Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
File: h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft (raw, json)
Hash identifier: 5HayiCeSYzNr76Tr7SHKrsXdR4hhGnZ0lkwtDMkCv6M=
Subject key identifier: 57:BB:65:8A:64:79:02:F6:33:49:86:BA:D0:11:F3:58:79:9F:26:34
Authority key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Certificate issuer: /CN=877aad307ad330ebb8cf44ec21389a170436fd53
Certificate serial: 01A02055EE84E20F0127F6EE7E8BF86C94B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
Manifest number: 1A16
Signing time: Thu 20 Aug 2026 18:01:37 +0000
Manifest this update: Thu 20 Aug 2026 18:01:37 +0000
Manifest next update: Fri 21 Aug 2026 18:01:37 +0000
Files and hashes: 1: 4O7JXBvPOYztRW27KQbfsJapV8I.roa (hash: CnJtkzBJ3WzY6WSIQ98/SBNuBHldMzltsiyedt5bTUA=)
2: 5le9jY8NHCPPbL1X4rdpNU4gnqk.roa (hash: r6Bd6s1EHvwxX57dE8cN5fG2BzO6ZysNK6i8oi7I6Bg=)
3: h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl (hash: Fgpt7CJznX0uUsTLTOf3caWqMTOLfYRlANBADd050OU=)
4: jv5OsjGRKcgeFQVQV3zovqWzVIw.roa (hash: RrWjK9co9zjcBxKsUyNwdo88EIEb3efvk+y4T/I6npY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:55:ee:84:e2:0f:01:27:f6:ee:7e:8b:f8:6c:94:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Validity
Not Before: Aug 20 18:01:37 2026 GMT
Not After : Aug 21 18:01:37 2026 GMT
Subject: CN=57bb658a647902f6334986bad011f358799f2634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:98:71:c8:0c:36:64:66:82:c1:40:ab:eb:
d9:19:ba:e4:7b:e7:98:c0:c8:b3:fd:60:b8:3a:e3:
fb:86:c0:55:d3:6d:be:fc:8c:9d:8f:ae:2b:2f:68:
56:3d:85:53:73:38:73:4b:3f:27:f9:ee:93:06:03:
84:2c:b1:8d:f4:c4:67:ed:62:36:dc:9b:25:57:14:
65:d2:a7:f1:d6:6e:69:ab:d6:92:96:2d:f5:86:05:
62:a0:f2:cf:5e:81:82:9b:9a:78:90:48:4a:49:c8:
68:1b:8f:c5:20:61:bb:67:50:07:01:77:4f:06:55:
ce:0a:05:be:da:a1:23:ca:18:76:4e:53:9e:9e:46:
30:03:f6:ee:90:c2:35:fe:dc:63:83:ff:22:e4:fc:
b2:6e:76:a7:b0:6a:50:89:53:fe:a5:77:be:00:2f:
6a:19:ee:35:13:05:2a:8c:7c:e1:60:ec:1e:0d:3d:
53:68:60:2a:bf:f9:45:1e:8a:ca:a6:82:68:35:41:
3f:f4:be:1a:8c:2e:64:86:d3:b8:0d:ff:12:7e:71:
85:32:63:43:1a:4c:93:7f:14:7d:a4:67:10:97:bf:
7d:ec:19:2f:92:b3:05:12:c5:4b:67:b7:d5:2d:43:
64:ef:9b:a2:b6:a8:15:0b:9c:2e:94:bd:cf:d0:5e:
a5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:65:8A:64:79:02:F6:33:49:86:BA:D0:11:F3:58:79:9F:26:34
X509v3 Authority Key Identifier:
keyid:87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:71:88:96:41:4b:ab:b0:c5:61:c4:0e:81:fb:5d:e9:30:76:
74:61:d3:1f:c0:7b:51:8e:c6:a2:ed:48:90:6e:33:90:3f:a6:
51:cd:cb:a9:14:3e:ad:ea:69:85:a5:2f:e1:60:1d:21:60:82:
78:59:8d:85:74:12:a4:80:e9:30:66:90:fe:7c:a9:18:d1:3b:
b6:63:b0:79:c7:e0:53:ee:be:fd:12:2d:73:1d:05:b6:c8:7f:
fd:10:d6:6e:60:cc:fb:1b:c6:3a:b2:da:2a:dc:72:d3:8a:db:
f9:94:42:af:20:dc:52:b0:c2:54:f7:f8:19:0d:6c:c6:8d:27:
4e:4a:c9:bc:d7:ff:12:a7:21:86:cb:7c:1d:6d:6d:15:03:78:
49:de:1d:d7:2d:d3:b8:9e:81:dd:64:e5:95:81:19:f4:19:5c:
63:b3:fd:e0:8a:8b:22:e4:aa:93:c6:2a:c5:f6:81:8a:3b:ec:
b4:33:c4:ba:0d:49:80:0a:e3:e9:60:58:8e:0d:b3:f2:c6:8a:
0a:d8:9a:97:81:04:05:c8:1f:9d:5e:80:98:78:85:93:1e:de:
0e:ac:56:16:3c:60:e2:f7:26:10:a2:e9:f5:3b:0a:cc:e1:1e:
be:7c:a8:8c:37:dd:b6:aa:30:cb:a5:22:11:cf:4c:90:99:19:
81:4d:a3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:14 2026 by rpki-client