Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: G349EHMnnNYeuJ3LUChJv9eBdfS5qLAxNqS5jM6/M6Y=
Subject key identifier: 61:28:CF:E4:CC:7A:83:92:25:8A:35:20:3F:B9:F9:9D:36:F7:D4:89
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019F1503E0D24D4C8BC855A44D365CF2DCD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 20:13:23 +0000
Manifest this update: Mon 29 Jun 2026 20:13:23 +0000
Manifest next update: Tue 30 Jun 2026 20:13:23 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: 8sNcjf5coBvIdnEnkSyyj+dtdNmxH5aK9dgoq40H0+M=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 20:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:03:e0:d2:4d:4c:8b:c8:55:a4:4d:36:5c:f2:dc:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Jun 29 20:13:23 2026 GMT
Not After : Jun 30 20:13:23 2026 GMT
Subject: CN=6128cfe4cc7a8392258a35203fb9f99d36f7d489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:e1:f2:fa:e0:f7:35:57:11:21:43:f3:70:
a8:58:56:51:d1:18:03:6c:fc:02:63:9b:9d:40:98:
c7:3a:5c:9b:de:93:1b:4b:78:d0:19:49:1c:80:9a:
b7:bf:09:99:74:00:8f:ba:75:dc:3e:72:ee:77:c4:
c9:f4:3b:01:74:bb:f2:cb:cb:8d:c4:83:c1:1b:85:
8a:ea:7c:46:ef:f2:bd:59:da:51:1b:48:6d:55:70:
94:48:b0:ee:c4:80:83:91:ce:73:08:e2:41:8b:18:
8f:48:65:a5:05:f3:3e:f7:83:32:92:27:aa:85:ee:
a1:8a:c8:66:84:bc:ca:71:c3:3a:1b:65:d8:ae:f2:
2d:bc:81:1d:81:8f:5d:45:6e:55:5c:32:ef:62:72:
84:c0:76:30:a6:33:09:44:e1:cf:a2:5a:fc:71:26:
e6:b5:6d:f5:80:f4:82:bd:15:91:78:c2:7e:b4:7c:
03:12:8d:83:49:dd:1f:f4:01:40:d1:50:5e:21:2a:
0e:ce:5c:17:1d:f5:dc:26:80:61:53:c3:64:a3:ac:
e3:d4:4c:a7:6c:3b:17:af:19:ae:fa:9e:48:78:2d:
ef:0a:a6:46:94:e2:b6:6f:34:90:0c:38:07:87:d4:
bf:0e:11:50:d0:78:bf:59:04:29:f8:f6:af:11:ed:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:CF:E4:CC:7A:83:92:25:8A:35:20:3F:B9:F9:9D:36:F7:D4:89
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:46:b4:9e:79:1b:78:16:6f:61:8e:2f:aa:08:cc:c9:b0:9d:
77:9c:52:9b:72:4b:d7:2e:1f:36:ad:5a:7b:d9:0d:17:0d:7b:
c6:43:a9:47:76:53:d5:e8:93:c7:38:8f:35:57:07:2d:30:4f:
68:5d:3e:4c:11:44:2a:27:62:68:5f:3a:9b:5c:1b:00:ab:2c:
bf:5c:53:a5:79:58:ae:09:f1:f4:1e:76:c8:c2:d9:fa:e9:89:
ba:65:72:aa:83:02:f1:dc:6f:83:82:46:8f:a0:34:d6:3d:c5:
d0:9e:9e:d2:3c:7f:66:2d:63:15:fc:dc:94:d9:56:c4:b7:ec:
c6:df:b8:43:ef:2b:98:9b:c9:33:80:fc:52:e2:42:f7:90:88:
1d:62:81:1e:f9:89:90:85:44:9c:c9:3a:41:8c:07:97:71:fc:
b2:e8:75:a0:61:88:9a:7e:4c:8f:d9:18:ee:08:dc:ea:0b:f6:
00:1d:cc:04:62:25:f9:6b:1c:65:4f:af:b4:b9:00:b9:d3:dd:
21:7e:d4:23:68:1f:3d:03:e2:fe:b4:06:43:68:a9:42:06:22:
12:4f:c3:8a:5d:6b:aa:55:46:c1:2b:fd:be:ce:f5:2c:e2:63:
7b:5e:a5:10:97:f0:32:ed:0b:c0:09:6c:a6:fd:55:08:d5:bf:
e0:b7:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 02:12:22 2026 by rpki-client