Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: yTXOBVeaO1ASn+Lk2SBIxmDHtZBgitSdA9SezqUz+zQ=
Subject key identifier: 85:CB:87:CA:0C:94:54:E0:6C:8F:18:F3:BB:F1:AB:0C:B2:27:71:E3
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 01A0D15BE03E39B99CA514077FA07A3DB739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 0B8E
Signing time: Thu 24 Sep 2026 03:00:54 +0000
Manifest this update: Thu 24 Sep 2026 03:00:54 +0000
Manifest next update: Fri 25 Sep 2026 03:00:54 +0000
Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: 0mDmatr+YY3nlgYEQjIxIA3Vv62LSP+a6rsN8R9Na3o=)
2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:e0:3e:39:b9:9c:a5:14:07:7f:a0:7a:3d:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Sep 24 03:00:54 2026 GMT
Not After : Sep 25 03:00:54 2026 GMT
Subject: CN=85cb87ca0c9454e06c8f18f3bbf1ab0cb22771e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:70:81:4c:ce:58:6d:6a:a6:dd:3c:9b:a6:
fa:76:a7:01:0a:4e:44:a1:09:91:d1:4d:e7:78:f7:
54:17:a7:8a:2f:42:fb:4f:3f:24:51:77:59:d3:77:
cb:33:47:1f:9c:7f:6a:98:e7:07:a5:5c:38:67:46:
1b:22:65:2f:a2:bc:95:3d:82:dc:a7:73:1e:88:6e:
7c:0b:a2:67:19:1c:e9:57:43:14:eb:51:55:08:42:
62:16:a8:30:af:69:ee:49:27:1a:db:91:b9:24:74:
47:47:ec:be:6a:31:a7:7e:fb:54:13:c5:d4:64:3c:
87:6e:40:b0:dd:0a:aa:f6:a5:94:10:78:64:70:4d:
0e:82:01:d3:e2:5e:af:2a:73:52:d3:0f:d9:44:1e:
1c:43:17:92:e7:e2:11:ec:bd:39:e0:f6:3e:b5:bf:
3b:6c:eb:1c:9d:04:2d:0f:5f:d1:1d:76:08:ac:9b:
34:13:49:cb:ec:25:b9:e4:3a:df:45:da:53:3e:59:
62:c5:10:6e:82:20:51:bf:29:7c:90:87:c5:24:23:
2c:83:1f:c4:65:87:63:94:0d:32:83:cc:1b:14:f1:
9f:c3:57:22:e3:9b:e0:b2:fb:3a:43:ef:91:95:54:
42:86:a7:aa:80:8a:45:da:58:7b:88:9f:58:29:f2:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:87:CA:0C:94:54:E0:6C:8F:18:F3:BB:F1:AB:0C:B2:27:71:E3
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:34:26:01:06:59:2f:b2:d6:e4:51:16:aa:f3:99:8a:0f:57:
8d:ed:e7:65:44:2a:9e:08:77:88:8d:82:52:39:d2:a9:46:ef:
5b:d0:19:1c:b3:e2:3f:85:74:66:fc:ae:97:43:94:49:1f:d3:
b0:28:7e:c4:23:48:4a:d5:6f:fa:ba:75:a9:61:7e:70:79:c2:
c8:8c:c6:0b:5c:51:1d:3c:7d:75:3f:5f:14:45:0f:59:ee:3f:
89:db:1c:b2:42:aa:4d:c3:0b:4a:d0:92:da:69:c9:bf:bd:0f:
ae:43:c5:8a:6b:96:94:fd:4e:95:ed:5d:04:b7:6f:ff:9e:ea:
a2:b2:df:d6:f2:83:54:be:91:0c:15:75:1e:7a:bd:2f:c2:66:
b3:99:ff:12:60:45:7e:16:59:cd:f9:79:ca:a1:7d:54:2c:a1:
6b:5c:7e:50:1b:a0:02:e2:bd:f8:21:a4:a2:79:7a:4d:14:f2:
a0:3d:75:2b:ab:88:97:a8:b1:a0:18:25:37:7d:d5:4d:9a:8c:
1f:2e:7b:bc:cf:05:fa:94:47:50:81:81:a2:d1:ad:da:7e:01:
37:7d:ea:8f:80:42:97:31:68:d4:85:5b:a2:3d:cf:3c:c9:e7:
d6:8d:2f:c4:6c:90:d5:8c:69:fd:f2:b5:ee:3c:e2:a3:59:a9:
cc:94:2e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:46:17 2026 by rpki-client