Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json)
Hash identifier: YhS3aCX3/IRLqmnWArDgOo+WuDo04hk4EQjL8qGFB5Q=
Subject key identifier: 7B:0B:59:E6:DB:37:66:2F:70:15:D2:DE:DF:22:FE:3C:83:1A:51:5B
Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03
Certificate serial: 019D3940B656BC22EFAC3691ACAFD7FF2FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:00:35 +0000
Manifest this update: Sun 29 Mar 2026 11:00:35 +0000
Manifest next update: Mon 30 Mar 2026 11:00:35 +0000
Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: 5mYxBAXheksNRkMA/Yt5oVBIjjGa/X4tMjdcT/lApxY=)
2: psNr_hTMl_I5KVL4YqNClQzsa0U.roa (hash: iOzy4wHtJLtwL9zu93am3QAJzNv3kq9Sr3PhqUJ5iL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b6:56:bc:22:ef:ac:36:91:ac:af:d7:ff:2f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03
Validity
Not Before: Mar 29 11:00:35 2026 GMT
Not After : Mar 30 11:00:35 2026 GMT
Subject: CN=7b0b59e6db37662f7015d2dedf22fe3c831a515b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:a8:ca:73:0f:56:f2:f1:85:49:25:04:90:
25:8c:9e:92:f2:84:3d:38:23:cf:80:94:03:d0:b3:
9f:f7:c4:e9:3b:29:78:a6:73:6e:bd:5c:1e:db:91:
58:8b:0d:99:6e:49:26:e8:58:2d:91:78:f6:c5:95:
3b:e8:d1:e5:39:f2:22:a5:21:11:6e:84:93:c4:19:
9e:90:1a:1f:6e:2f:b8:ba:57:a1:a4:39:cd:4d:a9:
59:81:6e:f4:0e:0b:36:26:a4:38:f6:72:19:a5:d1:
34:d4:11:07:dc:7a:78:3b:2e:5f:5f:fa:5e:d5:47:
cf:68:7e:fa:27:85:98:df:2e:d4:98:19:79:4b:21:
cb:a7:dd:83:cc:fb:09:81:43:f3:d0:6c:c5:8f:e5:
01:34:23:f4:8d:f6:5f:1f:b8:eb:e8:21:1c:be:87:
6b:09:83:cd:71:34:4c:5c:1c:c8:f0:a3:5e:da:8b:
2d:69:26:76:53:cc:22:ca:2d:e5:7d:a8:00:73:52:
3a:7d:d0:3a:8c:da:f1:7a:1c:15:9f:29:35:ce:71:
ef:31:de:9b:e6:14:c5:86:46:4d:ee:fc:12:5d:98:
46:d9:73:c7:10:2b:28:5c:56:fe:e3:c5:28:93:28:
e4:29:75:41:46:85:25:9d:c9:a5:f5:5a:15:f7:25:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0B:59:E6:DB:37:66:2F:70:15:D2:DE:DF:22:FE:3C:83:1A:51:5B
X509v3 Authority Key Identifier:
keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e5:c3:8e:3f:cf:b6:89:af:5b:04:ef:de:36:8d:ac:04:8c:
0d:a7:f7:3a:42:fd:e1:88:88:13:d9:cd:46:b5:bc:58:cc:0d:
74:1e:a3:97:37:3a:1e:72:b6:45:f7:95:1c:8d:bd:18:1a:be:
24:be:62:4f:86:25:09:27:6a:bf:e6:9e:de:b8:81:b7:3a:62:
33:5c:a6:8b:c5:f5:b2:a9:f9:72:80:0b:67:47:c2:7f:29:47:
2d:d2:c0:2a:f0:af:ed:e5:85:3d:25:52:46:49:40:dd:34:c5:
f7:09:3d:b8:6a:be:c9:62:51:4a:ae:85:ec:6b:67:5d:3b:99:
aa:3e:81:16:95:08:1f:6a:0d:b5:b9:5b:fa:98:ca:98:76:3e:
5d:f6:39:d2:99:ec:2d:3e:da:da:0f:c0:b7:c1:c4:89:5f:e0:
ce:b5:ed:6f:44:f0:c6:89:8b:46:a3:b4:24:76:e9:af:5f:e1:
bd:0a:5c:02:f0:54:61:35:2d:f0:d6:72:07:d8:98:a2:b7:34:
43:21:67:37:2b:b7:da:dd:cc:14:0e:78:26:ab:70:68:5a:bc:
c6:f9:be:93:b3:2f:d1:7d:1f:46:b0:3c:31:4b:3d:6d:80:35:
3f:21:0f:f9:37:ff:e0:ce:02:6c:c8:21:e6:b0:52:43:b0:14:
3b:49:4d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:21 2026 by rpki-client