Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: 8YN05HPDM2cw4slemZItCSRluJqUNNwjHuZDc9lXucY=
Subject key identifier: 98:2A:AB:EE:C4:7A:3D:AC:50:CF:53:25:BC:A2:0D:46:C0:A2:DF:2B
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 019D98BD38B9B731EC1F646730021557E37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 09E3
Signing time: Fri 17 Apr 2026 00:00:30 +0000
Manifest this update: Fri 17 Apr 2026 00:00:30 +0000
Manifest next update: Sat 18 Apr 2026 00:00:30 +0000
Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: /9pnGI0/gmkjdwOPPKIsZ7C7AgBGJUbvTJBMzeNnMRA=)
2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:38:b9:b7:31:ec:1f:64:67:30:02:15:57:e3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Apr 17 00:00:30 2026 GMT
Not After : Apr 18 00:00:30 2026 GMT
Subject: CN=982aabeec47a3dac50cf5325bca20d46c0a2df2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:25:7b:db:3d:91:92:2a:7c:94:2d:2d:0c:
e0:8d:1e:58:0c:f0:e3:56:9f:db:af:0b:d6:05:39:
63:d3:aa:9e:6c:32:e7:15:89:78:24:4f:99:07:26:
a0:67:e0:f5:a2:5c:25:29:b7:01:47:94:6c:83:11:
58:e2:4b:43:cd:ac:50:18:60:23:f7:63:14:a8:ac:
15:c2:7f:fc:cd:76:d8:ac:a6:30:9f:ec:4d:97:3a:
2f:66:d3:4b:a6:1a:da:f6:2d:2a:d6:82:ec:07:8f:
01:50:2f:d4:aa:8a:d6:52:19:5b:de:d5:81:5f:8d:
5d:4e:8f:30:19:5d:69:96:89:e6:b5:03:d4:0b:ff:
4d:18:d3:3b:1e:c5:69:5f:0d:8b:52:1d:6d:53:32:
4a:8c:d8:83:a0:b4:a1:5f:96:fe:4d:3e:41:b5:02:
ee:c2:7a:0d:48:45:2d:f4:fa:5f:5d:99:e9:cc:22:
06:27:ca:bc:fe:82:e5:36:25:2f:5e:93:a7:ba:e8:
87:3e:9c:68:53:e3:84:21:36:fd:fe:60:6a:be:9f:
3e:2b:12:ad:c9:98:69:70:67:de:14:f6:25:fd:6b:
96:3a:6b:6a:ed:14:0e:7f:51:08:d6:41:02:52:f5:
23:ef:5a:17:4e:d4:d1:02:57:4a:ef:91:73:29:1c:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:AB:EE:C4:7A:3D:AC:50:CF:53:25:BC:A2:0D:46:C0:A2:DF:2B
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b1:eb:cc:10:9d:ed:92:38:63:95:d1:8f:1a:f4:8f:34:0c:
94:4a:67:48:23:bb:3c:4e:62:b2:27:e9:cf:a4:c3:2c:5a:f5:
55:85:93:ac:51:3a:9f:3e:26:3e:98:c8:24:c8:f0:2f:a4:7a:
75:5c:13:f6:76:33:a3:9c:e1:05:63:bc:09:22:01:1d:8d:46:
20:15:d9:63:74:64:87:2d:65:cb:44:1b:4f:d6:ac:e7:59:08:
7b:94:68:a3:21:78:58:cd:4a:41:b8:e4:1b:ad:da:3a:d9:02:
15:bf:40:38:45:ca:2b:ec:53:9b:80:ea:38:8e:11:2b:74:14:
55:bf:28:cd:f6:b9:4a:a5:fc:da:79:6e:db:67:16:f4:63:71:
e5:12:84:a4:08:62:5c:29:65:78:03:a6:ee:ff:66:e7:d9:c0:
ae:73:b4:57:d4:3d:c8:6b:e2:0b:32:b7:4a:b6:cd:3b:6d:8a:
46:cf:6a:40:67:a8:80:6b:f1:f6:48:ca:58:64:a0:9e:05:87:
ef:04:4d:12:09:74:22:ff:b1:7b:83:bb:13:45:31:f5:b2:45:
a5:dd:c2:1e:cd:6e:b8:c2:33:ab:e1:8e:54:64:bf:39:af:7e:
61:9d:be:66:c7:0b:f1:1a:0b:d1:37:05:93:8f:22:f9:2b:d8:
b1:46:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:09 2026 by rpki-client