Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: sKOkOHQMUJ2k2vkAXOTKpO9auFnpcqIN88vlcbP9tuY=
Subject key identifier: B5:FF:01:52:ED:95:0D:FC:B5:1C:FA:9C:50:46:79:5D:8B:56:4B:45
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 019EB87CED100A74A0E730A102DCBD8DBB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 0D8D
Signing time: Thu 11 Jun 2026 21:00:55 +0000
Manifest this update: Thu 11 Jun 2026 21:00:55 +0000
Manifest next update: Fri 12 Jun 2026 21:00:55 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: TgXKZuvTF6vWXcAKjFAbbAYU+9NpUooF7JNojkXAyMU=)
2: Ma8H1fgQEZiykkTlF-Y0HcwTumQ.roa (hash: V4dnLv6J0q+xgKJjM9hxw2pa2vp40VWjdBqsBD1NqDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ed:10:0a:74:a0:e7:30:a1:02:dc:bd:8d:bb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Jun 11 21:00:55 2026 GMT
Not After : Jun 12 21:00:55 2026 GMT
Subject: CN=b5ff0152ed950dfcb51cfa9c5046795d8b564b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:4a:5c:63:18:05:7b:ad:51:c2:6b:30:59:
47:14:6f:be:80:a7:1c:80:c0:c2:bf:1b:39:d8:ff:
34:c8:68:1b:5c:e1:7c:c9:d7:f3:b1:55:12:ba:9d:
53:e5:71:cd:89:47:5d:e6:a1:f0:de:63:e4:8f:df:
aa:8b:45:30:6e:fb:44:ee:92:85:45:21:86:1e:51:
56:40:12:fc:02:d0:17:fe:8d:a8:f7:d3:68:93:34:
80:a7:0d:c2:af:83:da:09:25:70:c5:4d:d9:40:2a:
96:66:2e:b3:2c:29:15:34:66:11:c6:71:09:88:f8:
21:fc:69:b3:71:a6:af:0d:e8:7c:3e:ec:7c:51:88:
af:3c:81:12:2c:57:66:c3:f4:a1:18:78:0e:06:85:
92:a2:63:9e:6f:3c:38:ce:82:14:d5:fb:aa:fc:5f:
c6:66:d8:fc:8d:f2:5d:8e:6c:81:4f:f3:0c:65:7d:
0d:38:c8:2e:6c:f4:04:d0:28:f9:ce:a1:53:90:dc:
84:da:10:dc:2e:37:da:dd:67:a0:76:0c:a5:38:80:
77:55:94:ef:a1:1a:49:85:c1:9a:b0:14:31:7f:76:
42:fe:0f:90:da:a5:a6:37:c1:f2:27:c1:c1:21:ec:
c2:77:c1:96:c6:97:9e:75:75:9b:60:c1:6f:9c:d9:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:01:52:ED:95:0D:FC:B5:1C:FA:9C:50:46:79:5D:8B:56:4B:45
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:76:6b:f8:d9:48:17:83:a6:32:42:45:7f:ed:91:42:16:79:
43:79:9a:92:18:55:3f:3b:3b:11:1d:23:32:7e:00:38:a3:37:
90:e4:5c:12:8b:d0:99:67:e9:df:2e:31:60:2e:a7:41:dd:07:
9e:59:5e:aa:14:9d:54:cf:18:24:4b:50:09:6d:16:c5:6c:d0:
77:e3:6b:bc:75:82:de:35:e6:b3:06:88:9f:2e:40:71:d2:04:
e4:b8:d0:92:85:1d:d5:29:8b:09:4c:94:19:86:81:18:0a:19:
f3:c3:30:b4:e3:f9:95:05:c6:97:9e:3e:2a:4f:6b:55:14:00:
b5:24:7c:0f:27:5b:90:be:13:54:e9:44:9d:8c:17:3d:16:31:
bf:ed:9b:be:0e:2b:cb:90:89:18:af:c9:af:b9:97:13:02:cd:
f8:df:49:d2:1d:50:02:4a:2c:f0:0d:08:87:e0:ff:7c:49:90:
a6:2a:3d:32:51:0f:0e:c1:b9:33:e7:57:17:9b:10:a5:ab:53:
2e:ba:7e:f6:d8:45:d9:2a:df:56:2b:bd:2c:dc:73:2f:15:ec:
a7:2d:31:1c:80:b0:2f:55:55:f4:19:4a:48:bd:ed:81:bb:9d:
7b:58:ca:2a:ff:16:ca:b6:5e:75:ae:89:8d:8d:09:23:c7:22:
1c:07:bf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:26:18 2026 by rpki-client