Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
File: h3OqvdPia0S3mDfBRwq44XQV6o4.mft (raw, json)
Hash identifier: yjiJKwPZrWCAu6wf8MCXAMLVE2+kspwc8PqMZqBKqaQ=
Subject key identifier: F9:BD:06:83:3D:89:9F:E1:08:4B:A1:DC:5D:82:96:F8:55:C1:FD:E4
Authority key identifier: 87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
Certificate issuer: /CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Certificate serial: 019D38D297FF46B586CF968B5310317FA3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
Manifest number: 047B
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: h3OqvdPia0S3mDfBRwq44XQV6o4.crl (hash: jwzvIpyHcfi5UuBNXIG8xGLKD4oRWxyINQm3Qd9vhDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:97:ff:46:b5:86:cf:96:8b:53:10:31:7f:a3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8773aabdd3e26b44b79837c1470ab8e17415ea8e
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=f9bd06833d899fe1084ba1dc5d8296f855c1fde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bc:92:fe:b8:55:0a:7f:43:3b:05:36:55:dc:
0d:de:6d:2a:19:ee:f0:cf:1e:32:00:e2:25:bb:de:
5b:82:1a:7e:ee:4c:d9:0c:4d:1e:41:50:c5:fa:0e:
1e:3d:71:3a:73:b9:eb:02:a6:76:6c:c4:f1:52:fe:
df:95:c3:00:8c:e6:2b:05:a0:9a:ee:7e:5c:69:82:
95:04:cb:ed:fa:e7:51:55:b9:9f:77:e1:82:5a:a6:
95:ec:1e:5b:de:ed:d0:9d:74:55:10:b7:49:8a:ab:
48:0b:08:1b:75:f0:cf:66:3c:8f:78:aa:78:bf:7c:
0b:d6:a7:9a:fa:49:da:86:ba:90:dd:1e:96:bc:07:
8a:45:c1:08:59:86:13:f2:0a:d2:80:f8:b5:80:f4:
1f:49:79:2c:ad:31:df:af:4c:45:f3:ac:a1:09:09:
a5:c4:c2:f7:db:bb:ce:02:64:e7:9b:46:b5:e1:1f:
cf:cc:49:70:59:45:f3:bd:a7:35:ac:bd:65:10:98:
d8:17:c7:d4:45:c4:71:8c:a1:83:87:85:3b:35:ee:
dd:4b:6f:75:ed:9f:f5:e3:a2:2d:fa:9b:04:f2:20:
05:79:1d:cf:35:10:9b:2a:8b:09:3a:24:74:93:fb:
cf:08:a5:29:b8:38:1b:51:ce:0e:63:00:aa:70:b7:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BD:06:83:3D:89:9F:E1:08:4B:A1:DC:5D:82:96:F8:55:C1:FD:E4
X509v3 Authority Key Identifier:
keyid:87:73:AA:BD:D3:E2:6B:44:B7:98:37:C1:47:0A:B8:E1:74:15:EA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3OqvdPia0S3mDfBRwq44XQV6o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e4b3f6-040b-406e-b438-6ab8a879a17b/1/h3OqvdPia0S3mDfBRwq44XQV6o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:90:dc:e7:ce:af:06:cf:11:ba:c3:53:39:54:8b:bf:3d:fd:
12:b2:df:8f:7c:cf:ba:38:ec:44:92:52:01:3c:7d:ee:3e:81:
cf:b0:da:cf:5e:3b:97:b4:09:6d:89:52:cf:33:a7:25:ba:6f:
2b:70:0b:dd:3b:9b:1f:38:70:fb:53:8e:44:a4:24:67:dd:b5:
87:71:68:ab:62:05:6a:6e:dd:0e:f4:13:70:3e:29:2c:f7:33:
26:23:27:b7:36:8b:f3:07:06:b4:b1:cc:21:5d:3d:46:9e:88:
31:a5:d1:ba:31:9a:1a:16:d8:a1:a3:f8:73:90:c9:3b:d3:6a:
5c:60:c7:86:a5:d4:6b:55:cf:d3:76:1f:43:2b:2e:74:83:7a:
29:03:c5:ea:c5:00:88:ee:4f:fd:56:f1:16:b0:ac:bc:9e:cf:
1b:58:cd:f6:4f:05:38:08:5e:c3:d6:25:d5:51:cf:52:df:95:
15:e2:3c:99:0a:24:90:c3:88:84:e9:e1:2a:3c:0c:7a:4f:e6:
fd:70:4d:60:f8:96:1d:b2:b7:90:b1:06:ea:84:08:f1:ee:1c:
36:33:19:32:7d:89:e8:9d:07:ba:59:4b:dc:5e:4b:51:cc:b2:
30:54:8a:bd:85:cd:28:17:0d:ed:7c:b4:cc:ad:a9:40:6e:3c:
a9:aa:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:18 2026 by rpki-client