Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: B+zwSxaCwCK3shrspm9G6X0kDnmmRVKvReaWFVkdi+4=
Subject key identifier: 17:FF:C2:CC:45:C8:74:41:73:2C:80:CE:A0:64:1E:7D:3B:99:32:C6
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 01A08CE8B3738365DDEFA4C788404A3E3A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: 018E
Signing time: Thu 10 Sep 2026 20:00:55 +0000
Manifest this update: Thu 10 Sep 2026 20:00:55 +0000
Manifest next update: Fri 11 Sep 2026 20:00:55 +0000
Files and hashes: 1: AhAcdKgAbaxev6WZheq94rPVhy4.roa (hash: jnz0tuvjSI9nchLY2GePdtWDuCFuuGK4nahWThqEMJU=)
2: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
3: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: ghZio8qCnzNIrWA5ByJmG1rz0GMOzt/0BOF9TTPqBS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:b3:73:83:65:dd:ef:a4:c7:88:40:4a:3e:3a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: Sep 10 20:00:55 2026 GMT
Not After : Sep 11 20:00:55 2026 GMT
Subject: CN=17ffc2cc45c87441732c80cea0641e7d3b9932c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:aa:ad:e0:81:ab:e2:ba:5f:61:29:53:6e:9a:
ab:99:8b:2e:77:75:11:06:d7:21:f0:1a:e9:43:22:
71:e9:4c:8b:be:47:8b:8f:8e:15:78:2b:bd:6c:ad:
e0:51:f2:62:b4:55:f5:74:1a:61:6e:3a:88:d1:26:
c9:d6:55:54:b2:8f:12:45:c1:17:97:9e:b8:04:f0:
dd:cf:09:c8:76:f5:17:f1:17:f4:7e:06:1e:03:1d:
d7:2c:38:fa:7f:44:2d:7c:16:4c:fd:98:55:3c:df:
3e:fb:a1:54:22:8d:c9:5a:bf:75:f1:c8:16:f2:eb:
9b:2e:8a:97:0e:70:0c:89:31:5e:3d:8e:72:a7:da:
4c:b7:b1:b6:b5:57:9b:d4:e2:65:5c:12:73:cd:a9:
9a:1f:a0:32:7b:db:c6:e9:88:92:49:bd:2b:f7:1e:
e2:2f:04:17:63:36:00:3d:40:e8:7f:52:58:12:73:
b4:a7:2e:f0:19:6a:ea:7f:ef:b8:f6:9e:f5:88:fb:
c3:be:59:06:67:76:b9:3a:04:3e:da:eb:3b:9b:d6:
d2:f4:dc:10:09:6a:c2:09:59:80:fc:b0:5c:e1:38:
91:e8:39:20:bb:4f:b7:51:61:59:2f:b2:c3:66:33:
37:87:89:27:cc:30:f9:21:33:4d:68:33:19:54:56:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:C2:CC:45:C8:74:41:73:2C:80:CE:A0:64:1E:7D:3B:99:32:C6
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:30:63:fe:0e:09:5b:28:03:c5:45:73:c2:26:5e:bc:c6:48:
68:d2:62:28:e4:35:f8:0b:88:9e:a9:7d:27:20:a3:77:30:38:
c9:1b:7b:7a:6e:4b:95:b1:a8:64:c5:6f:2d:f1:32:d3:86:58:
34:2a:a3:65:0f:02:3a:75:ec:50:97:70:1b:c1:7d:88:13:f5:
47:69:54:21:a2:fb:84:6e:89:cc:8e:ba:6e:85:3a:6d:eb:83:
c3:59:4a:a9:85:34:42:4f:b2:c9:16:82:9b:c5:b2:ed:67:c9:
91:52:b5:a8:ee:be:89:08:27:ef:1f:57:44:3e:21:37:23:cd:
eb:22:8c:48:4e:19:86:07:12:13:48:ee:e1:42:42:f8:9c:ea:
71:bd:68:5e:9f:fa:45:08:8e:c4:89:c6:7d:d8:75:e5:fb:c3:
cf:42:ee:32:3a:e5:e1:bb:56:f8:da:91:eb:e2:aa:8e:e8:64:
9a:47:01:6e:47:10:d4:05:c6:c7:b1:89:49:92:41:3b:3e:5b:
23:7c:e7:29:e8:95:3e:08:0a:21:04:1e:f9:01:a0:b1:51:d6:
d7:40:be:0b:a9:d7:1e:98:a1:19:2e:9e:c5:b2:3c:06:16:ae:
80:4b:9a:fa:39:1d:b1:26:0e:04:e2:0f:42:6b:e6:00:66:ba:
d2:f1:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:13:36 2026 by rpki-client