:0b:9a:93:
ab:a5:63:5a:1f:3b:38:76:93:cb:fa:2d:a1:76:8c:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:D9:17:68:5B:05:01:01:73:98:B9:FB:9A:7E:99:45:E1:DB:6A
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:45:45:d8:b3:ff:19:49:17:23:12:d8:b9:87:3d:ab:ca:28:
0d:6b:a0:85:f9:27:eb:35:17:0a:81:33:e9:46:d3:7b:56:ea:
aa:85:6f:f9:33:ae:10:e5:c5:c2:ba:57:9b:3a:ce:f6:6d:7f:
eb:c7:f4:fc:e4:ae:97:17:59:f0:7c:19:d6:b1:5f:eb:99:f0:
01:85:c3:4f:e3:37:23:90:37:76:5e:04:fd:e2:86:04:7e:a4:
6e:3b:89:4c:e2:b2:1e:ef:dd:cb:08:98:ca:11:93:f1:43:8f:
10:8b:ce:93:c1:7b:b2:f9:0a:83:ca:3c:ea:54:59:dc:98:85:
a8:f2:8c:84:13:f9:e3:46:97:8c:44:90:1b:7d:29:89:95:c1:
2b:1a:ec:7f:59:93:2a:c1:73:52:bf:21:2f:dd:e7:df:ac:0a:
49:ec:ca:29:f3:53:0a:da:89:e9:26:dd:fc:84:67:93:fb:2c:
fe:12:bc:22:aa:71:24:d7:70:6b:b4:71:58:d1:ee:4f:f1:f4:
fd:d9:50:e2:0f:be:3b:a4:66:35:0e:8d:a9:a7:27:fb:66:5f:
64:57:3c:1e:95:20:32:94:43:14:fb:4c:f1:5f:a7:b8:fb:3d:
ff:98:77:47:40:06:cb:08:4a:f6:92:8a:cc:fa:ec:e2:aa:6f:
3f:2f:39:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:31 2026 by rpki-client