Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: in4JmK6tzdcLzGOghE+XYbjBQLW/lvNhiyVqp8QD/MQ=
Subject key identifier: C0:45:1D:53:35:DA:20:3C:30:26:24:B6:56:79:5F:20:21:B7:87:11
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019D37F7576F64BEEA6C27862749045B11BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:49 +0000
Manifest this update: Sun 29 Mar 2026 05:00:49 +0000
Manifest next update: Mon 30 Mar 2026 05:00:49 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: +bt+AefJp9WSR+HMzU0VV0ci62UJl16M5+kZGRoLbJs=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:57:6f:64:be:ea:6c:27:86:27:49:04:5b:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Mar 29 05:00:49 2026 GMT
Not After : Mar 30 05:00:49 2026 GMT
Subject: CN=c0451d5335da203c302624b656795f2021b78711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:60:bb:33:0d:f2:3b:f9:05:f4:ca:90:5d:
d3:08:ec:bd:e5:6f:2b:64:9d:e0:73:45:7e:36:21:
8e:7f:b4:d6:fe:74:00:88:0b:e8:61:01:f2:60:42:
1b:10:71:7e:0c:0c:2a:81:de:9c:ff:cb:e0:2f:b7:
11:ce:b3:f7:c1:32:bf:73:18:7c:5a:fd:77:89:e2:
ce:41:6c:e5:ec:05:2f:6d:82:f4:7e:de:df:27:85:
6e:5a:41:84:8d:03:d8:de:db:da:6e:40:91:b9:9b:
85:19:d5:3c:90:29:15:24:10:2f:38:58:a9:63:43:
ef:cf:8c:21:b8:fa:a3:3c:21:ef:f4:1b:e4:df:31:
3a:55:4d:2c:56:99:00:4f:14:2b:c5:d7:d9:f9:a2:
4b:83:14:88:3c:50:89:d7:03:e4:2d:f2:6d:95:c2:
c8:33:0f:d7:1c:25:f1:a8:0c:8c:85:62:2e:d3:d5:
45:ed:a1:ef:87:59:3f:26:0f:e6:97:34:f9:70:ae:
88:89:65:9f:0a:de:d4:11:2e:9d:11:9b:89:66:d6:
c4:5d:ed:0a:cd:88:a3:52:c3:37:0f:9d:4e:b2:24:
2c:2f:78:0c:36:18:e2:96:7c:59:b7:1c:cf:61:9f:
97:5b:77:76:d7:f8:26:2c:86:5c:d6:41:9d:56:4f:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:45:1D:53:35:DA:20:3C:30:26:24:B6:56:79:5F:20:21:B7:87:11
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:56:dd:37:cd:11:53:c6:66:dd:ef:dd:88:60:21:85:87:f2:
6e:96:59:71:0e:2b:a3:05:c9:4e:38:d2:09:e6:6c:52:98:9c:
10:a1:96:64:d2:d1:d3:0e:18:15:ef:51:e5:e0:5d:ff:f2:a7:
7a:f6:4c:2c:0a:16:8a:54:8d:1d:0f:9a:00:24:5c:b2:84:52:
06:e7:3d:37:07:3a:3a:16:a5:a0:72:a3:3a:76:f4:9c:36:c6:
6c:d7:cc:d3:78:9b:05:5f:d9:e5:06:7a:ff:ba:bf:ed:0d:51:
5f:62:5c:11:78:6c:35:2b:44:42:7c:7e:84:2a:43:3c:b3:76:
40:2b:59:33:20:ce:5c:33:ee:d0:e2:f8:68:24:80:b5:48:55:
01:72:8f:5e:47:c0:0b:cf:a1:73:6f:35:90:2a:bf:bc:43:9e:
e1:1a:8f:8b:8a:42:7a:54:4f:ef:98:a3:05:25:10:d8:da:a6:
2a:5d:c2:07:38:c4:40:53:80:fe:97:6e:34:f6:ce:56:1a:48:
d4:87:ec:b3:75:bc:5c:a6:19:84:1e:d5:06:30:60:7d:47:da:
53:0e:b0:a1:c7:c2:c0:4c:58:84:a2:b2:d6:f5:8d:81:d6:54:
19:bb:e1:6e:bb:24:85:bb:2e:55:18:51:31:b2:af:23:0c:e0:
54:d3:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:42 2026 by rpki-client