Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: Wy1CAZ4zcC28YaoMmWHRhx+5V2in/8NAOOw+zdbQrNc=
Subject key identifier: 08:28:30:B6:7C:62:61:A1:32:6A:24:97:6A:4E:90:CC:3F:05:B6:44
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 01A1860855B7A9FE74620958036C1E687F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: 020F
Signing time: Thu 29 Oct 2026 05:00:55 +0000
Manifest this update: Thu 29 Oct 2026 05:00:55 +0000
Manifest next update: Fri 30 Oct 2026 05:00:55 +0000
Files and hashes: 1: AhAcdKgAbaxev6WZheq94rPVhy4.roa (hash: jnz0tuvjSI9nchLY2GePdtWDuCFuuGK4nahWThqEMJU=)
2: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
3: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: 90imXXoGbgV13ca+dcvusbzhmRZxoQNefmI0Oy4zNNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:55:b7:a9:fe:74:62:09:58:03:6c:1e:68:7f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: Oct 29 05:00:55 2026 GMT
Not After : Oct 30 05:00:55 2026 GMT
Subject: CN=082830b67c6261a1326a24976a4e90cc3f05b644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:45:27:81:8c:b4:18:e5:8d:06:29:c3:e5:
a4:3f:a2:94:a1:ce:be:84:23:e4:a4:98:bf:90:7b:
3e:88:9c:fd:ae:e0:9f:af:bf:af:0f:32:b1:07:3c:
96:c8:b9:9e:18:98:4e:07:8a:98:fc:6f:2c:ac:56:
ce:25:5b:9a:26:4a:27:05:55:99:72:35:d2:37:cc:
71:03:a2:93:f2:20:4f:05:c6:01:89:14:e8:d4:b3:
b1:5f:52:40:4d:dc:bb:2e:fc:07:4f:b3:2d:ed:a4:
d8:1f:7c:f2:b2:c3:30:38:2c:65:b5:b1:60:5a:fe:
75:eb:2f:95:49:09:8e:33:8c:b3:37:d2:53:9d:63:
52:af:f0:b1:bf:e1:9b:c0:eb:72:66:8b:7d:09:53:
81:f6:38:ca:c2:40:90:37:95:0c:04:92:e2:5c:88:
24:6e:5d:85:d6:f0:b0:32:df:7e:ce:13:1a:66:c4:
ae:6d:92:19:1e:9f:4c:1e:be:7f:8b:43:ca:9d:42:
13:ea:cf:8a:a6:eb:6a:83:3d:22:83:49:eb:59:31:
4e:84:f0:36:69:59:ba:13:d6:d6:3f:c5:a0:d4:c9:
36:19:50:c9:34:b2:1a:96:aa:54:aa:f4:a3:2c:2f:
bf:28:c8:18:81:3a:66:1b:74:c9:0a:58:4b:45:63:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:28:30:B6:7C:62:61:A1:32:6A:24:97:6A:4E:90:CC:3F:05:B6:44
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:04:ae:48:b6:59:65:17:68:b1:51:04:23:7c:ec:f2:37:dc:
7e:98:b6:d0:11:95:d2:32:df:f4:9f:1a:95:89:34:27:20:74:
9b:db:bc:3a:45:a2:a1:99:ad:3d:e3:94:25:3a:46:dd:d1:06:
8d:2c:45:82:d3:63:27:1e:a0:28:51:ad:14:d5:27:3e:5e:f3:
96:ac:36:be:31:e4:d4:b4:61:98:31:00:d7:98:c1:43:a0:c6:
b0:11:8e:6c:1b:6b:55:f1:01:a6:6d:1a:37:3c:bf:66:c3:92:
3d:39:c4:92:f7:bf:70:f3:4a:4c:1e:2b:5b:49:0d:00:68:7c:
62:43:4f:82:1b:eb:75:b1:2c:d1:fc:21:42:a3:01:78:81:86:
4d:c5:fe:b4:c3:bb:7b:fc:55:59:2b:3b:2f:0e:6f:75:15:e8:
de:02:7b:1f:f1:7e:a9:06:9d:16:85:a9:b0:23:db:05:ad:d2:
3c:d8:ec:af:8d:90:fb:84:8e:b4:93:a9:ca:7b:19:1a:f1:68:
78:fd:76:11:1e:ee:b3:6e:fa:70:ec:c6:64:49:e9:b8:f3:75:
81:d7:c2:e0:d5:ce:e0:61:17:cd:42:c3:8a:8a:4a:bb:52:6c:
01:09:19:25:77:1c:9b:ca:6e:a3:4a:8a:ba:55:a6:70:1f:f9:
e7:08:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:54:38 2026 by rpki-client