Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: PCuWWRUouAD/QJsJMKHYDhf+V3iK0XSX315rhADYycU=
Subject key identifier: 30:86:84:2B:25:B5:B1:C0:BD:82:CC:89:4D:3C:C1:FD:E4:51:43:BA
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 01A13F39287B7D1A58C81CD60AB939B6570A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 11:01:12 +0000
Manifest this update: Thu 15 Oct 2026 11:01:12 +0000
Manifest next update: Fri 16 Oct 2026 11:01:12 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: PWVXTee+U5bBOIVdvEnZC+iui1RZHJgodE+syYljqTw=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:28:7b:7d:1a:58:c8:1c:d6:0a:b9:39:b6:57:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Oct 15 11:01:12 2026 GMT
Not After : Oct 16 11:01:12 2026 GMT
Subject: CN=3086842b25b5b1c0bd82cc894d3cc1fde45143ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:4e:0a:28:a0:12:04:19:72:5e:5d:3c:c1:
53:bc:a1:3c:f3:ce:3d:40:dd:f6:e3:b1:4c:99:f4:
49:c9:7f:2e:80:ea:d9:36:9a:a4:06:20:db:47:c1:
74:49:4f:b2:4c:87:9f:0a:b7:26:57:76:09:e6:50:
b8:28:1a:61:80:70:5a:2e:6d:25:c7:f1:60:5c:d0:
c0:75:da:fa:ab:b3:a2:90:0f:7d:5b:6d:81:4d:40:
39:7e:ad:26:ec:18:e1:e3:5a:71:e9:83:42:97:6c:
b7:1d:1e:0b:b4:8a:44:05:99:db:a5:f1:ce:01:f0:
c6:96:c7:97:36:95:be:46:31:71:a9:d3:f5:8e:37:
13:d0:63:c6:15:3a:0a:e9:10:8f:f9:7d:ce:19:5c:
35:12:4d:c7:24:a0:fd:96:08:b5:cd:94:8a:86:cc:
42:13:ec:3d:d7:14:91:43:e2:03:a8:b8:af:dc:28:
00:57:9a:05:b1:4c:d3:22:b3:b3:6b:b3:93:c8:62:
a2:ff:7e:e8:bd:3f:99:d5:b8:0d:30:02:d5:8c:6f:
43:92:72:49:04:2e:4e:b0:5a:94:7f:fd:19:44:f3:
37:5b:b3:be:6d:4b:f3:e0:5b:9a:d6:12:d9:b9:a6:
0a:ec:63:3e:f2:7e:32:17:f9:9e:06:76:e0:d7:da:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:86:84:2B:25:B5:B1:C0:BD:82:CC:89:4D:3C:C1:FD:E4:51:43:BA
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0f:d2:27:75:75:ab:ea:f0:f8:83:42:9c:aa:a6:9c:bf:04:
be:bf:54:73:44:02:a3:b4:87:e4:96:b8:18:51:53:6d:97:37:
e5:c2:dc:62:c0:7a:48:31:a0:40:d0:91:9e:22:50:30:f8:23:
d2:88:a9:1b:ea:16:2b:6b:19:29:cf:d8:c1:36:7e:81:86:50:
32:26:11:a7:aa:f3:e8:f3:95:8a:2e:45:6d:ef:ac:c3:67:db:
3f:4b:06:e2:7b:87:76:77:aa:3e:f0:c1:3d:23:49:7e:a3:5e:
c9:3a:ae:bb:aa:5a:c0:f4:0d:7c:a0:a2:7f:95:46:a9:08:03:
c9:2d:99:62:93:de:8d:45:a6:bf:55:b5:97:97:b0:87:93:4c:
c5:96:92:46:be:26:13:3a:7b:fa:0b:ea:c1:72:10:3d:48:79:
e5:d0:58:7e:85:9f:5a:ce:88:8e:27:2a:55:8a:58:1d:09:88:
7a:33:ac:d4:e5:3e:ee:a4:09:e6:ab:d9:72:5c:bb:8e:2d:c6:
ca:9c:38:4c:27:65:34:ff:36:c8:d1:d1:b5:01:3d:4d:e0:1c:
fb:f8:2a:65:c8:f2:c7:c7:93:54:7c:ab:22:ea:c8:01:6c:3f:
6d:aa:0e:b1:7a:9f:f0:64:fc:ad:bf:b9:fc:82:63:da:82:21:
62:84:65:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:27 2026 by rpki-client