Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: uv7GXMsTwn6+BB01GaHJXGuZW/THqkhF/xYNZD5zKzs=
Subject key identifier: D0:38:73:99:EB:E3:32:C3:2E:E7:D1:DF:09:37:CA:AE:C0:1D:09:11
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 019DCD871CB428E488AC7BA1B86D43C431F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: 21
Signing time: Mon 27 Apr 2026 06:01:17 +0000
Manifest this update: Mon 27 Apr 2026 06:01:17 +0000
Manifest next update: Tue 28 Apr 2026 06:01:17 +0000
Files and hashes: 1: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
2: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: qbxp8Naey416B7s/EbPT7n+Bl15LKOZVuN7fSJ5Ma9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:1c:b4:28:e4:88:ac:7b:a1:b8:6d:43:c4:31:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: Apr 27 06:01:17 2026 GMT
Not After : Apr 28 06:01:17 2026 GMT
Subject: CN=d0387399ebe332c32ee7d1df0937caaec01d0911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:18:45:e7:73:0b:0b:78:b9:1a:05:9b:07:
0e:37:3c:5b:39:c9:9a:59:ef:2f:33:e4:d3:13:3d:
60:a5:31:a7:8f:30:6c:78:1f:b0:d9:12:88:f9:1a:
13:43:52:fd:dc:f0:ff:c0:df:27:48:97:fb:88:d2:
1a:23:40:00:74:17:16:0e:5e:00:19:0f:82:b7:a5:
3a:03:38:69:5d:d1:04:5c:0b:3a:da:52:62:9c:31:
e3:c7:57:ec:f4:ae:4b:ec:9b:38:3c:f7:0e:84:bb:
0f:e3:76:f3:7b:48:52:37:e1:0e:fe:13:53:df:7f:
27:2c:aa:32:8e:87:3e:21:f3:49:70:a4:43:7b:ff:
27:c6:fd:3d:49:4b:1d:d9:d0:b9:f5:e3:14:fa:fd:
3d:3b:d6:3b:5b:40:3a:db:ca:e2:c6:ff:cd:93:fa:
c3:1b:c0:75:b3:06:c0:68:85:15:63:c9:53:73:dc:
23:c5:98:42:90:8f:c8:1d:81:85:28:03:03:8f:24:
69:98:5a:bb:12:b8:d1:90:b6:58:23:5c:98:d7:ec:
04:a1:20:d1:c4:cf:23:61:f7:81:5d:fe:7f:18:ab:
d2:27:7f:78:73:d9:45:6a:a2:cc:b9:44:80:09:e1:
31:58:e2:47:98:52:77:48:62:9b:f4:2e:27:db:c8:
c3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:73:99:EB:E3:32:C3:2E:E7:D1:DF:09:37:CA:AE:C0:1D:09:11
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2d:b7:69:8b:7b:91:92:d1:19:3b:97:c6:8d:35:36:a1:9b:
c9:88:1f:1c:bc:4a:0d:f4:78:9f:61:97:55:c6:0b:0d:92:20:
83:74:d5:9a:64:9e:67:22:6a:7a:fe:6e:93:f3:30:b7:3b:ab:
71:64:aa:66:22:a2:ed:73:8e:4d:14:3d:c9:ae:aa:5c:b5:94:
1b:04:23:9e:94:0b:b3:2d:bc:9f:77:67:c6:46:81:6f:33:56:
12:46:d6:b5:99:86:87:12:15:c9:8a:9e:4e:33:39:5d:b3:cf:
99:e1:93:26:fa:a0:0f:61:97:16:21:ce:f7:81:83:2b:f5:44:
f5:73:0c:77:b3:a9:8b:b3:dd:71:62:eb:2e:5a:39:2c:f5:ca:
35:11:c1:b9:9d:6c:6c:d8:d4:b0:23:7e:82:3e:5c:be:e2:9e:
6b:0b:99:36:61:9f:dc:af:e2:f1:21:5c:f4:17:79:77:2d:13:
20:84:f2:bd:ae:1e:53:4d:e1:27:0b:6a:72:e7:b5:99:08:17:
68:f2:9a:b9:95:cc:f2:e3:ba:8e:7b:c4:67:c2:c5:c5:2d:27:
4c:d0:17:58:a4:0f:15:df:f2:6e:f6:fa:3f:dd:7a:70:80:77:
37:fd:cd:04:5d:0a:f0:78:17:e0:6b:36:08:bc:fc:ac:01:e5:
01:33:2c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:03:01 2026 by rpki-client