Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
File: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft (raw, json)
Hash identifier: 9edZ/5Td4eAY6Ezs+RsdcXltnhkWo9x+ImQ1qanmhnc=
Subject key identifier: 63:09:01:08:C2:D7:32:F0:F2:FF:13:9B:13:B7:E4:4C:7C:6F:EC:2D
Authority key identifier: 1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
Certificate issuer: /CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Certificate serial: 01A08E6A1EB44534DEC1E0AB1D5D4F4006F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
Manifest number: C3
Signing time: Fri 11 Sep 2026 03:01:54 +0000
Manifest this update: Fri 11 Sep 2026 03:01:54 +0000
Manifest next update: Sat 12 Sep 2026 03:01:54 +0000
Files and hashes: 1: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl (hash: wGESH21JQuTgbMG+FJtoJ4xCkMWJIoIvckv2MYZMmCU=)
2: V9X49EieL5muWb2FuiaJlUR-F0M.roa (hash: KCwcP0n4ZTZ4GNIBxxk+6aPghXeAJv53hQU1wGojBWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:6a:1e:b4:45:34:de:c1:e0:ab:1d:5d:4f:40:06:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Validity
Not Before: Sep 11 03:01:54 2026 GMT
Not After : Sep 12 03:01:54 2026 GMT
Subject: CN=63090108c2d732f0f2ff139b13b7e44c7c6fec2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:86:c3:73:c1:b5:9e:f6:66:68:cb:ef:ec:
43:08:05:9a:2b:e9:9e:c3:27:8f:7a:77:12:32:7c:
eb:8d:91:47:c6:78:a2:b9:36:24:50:90:67:66:30:
83:ea:8a:ed:e7:4a:13:0a:5a:da:db:45:5c:aa:38:
c1:2b:ac:7a:33:7f:a3:4a:b6:4a:cd:09:28:77:b5:
ff:17:f1:28:a9:8d:a8:31:41:93:d2:12:73:a5:72:
d3:14:a8:82:66:a0:52:11:a2:42:ed:0b:29:f0:4d:
d1:d3:f2:99:ca:65:32:e6:90:88:ad:bc:d1:9c:33:
4e:1e:be:c4:b1:3d:b0:2d:7e:92:48:8d:bd:13:f6:
91:a4:46:1d:60:43:53:33:45:1a:ff:0b:06:73:1c:
ee:7f:fc:f8:f7:d0:94:11:df:71:d9:54:da:33:2c:
ce:a1:0b:db:4c:ae:26:d0:0e:d9:20:21:58:75:2b:
00:30:a1:f3:64:b3:60:fc:65:07:8e:03:a9:bf:5c:
45:65:6d:58:a2:de:a3:2d:34:4c:8f:15:38:43:81:
fa:e7:89:b6:87:08:bd:c0:e6:0b:bb:95:bf:10:dc:
7a:cf:87:a2:b4:47:19:ae:5c:72:01:d3:dc:4d:76:
d6:ea:4a:ef:93:06:8a:7d:25:97:1d:8b:63:8b:33:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:09:01:08:C2:D7:32:F0:F2:FF:13:9B:13:B7:E4:4C:7C:6F:EC:2D
X509v3 Authority Key Identifier:
keyid:1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:80:db:7a:94:13:f6:de:e0:f3:95:d0:c2:ab:70:dc:0d:91:
16:a7:12:6e:cb:5c:c4:4c:6e:b7:8b:3e:ed:4c:2d:3f:02:21:
5c:d1:9f:82:6d:f8:bf:83:45:7d:a8:c3:45:2d:f5:1c:8a:ce:
84:76:f2:bd:e1:54:1d:6d:e9:7b:b4:fe:73:3b:93:47:91:ac:
b7:18:93:61:fb:05:c5:5c:15:2f:41:02:7a:5c:94:8f:9e:67:
fc:1c:81:ab:23:ac:cd:3e:24:2c:31:bf:20:45:36:e1:10:91:
75:94:cc:4b:16:ab:a6:cb:25:4f:2a:c7:c2:cf:7e:f8:cd:15:
22:bf:00:d2:4e:b1:9f:ed:7d:0a:2a:08:4d:c6:69:2e:60:c5:
07:d7:28:bb:01:b9:f2:93:a9:b4:5b:98:16:82:76:cd:24:a7:
ee:1a:1d:1e:dd:ea:4b:2b:9f:75:be:70:3a:17:9e:23:1e:d1:
bf:cf:a4:2c:b2:19:04:db:3a:f6:25:72:21:51:25:e6:89:a9:
ea:14:f2:30:89:41:98:7c:b0:61:9f:b5:af:2c:44:35:04:d5:
d0:91:e6:38:3e:e5:09:b2:c4:97:f9:10:ad:c9:6f:c7:5a:6f:
d6:d1:0b:07:2d:7a:a6:eb:e0:89:bf:5c:fc:12:ea:60:40:2d:
16:47:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:51:47 2026 by rpki-client