Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: 7RFeXHT5btBzf18mPQCfOx+30YKpj16QuA/UfpXAbSo=
Subject key identifier: A6:BC:81:96:FC:BB:CF:0F:E4:39:AE:21:F9:8D:E4:36:11:39:F8:02
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019FFCB673E723AF8F8493A557A6800D181E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1A00
Signing time: Thu 13 Aug 2026 20:00:43 +0000
Manifest this update: Thu 13 Aug 2026 20:00:43 +0000
Manifest next update: Fri 14 Aug 2026 20:00:43 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: JaQ0mdNhx/35pc9vG6PCu8a5KRzi4kpOG6Ozrdt2Iio=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:b6:73:e7:23:af:8f:84:93:a5:57:a6:80:0d:18:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Aug 13 20:00:43 2026 GMT
Not After : Aug 14 20:00:43 2026 GMT
Subject: CN=a6bc8196fcbbcf0fe439ae21f98de4361139f802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:27:65:cb:5b:74:43:46:c0:af:09:57:52:
82:89:33:bb:2a:b3:e0:e1:ad:30:0b:e0:0d:61:28:
f5:27:35:ed:0b:dc:3f:61:8c:ee:76:eb:6f:52:d7:
96:2d:49:80:a9:bc:99:d7:76:f9:61:96:bc:53:4e:
39:1a:0e:1e:82:00:e4:ff:1d:df:9a:ed:c7:81:22:
60:52:e8:76:9c:41:e8:57:1f:98:70:2c:44:66:8d:
7c:68:e9:36:a7:7d:cb:38:55:12:be:ca:2b:4c:d6:
8f:dd:60:b7:1f:81:6f:7c:a6:11:b6:b6:1e:86:18:
d9:92:7d:f1:9f:0e:81:a4:5d:8e:f0:a4:25:fd:54:
d5:a1:10:01:ed:4b:03:ac:c6:f1:42:a3:36:51:c8:
d8:7e:b9:b0:d7:ce:36:4f:89:82:72:3a:67:06:62:
95:06:69:ae:b5:61:95:fa:82:25:08:a6:7c:98:52:
d0:a1:5f:2f:5e:b5:b1:4f:83:59:27:af:83:80:25:
2d:ba:21:2f:01:a0:f4:d1:de:29:6e:e7:89:0a:4b:
52:92:94:3c:cc:60:e7:6b:9d:27:ec:e9:43:79:4e:
0e:4d:56:48:82:6b:66:97:97:aa:2c:2c:95:df:86:
0e:d9:98:eb:cf:d5:85:27:2f:cb:ed:69:31:b5:ec:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BC:81:96:FC:BB:CF:0F:E4:39:AE:21:F9:8D:E4:36:11:39:F8:02
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:37:28:9e:15:8e:b7:c9:b9:12:10:ba:8f:95:c9:cd:83:23:
30:a0:7f:90:28:c1:55:e2:66:83:eb:ab:93:81:d7:fd:ae:5e:
4e:eb:a2:de:72:77:ff:ac:0c:ab:f3:d6:f5:f1:5f:a0:8c:10:
be:21:bd:90:86:8d:80:5e:3f:99:c5:d1:21:07:d3:ef:a2:46:
38:a0:ec:f5:ec:a5:ea:d3:91:66:7b:2a:f1:31:c4:ef:56:a5:
3f:6d:5f:0a:6e:d6:ad:3d:96:23:8e:f9:47:ad:4d:8e:6a:7c:
dc:11:0c:f2:e1:c6:f4:d1:41:4b:79:3a:37:91:9f:e7:44:58:
70:7b:0b:c9:7e:0b:ab:f7:7b:4a:20:8f:83:11:ec:06:6d:2f:
75:70:61:83:ea:44:39:ad:47:fe:af:f0:da:19:15:c8:42:f1:
44:65:00:59:36:89:97:79:6c:ca:47:b0:19:22:2e:ff:82:df:
6e:99:d7:fc:9a:26:38:9a:59:e3:2a:3a:4e:fc:da:bd:1f:10:
ca:30:d1:c0:a7:aa:4c:83:12:ac:3f:b2:a1:77:dd:a3:d9:2c:
6b:d1:98:19:2e:03:c4:83:aa:63:61:ac:98:5e:45:f9:24:98:
b6:3c:f0:50:a2:98:4f:6d:3f:ad:4a:70:79:8e:ae:05:d6:82:
64:29:6c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:29:12 2026 by rpki-client