Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: xNSR1soTPnuWd76ga/ckvTkGLZE0Owd05cgiK9mGlio=
Subject key identifier: 44:3F:08:82:DD:C7:00:0A:27:66:9E:7B:42:3A:70:4E:9F:11:D2:02
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 019D38D2EBA575F754F360B1A957B4C9F6C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 046B
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: 26tifeDJOokQX2xBf_3Nq0FjNP0.roa (hash: 9C1lRs6FbIMhNzNJlmiz4jKcDXBY2F5bdab09+tRw4k=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: vUWQ1o08U3HSGyb9xGDVMckkKx0khcpd/KJ+SL9UQ1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:eb:a5:75:f7:54:f3:60:b1:a9:57:b4:c9:f6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=443f0882ddc7000a27669e7b423a704e9f11d202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:a4:69:6f:6e:64:4a:60:87:12:77:8c:4b:
fd:e5:1c:5c:b5:12:93:19:a8:8b:3e:1d:56:93:93:
59:74:f7:6a:d1:75:57:dc:69:7b:97:4e:bb:a9:a0:
d6:81:42:a4:c6:21:22:04:bc:cb:d0:b2:50:f6:43:
bf:df:3a:72:b9:39:db:3b:4c:27:65:cc:93:7d:11:
d6:d8:21:91:d5:fe:b1:73:28:8f:74:e9:f9:85:56:
a4:ce:cd:04:1a:f6:24:b0:63:0b:bb:bb:df:6f:e4:
85:23:92:e4:b2:74:41:6f:fa:56:5c:46:4c:5f:55:
42:d9:0d:eb:96:23:b1:5c:c8:c0:39:ab:e6:96:15:
0c:4b:a2:7f:ee:f6:79:47:c7:77:ae:ad:67:6f:c1:
9e:8f:de:8a:80:0f:a1:3d:86:70:ae:f6:81:4a:a6:
c0:5c:41:5e:83:44:0f:12:60:ad:89:2c:d0:88:b6:
6e:e2:a4:74:93:af:52:94:75:e5:59:5a:7e:5f:28:
25:67:0d:5b:91:e2:ec:2a:f6:d8:07:f7:49:23:e9:
62:92:2a:4e:c6:4f:5c:fd:ee:88:f8:26:25:3b:8d:
05:dc:7d:a4:c3:bc:ac:fe:bf:bf:cd:6b:76:82:30:
4e:47:02:1f:de:21:77:18:be:16:5b:e5:d5:7c:8e:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3F:08:82:DD:C7:00:0A:27:66:9E:7B:42:3A:70:4E:9F:11:D2:02
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d4:6c:9d:29:65:a8:17:b3:4c:7d:f2:52:61:c3:61:5c:df:
cc:27:8b:6a:97:92:41:01:01:65:d9:57:b7:c1:95:50:4c:c6:
c2:f6:79:03:aa:09:4a:52:7e:b4:36:dc:0c:22:a7:15:6a:ed:
a3:d6:22:52:cf:2e:29:50:6b:b3:cd:0a:0b:7d:75:70:2f:84:
5b:6b:83:1e:32:60:02:2e:8a:2e:29:a3:f5:88:9c:08:a7:20:
17:ff:e1:35:2d:ca:62:23:43:7d:35:0a:d4:74:f6:f8:cf:b5:
79:f2:be:10:70:77:09:04:2e:c4:89:d8:ef:84:72:1f:7a:34:
50:95:9a:a4:55:e9:3e:90:f6:5a:6d:ee:95:93:f5:a2:0c:db:
1a:11:c7:cf:43:48:4e:3a:bd:46:71:c1:23:bd:cb:fc:0d:45:
09:f6:c6:cd:4d:f3:be:ba:48:27:cf:a9:63:fd:85:c0:8e:fd:
11:7c:55:37:d5:5e:0b:6c:a5:91:04:87:3c:82:7b:47:15:d2:
2b:68:87:73:80:74:44:3b:f8:36:18:f7:7f:69:7c:af:df:1e:
4b:2b:8b:b7:21:65:9b:d7:96:91:bd:ac:30:c6:83:36:46:d1:
1a:20:52:1c:ec:ba:5b:91:13:72:4c:af:8c:b2:77:7a:ce:3e:
5b:ea:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:39 2026 by rpki-client