Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: YIT8hUhEWc4HVRIn36dzU2LovxKBErctDA7Nx57WOdQ=
Subject key identifier: 16:C4:FE:16:EE:0A:8C:7B:27:D2:34:06:54:09:5A:27:FE:6C:DC:A2
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019E2B4C1FE3FEEB0F7E6655EDB1661231E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 11:01:09 +0000
Manifest this update: Fri 15 May 2026 11:01:09 +0000
Manifest next update: Sat 16 May 2026 11:01:09 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: 1GqlXhnULWVj8i1jI63z8yyIhUvtbzQENm+OTbUtdk4=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:4c:1f:e3:fe:eb:0f:7e:66:55:ed:b1:66:12:31:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: May 15 11:01:09 2026 GMT
Not After : May 16 11:01:09 2026 GMT
Subject: CN=16c4fe16ee0a8c7b27d2340654095a27fe6cdca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:c6:a2:ed:e7:b6:9a:21:86:c2:ac:8f:fc:
3f:c2:0c:c0:7c:a4:93:43:74:21:c9:8d:bf:0a:ad:
77:9a:41:52:f0:4e:aa:c3:bf:c6:e0:9a:27:70:e0:
ee:41:76:22:b8:ad:fb:bb:9c:bc:6f:89:f5:0c:18:
59:f6:83:b8:39:a5:f0:d0:93:c1:d8:e4:ee:16:5b:
20:e4:e7:04:18:2e:c6:76:a3:04:45:0f:87:2d:73:
fd:34:bb:69:65:67:32:50:8c:7e:00:3d:a6:81:51:
67:c1:4f:aa:ab:df:e3:48:ff:ac:18:b0:2f:36:84:
1e:60:b8:cd:70:74:8b:91:b0:fe:30:eb:6d:1b:a2:
69:93:d8:e6:32:3c:93:3a:9d:ac:7b:99:7e:98:9b:
8d:93:19:bf:b8:0f:f3:be:cd:78:52:05:7e:28:c1:
62:0a:39:36:f4:cb:03:d2:3c:61:ba:78:bb:2c:48:
69:66:4d:8d:2a:cc:e4:5e:60:be:c3:51:16:17:2d:
92:60:b4:43:10:0a:c6:6e:14:5c:67:26:01:21:87:
ee:93:87:bd:e1:87:c4:be:69:17:a1:b4:94:6f:e9:
2e:cc:83:07:99:c9:30:a2:c2:f4:62:de:e2:a9:a4:
1a:0c:8e:d8:54:82:fc:0d:fa:21:59:f7:c8:6e:df:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C4:FE:16:EE:0A:8C:7B:27:D2:34:06:54:09:5A:27:FE:6C:DC:A2
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a5:2e:20:53:f5:8a:bb:72:0d:19:8b:ed:7c:60:04:fb:cd:
84:7a:e3:ff:57:81:d4:b1:50:57:76:92:a3:67:91:84:f7:cc:
31:ce:51:2e:90:d1:51:0a:03:58:d0:cb:dc:30:21:d5:8e:40:
a5:8a:dd:33:bf:47:d6:e8:03:64:70:42:58:ea:33:5b:0c:82:
0a:08:11:a0:bc:f1:22:bf:8c:da:3e:7c:57:63:f6:0b:b2:0a:
2e:17:a2:5d:ef:27:2c:a5:04:f9:14:46:de:92:c2:4f:ce:bc:
c4:62:39:aa:42:63:91:5c:56:ea:a2:e5:3a:d4:22:cd:95:e1:
1f:1f:2c:3a:35:16:50:34:b6:94:ee:bd:c8:66:b3:8e:ee:12:
53:5f:47:04:85:35:cb:ad:34:a2:d7:83:84:64:83:3e:2a:52:
b6:38:a2:42:03:64:44:47:17:6a:76:ee:5c:84:cd:a3:19:09:
8f:c2:18:e6:74:6b:cb:8c:e5:35:05:5c:d3:9b:72:87:9a:cc:
23:2a:80:45:3e:d1:46:2e:74:b5:ed:76:ec:23:5e:9d:f2:7d:
f0:77:6a:86:d6:13:01:c9:60:2b:5d:b0:3f:95:2b:88:7c:c4:
2c:fa:b8:48:0c:59:8c:77:6e:11:f2:87:da:d2:e7:dd:08:f2:
ab:bf:5c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 21:07:56 2026 by rpki-client