Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: c5jHVXyfroJy2bDQxL+BCiSYF23LfGD0o/uIRh4X4QA=
Subject key identifier: 14:3F:C3:83:91:E2:AD:7C:4A:6C:10:DE:C7:70:B9:3A:90:59:6F:57
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 01A08DC4A5B7AAB59172C6350AFB3534FC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 0E80
Signing time: Fri 11 Sep 2026 00:01:09 +0000
Manifest this update: Fri 11 Sep 2026 00:01:09 +0000
Manifest next update: Sat 12 Sep 2026 00:01:09 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: m0fTgdeR5J1oTkCBTLx8WK3mEDtq7nZI1NmCX0dpFQk=)
2: Ma8H1fgQEZiykkTlF-Y0HcwTumQ.roa (hash: V4dnLv6J0q+xgKJjM9hxw2pa2vp40VWjdBqsBD1NqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:a5:b7:aa:b5:91:72:c6:35:0a:fb:35:34:fc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Sep 11 00:01:09 2026 GMT
Not After : Sep 12 00:01:09 2026 GMT
Subject: CN=143fc38391e2ad7c4a6c10dec770b93a90596f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:92:19:8a:a6:7d:00:ab:1c:b1:b5:65:c0:
00:58:13:47:20:6d:26:8a:31:ce:81:95:10:f1:e5:
35:9e:9a:a6:79:f2:6c:30:b7:ee:5a:1d:1f:3f:08:
34:5b:5b:51:85:4f:0e:a2:23:bb:d4:20:29:02:09:
d0:ba:14:c3:c2:3c:05:72:43:36:4c:f3:2c:ac:d5:
bc:75:8a:ea:21:29:ff:6a:f7:fb:8d:45:0d:9f:8a:
a9:58:41:dc:01:7b:41:b3:01:79:05:84:31:d0:bc:
91:3b:58:58:17:ad:5a:66:94:0b:41:3c:b5:ba:b2:
76:90:9b:12:f4:bd:c6:f4:42:be:a0:42:4d:0d:21:
ad:a0:16:f7:2e:51:07:fc:b2:ad:a1:99:7d:39:03:
eb:f4:f2:bd:cb:3f:ab:c5:60:ca:fc:d9:50:6b:83:
e3:b9:86:33:74:78:53:0c:a0:22:ae:b3:60:df:42:
be:c4:ad:88:62:18:6f:71:37:77:95:82:68:d9:53:
83:fe:4d:70:b6:7d:5b:0e:b6:e7:42:04:f3:b4:7e:
69:6b:ab:98:d5:96:53:7d:b9:1d:92:04:1a:33:00:
12:1c:80:8e:81:64:35:fc:af:08:1b:e0:24:53:4b:
8b:d2:7a:5f:94:e5:2e:68:08:85:ef:08:c5:fb:1c:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:C3:83:91:E2:AD:7C:4A:6C:10:DE:C7:70:B9:3A:90:59:6F:57
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:76:43:e4:2e:11:8a:13:15:a8:34:ec:74:25:28:1d:8a:db:
1c:e7:13:81:0d:64:e3:4d:98:c8:4f:f2:28:2d:0e:c0:00:49:
37:a6:52:9b:da:ec:5d:34:c6:f4:fb:0f:b4:58:86:db:06:b2:
85:32:a3:b8:96:19:36:12:0b:d6:07:e7:cb:43:8c:93:56:17:
43:c3:53:ae:04:8d:ff:89:8f:28:ec:3f:7b:89:8a:98:3f:c8:
cd:bf:f5:89:38:83:01:e2:58:04:ff:3b:4f:04:15:e3:24:7d:
30:8c:42:77:51:f6:bc:3d:e0:92:01:b2:0d:6f:b6:5c:34:b1:
6b:af:aa:65:31:3c:02:68:61:aa:ee:b1:f2:21:f9:8f:86:fa:
fe:af:77:21:0d:39:6a:4c:95:c3:a6:6b:a7:7b:bd:88:3e:45:
ab:e3:d5:5c:50:ef:75:c0:73:c2:ae:aa:6b:f0:26:e7:97:b5:
16:3b:f2:47:5f:72:1f:82:34:af:8a:b8:df:e5:89:f0:6c:e2:
a0:3c:4b:30:cd:0a:11:37:b7:cb:58:ef:03:95:e4:b8:84:96:
ef:37:28:4d:e1:21:ac:7a:7e:e3:27:e7:c1:da:95:ad:3e:43:
84:cc:79:53:2c:f2:ea:52:6a:32:e0:b1:7d:6e:4b:e6:2a:87:
c8:ed:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:35 2026 by rpki-client