Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: 434GsqtbWIiA0NMUkEc1Y6XvTpThAf0mTs4eRYy0ufw=
Subject key identifier: 53:F0:6C:C9:77:58:D7:91:A4:06:23:51:7D:E1:FE:C0:3D:18:19:19
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 019EB9586F3D3D57786C01B82A695BE1CE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 01:00:40 +0000
Manifest this update: Fri 12 Jun 2026 01:00:40 +0000
Manifest next update: Sat 13 Jun 2026 01:00:40 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: EjLj7NIdFhOccKII8X8KhjUNbLguxW0b9I4bXjzi3b0=)
2: WbZZ0bsB0Dkjf22adEANEIVciOI.roa (hash: +91x+OdHLOJGO9VKUPZYkd68HxtgAtv1r1GZzY3/TUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:6f:3d:3d:57:78:6c:01:b8:2a:69:5b:e1:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jun 12 01:00:40 2026 GMT
Not After : Jun 13 01:00:40 2026 GMT
Subject: CN=53f06cc97758d791a40623517de1fec03d181919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:57:6e:e9:b7:18:da:33:70:33:02:83:90:
61:0b:7d:9f:34:1a:a8:7e:01:4c:fc:b0:4f:a6:25:
55:d2:c3:e4:00:86:65:15:f0:1a:0c:3f:10:19:ac:
2d:0b:94:90:9f:b7:19:76:1e:6c:69:2d:68:0d:aa:
dd:58:14:89:6f:80:b0:9a:3e:eb:f8:2d:82:cd:d9:
17:ce:ec:7c:64:c6:f9:13:75:ed:58:f6:fe:ae:e4:
c2:8b:bd:90:d2:b6:8b:ee:8f:bd:bc:6c:2f:f3:36:
7c:d0:b6:f6:1f:9a:c0:1f:5f:07:83:11:98:ac:1d:
69:a3:94:cc:ff:e6:8a:e4:5d:67:41:f1:f6:ba:61:
eb:dd:56:fd:33:bf:3c:d9:9d:5f:79:54:5b:5d:14:
7a:86:ae:d7:11:f5:15:53:ff:0b:2d:01:e5:e7:ab:
c0:66:1a:5a:9c:2c:c8:89:9e:97:14:1c:86:5b:59:
58:c1:fc:d6:1b:8c:a5:53:f9:fe:6b:dc:96:2e:0c:
ed:80:bc:d8:5d:2a:5c:d6:d9:4a:79:56:92:ad:26:
bd:4d:9e:8a:e6:bd:78:cc:0c:23:79:19:e4:0f:a5:
4a:e1:58:ce:5a:e3:31:cf:5d:c6:76:a4:a6:c2:3b:
0d:29:a2:1e:61:0d:d8:6a:02:19:b2:db:93:8b:a8:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:6C:C9:77:58:D7:91:A4:06:23:51:7D:E1:FE:C0:3D:18:19:19
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:81:35:1f:1c:93:65:da:73:ad:31:67:77:34:a6:40:be:69:
54:8c:59:58:a6:f9:e2:dd:db:25:f3:fa:35:51:55:34:64:f1:
b1:1f:9b:0f:43:8b:b9:15:7c:50:21:a2:6d:13:dd:0f:ee:e6:
e0:2c:9c:86:1c:2c:52:11:10:ca:a3:5b:d2:6d:6d:b8:37:90:
ad:00:39:19:d5:5d:ad:77:46:96:0f:ce:e6:2b:e3:bc:4d:e1:
39:b8:0a:c4:39:ba:dd:d2:49:a2:89:26:fa:3e:de:e7:0d:29:
13:7c:05:b3:89:1d:a3:00:84:06:94:86:12:65:d1:ac:82:95:
57:e3:ef:f9:9d:e1:b7:39:4d:96:c7:49:f2:79:c3:e0:9d:46:
d5:df:c5:88:cc:9d:31:44:e1:ed:97:9b:fd:86:57:6a:5f:dc:
e8:86:87:b1:63:44:63:31:0c:5c:20:04:7f:4e:09:03:1d:35:
86:d9:05:3e:c6:90:0c:c4:14:b4:9e:45:e3:10:e8:b4:71:b5:
a1:01:ee:f6:05:60:f5:c1:9e:e0:f3:bf:29:65:ef:3f:ae:5e:
34:7d:a6:39:79:9f:64:8d:e1:20:a3:a3:5d:73:58:77:1e:bb:
36:12:c6:0d:b7:e5:8e:0e:1b:d4:5b:a6:33:09:54:a1:9a:65:
30:80:63:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:41 2026 by rpki-client