Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: EOOU3sqm/0w4NKPivTsQeYtCdAkcipQMWtnH258rK54=
Subject key identifier: E3:EA:CB:2C:1E:50:B9:5D:91:A8:68:ED:89:9C:01:5B:19:94:78:03
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 019CAB6BC5D3EDACC010FA55F330AD1FB0C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 13F3
Signing time: Sun 01 Mar 2026 22:01:32 +0000
Manifest this update: Sun 01 Mar 2026 22:01:32 +0000
Manifest next update: Mon 02 Mar 2026 22:01:32 +0000
Files and hashes: 1: aMxhZsLMDx304AXjnZldJIQi_VU.roa (hash: nX4KFrnvKm65Zf0OrETssJJWMj+/5dAoLpEa4nDLRE4=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: tFRLbcck7RzE4SIYwy6a4kiGQf38aXQkmvpTHBSMh+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c5:d3:ed:ac:c0:10:fa:55:f3:30:ad:1f:b0:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Mar 1 22:01:32 2026 GMT
Not After : Mar 2 22:01:32 2026 GMT
Subject: CN=e3eacb2c1e50b95d91a868ed899c015b19947803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:16:e0:14:1b:3c:20:29:88:13:b3:fb:25:
1c:32:a9:72:9a:08:75:9a:21:fc:86:a7:79:c2:1e:
fb:12:7c:c3:f0:c9:fc:af:41:be:a2:41:81:98:04:
b4:58:e4:c7:eb:82:b6:f5:ba:38:60:12:73:e1:9d:
6d:62:db:0b:5d:6b:b3:ab:12:a8:6a:8d:1e:e2:ca:
b9:31:ec:ff:97:4b:4b:58:4f:80:df:af:a9:b2:b1:
71:9e:d3:97:a9:f0:04:df:54:a9:39:b9:87:a2:c4:
ba:2f:95:33:8c:a0:10:e7:a9:03:2b:f6:ee:8b:94:
3b:56:30:12:dc:fa:a9:f4:55:51:e9:82:b7:3c:71:
c0:0d:e3:93:2c:e5:29:59:51:9c:cc:bd:d0:1e:f6:
e5:42:54:ad:53:7d:4f:05:7a:f6:12:9c:07:f3:dd:
17:b4:13:5c:15:3a:86:ca:99:09:43:c4:d9:f6:1e:
3b:df:6b:76:97:b7:e6:d9:63:5a:77:73:8e:12:bc:
a9:fe:7f:92:40:46:89:b8:c7:f3:6a:3e:0a:fc:ae:
79:ce:aa:7e:d8:d1:d5:db:3f:27:38:c7:b9:01:9c:
6d:ea:2e:12:2b:46:b2:ce:6e:2f:4a:c0:92:46:16:
11:77:88:90:2c:d7:51:7d:3c:1d:82:7c:ae:84:36:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EA:CB:2C:1E:50:B9:5D:91:A8:68:ED:89:9C:01:5B:19:94:78:03
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fc:ca:78:2d:12:2a:4b:57:1b:13:f3:a3:81:61:f3:9a:84:
e0:4d:dd:b3:87:9f:1c:f4:21:78:44:c7:f7:8d:de:09:a5:e1:
2d:fd:be:43:ac:29:2b:bb:35:51:a9:7a:21:f1:55:bb:3b:77:
6a:a1:c4:29:59:ee:d5:e2:fe:5c:7f:f2:be:b5:b7:4e:67:15:
c9:4b:8d:5c:5b:71:69:4c:7c:12:2b:16:0b:5d:15:b2:13:6b:
d5:3e:96:79:11:8d:e0:c3:e4:29:ba:f1:76:e8:84:0f:da:a7:
c2:6d:c9:97:38:b1:05:80:e1:d8:ee:b0:96:f9:df:e9:10:69:
98:62:e2:b9:d7:82:ab:09:a2:19:3f:67:59:fc:79:77:b3:c0:
ba:9d:f1:a4:a9:dd:84:11:1b:76:bc:d9:dd:ef:59:55:1c:c3:
86:a5:b7:dc:c3:ae:3d:e7:d5:94:cc:c6:03:81:1e:49:b0:7c:
bf:6a:25:dd:4c:70:27:cd:46:f7:c2:53:41:88:44:3e:2f:c9:
ca:35:91:c4:1e:1e:1e:86:60:64:b8:bd:f0:ec:6f:85:2e:e0:
d9:6b:ee:87:e6:e2:fb:f4:10:d1:e9:99:4d:bb:fe:93:05:24:
0a:ab:61:3c:d6:01:fe:94:19:b7:79:52:be:a3:d1:a9:39:c6:
ee:6a:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:28 2026 by rpki-client