Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: ylg7C7aLz0x7Y46QF82uWOh5UBYJRRmfmoHbikkwFzc=
Subject key identifier: 3E:20:A6:28:E2:14:81:D8:53:77:7A:79:C0:C2:C4:E8:B4:0E:94:06
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 019CE33526FF03C1EC3AD983C5CABE763A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 0C9A
Signing time: Thu 12 Mar 2026 18:00:37 +0000
Manifest this update: Thu 12 Mar 2026 18:00:37 +0000
Manifest next update: Fri 13 Mar 2026 18:00:37 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: s7yg+kxBuioh7ktkWpi31IpD1Q7u3RJ9jaWGubQjWM4=)
2: Ma8H1fgQEZiykkTlF-Y0HcwTumQ.roa (hash: V4dnLv6J0q+xgKJjM9hxw2pa2vp40VWjdBqsBD1NqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:35:26:ff:03:c1:ec:3a:d9:83:c5:ca:be:76:3a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Mar 12 18:00:37 2026 GMT
Not After : Mar 13 18:00:37 2026 GMT
Subject: CN=3e20a628e21481d853777a79c0c2c4e8b40e9406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c4:99:d3:4f:8e:22:c4:6f:8e:73:bb:ab:d1:
03:f2:8d:8d:b0:4d:1e:6e:9e:c1:8c:f1:0d:9c:70:
e8:1f:8b:50:72:be:d5:b8:bc:0f:66:ee:9f:1f:b7:
25:bf:df:ae:5c:d3:ad:bd:49:e6:f1:60:56:42:56:
0e:a4:d5:de:1c:22:9a:77:fe:92:5b:4f:8a:16:1e:
41:6b:80:66:4c:5a:bd:08:13:ac:d1:9e:b5:ce:67:
aa:5e:0c:ff:6b:5c:95:e4:36:64:8c:9e:e0:24:0e:
31:93:1f:7f:8b:14:81:49:cd:40:e4:57:92:15:b1:
4d:c4:2d:9e:01:e8:13:bb:d6:2c:47:9b:84:a4:9f:
46:f1:8b:c8:02:9b:37:5c:8a:bb:00:f9:80:e5:30:
97:61:c5:8e:a9:0c:16:e2:c7:d4:a3:b3:58:f7:e8:
8d:39:60:8e:31:de:c5:ac:7c:3d:b7:23:03:24:6b:
9e:95:dd:93:69:c6:9a:e9:48:d8:ab:18:19:7f:01:
60:bf:27:0b:b4:61:29:26:12:4b:ef:05:c4:d6:e3:
2b:c8:3b:fe:70:42:0b:0b:d0:62:0d:35:7f:11:6d:
ce:56:69:2b:c0:a5:26:57:9e:40:18:dd:7b:4a:17:
c0:23:6a:69:b0:63:d1:74:e2:88:3e:92:6a:02:59:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:20:A6:28:E2:14:81:D8:53:77:7A:79:C0:C2:C4:E8:B4:0E:94:06
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ee:05:8a:06:18:21:19:30:9f:7f:fa:7a:7a:ad:7d:ae:24:
d3:70:4a:6d:9d:23:fd:80:74:a7:b1:5e:1f:a2:8b:2d:ff:7a:
03:e4:e2:6a:dc:01:bb:d8:0e:fb:4c:27:97:fb:5d:8c:cf:50:
05:0c:d0:4d:12:40:62:02:bd:eb:76:8d:1b:f8:10:df:57:92:
30:cd:1f:e1:ad:c4:95:5b:12:81:53:4e:1c:d6:61:95:eb:4f:
8f:08:c8:4b:52:e8:a9:44:2f:2f:68:08:7a:23:b8:2b:21:ef:
bc:8c:3f:cd:6a:1d:60:61:be:b3:11:c2:32:a2:51:b0:1a:8d:
6b:6b:c6:c1:f3:6b:74:c7:53:58:1a:46:5a:4f:1a:a9:c5:16:
bc:f0:2d:02:74:2e:2c:6f:b6:2c:4e:a5:a2:16:45:4d:f8:1e:
6a:e0:5b:73:6e:97:86:e1:eb:24:2d:85:4e:41:af:64:8e:ec:
79:19:df:1b:1b:95:74:10:7f:db:41:b7:b7:18:3d:c4:d0:f1:
f1:12:22:08:84:f3:ee:59:8b:17:d1:3d:e0:49:00:6d:11:95:
2f:da:bd:5a:0a:70:9b:ba:11:74:be:b5:5f:04:3f:74:c6:9c:
23:73:09:41:e3:b0:ca:65:bf:e1:1c:62:54:d3:cf:27:9b:68:
3b:05:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:54:30 2026 by rpki-client