Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: XUF8QwRMsJVh5VuXkJsiP7TUiOfvFzf9ZXhxUtN5N7c=
Subject key identifier: 32:C8:BD:48:7E:3E:D9:88:25:10:78:AC:F8:70:40:32:6E:F8:97:7D
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 019D37F797BD17BE4D88B74A319C8935E803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 0CA9
Signing time: Sun 29 Mar 2026 05:01:06 +0000
Manifest this update: Sun 29 Mar 2026 05:01:06 +0000
Manifest next update: Mon 30 Mar 2026 05:01:06 +0000
Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: feWWei9bbng8vOmfdFPz7SpnO5s/xOjYXPz2fEnEL2w=)
2: sa-VxIHIFXVHRevvOB_tVdLXAUg.roa (hash: AJ35gvwbYj3xRDQgq3Eq1FxMxn80Yq+XvR8L/G/XxyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:97:bd:17:be:4d:88:b7:4a:31:9c:89:35:e8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Mar 29 05:01:06 2026 GMT
Not After : Mar 30 05:01:06 2026 GMT
Subject: CN=32c8bd487e3ed988251078acf87040326ef8977d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:07:7e:ac:27:4f:eb:57:77:df:44:c6:80:
c9:52:f4:67:51:5f:a5:50:c1:44:e8:08:bd:b6:7e:
b8:d9:3a:0c:96:5d:69:75:f7:39:3a:81:4c:47:59:
70:0a:22:dd:ec:a8:7e:b8:4b:c8:a3:17:06:db:65:
76:77:3b:74:a0:eb:3d:17:16:07:fa:90:34:e8:ee:
db:3f:f5:a7:4c:ee:d7:a9:a6:54:6e:43:34:df:37:
d5:0f:ee:f8:0d:73:0e:1e:8f:f2:39:63:fe:06:c6:
18:65:1a:19:2b:7e:d7:fd:91:12:ca:ff:94:96:ea:
0f:c3:f3:a2:4f:ff:d4:fa:51:94:5c:08:49:cb:6b:
19:15:77:5a:46:9f:a0:d9:da:31:91:5c:99:6a:48:
7b:0d:e7:49:e4:b1:a4:7d:44:b1:05:9f:50:7f:a5:
9d:34:97:10:c3:58:0d:59:2b:9b:d5:a1:0a:cf:37:
3e:6b:77:c4:12:60:a7:12:cc:ca:e8:57:22:2d:a9:
8e:9d:c4:3e:93:6a:38:81:c0:4c:4a:e5:f0:49:b2:
5e:97:98:46:c9:52:7b:79:2e:08:4f:1d:3f:fa:4e:
48:7b:2a:fa:d6:02:e4:d7:b9:43:51:28:2f:8b:d0:
13:e8:6e:42:ee:ab:4d:ee:70:90:69:1e:2a:a4:2e:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C8:BD:48:7E:3E:D9:88:25:10:78:AC:F8:70:40:32:6E:F8:97:7D
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7b:9b:c4:ef:05:93:71:1a:8f:3d:f5:88:54:0e:e3:68:55:
6f:74:48:0d:03:e1:bd:c3:4b:6b:52:e7:ec:63:8d:cd:b9:30:
97:e5:a2:6a:fd:3e:2d:90:f8:cb:d8:de:15:3c:3d:3d:b0:54:
af:14:7c:86:fd:89:f2:51:85:02:a6:ee:f8:42:84:17:cf:9a:
bc:3d:24:07:5b:d4:45:3b:c0:f4:3d:56:bf:59:55:94:d3:ff:
0d:72:aa:fd:a7:27:8f:5c:e5:7b:70:ed:fb:51:51:26:5a:eb:
a9:ed:3e:ee:c3:c5:21:da:1f:61:58:27:f6:6f:f2:ce:60:8e:
1d:90:54:37:50:70:32:35:fe:5d:b0:d0:7a:68:67:d3:ae:89:
8c:a0:1c:51:c6:3a:eb:bc:01:b1:76:f3:b1:6f:44:d8:7e:70:
21:5b:e5:58:17:9b:ea:39:29:68:aa:eb:08:cd:52:c2:dc:c5:
94:be:40:da:b0:43:9e:2a:0f:90:4c:df:f2:ae:7d:46:01:65:
a8:da:41:81:b8:b8:25:d4:b7:34:6e:fe:d0:f0:86:31:fe:1b:
52:29:27:81:74:a1:e6:9d:93:ea:56:6f:b5:fc:9f:8e:e6:47:
25:3b:da:bb:4f:b8:84:8c:48:7a:99:dc:43:24:61:b5:bb:32:
d9:9c:95:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:47 2026 by rpki-client