
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: FRJ2Jy4e5qcqP/zllrqIRJB0GbpZZN97DLndvW70Sf8=
Subject key identifier: D8:50:E1:A5:C1:14:3E:76:05:3A:E7:7A:96:2B:67:1D:21:81:1C:D8
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 019EC2928FDEF5588741019B3B373A56E05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 0281
Signing time: Sat 13 Jun 2026 20:00:45 +0000
Manifest this update: Sat 13 Jun 2026 20:00:45 +0000
Manifest next update: Sun 14 Jun 2026 20:00:45 +0000
Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: ENK5BHV2kMJ2LAKcOzhPNaaI/ADavepQKyyl9CFKEc4=)
2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:8f:de:f5:58:87:41:01:9b:3b:37:3a:56:e0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Jun 13 20:00:45 2026 GMT
Not After : Jun 14 20:00:45 2026 GMT
Subject: CN=d850e1a5c1143e76053ae77a962b671d21811cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:fb:75:67:92:46:c6:84:2b:98:d3:20:0e:
71:8c:83:8c:f1:bd:80:a9:ac:ca:00:4e:b5:d1:8e:
62:7d:ac:d1:14:03:48:67:5d:8a:d3:51:2d:d2:91:
4c:7f:9a:5d:84:c9:9f:0f:8f:2e:2d:69:c8:0f:f6:
63:33:da:ea:88:00:ef:7c:ad:6a:a7:7d:ec:82:7b:
c6:29:73:b9:10:c9:cd:79:1c:3b:45:b6:a3:85:69:
9c:5c:17:cc:e0:93:1d:09:24:31:02:40:73:44:24:
bb:47:98:5a:bf:9f:78:58:bf:c9:97:a8:fe:6d:ff:
15:a7:f9:e2:a4:98:5d:b2:8d:48:9d:5a:db:43:85:
c0:ac:6f:f6:69:ad:06:d5:3e:19:50:d3:6f:2b:f1:
44:96:a5:72:f2:83:11:6c:c3:fb:52:e9:23:47:0c:
3b:ff:74:41:ea:df:13:b3:a0:e1:e7:ad:85:d7:d1:
91:df:68:43:08:44:0d:1c:16:22:48:29:d6:6d:08:
14:de:00:29:f9:f8:1f:ad:74:c2:e9:c6:be:38:5e:
c2:38:39:d8:8c:d7:bf:90:b9:bf:63:6e:f1:23:0a:
35:9c:e8:dd:8c:6a:e8:8a:bf:11:6c:26:89:33:54:
1d:6c:84:e6:6f:1d:7d:ab:7a:bc:5a:c3:ff:6d:2f:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:50:E1:A5:C1:14:3E:76:05:3A:E7:7A:96:2B:67:1D:21:81:1C:D8
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e0:b6:b9:f1:cf:e5:f1:6c:68:be:3d:f9:48:c4:45:b3:29:
b1:a4:7e:8b:d3:53:52:90:e1:da:34:13:44:ef:37:52:f1:b0:
6e:29:69:b9:8d:ac:88:12:3c:be:ac:2a:5b:41:23:f6:4a:43:
e3:55:18:e3:25:36:e2:f6:bd:98:26:4c:18:e2:81:4b:96:0e:
1f:39:d3:f7:cc:46:27:6e:54:08:c2:d6:3a:26:cf:b4:c0:10:
b9:f3:74:af:2d:75:c3:cc:f0:35:90:49:64:e8:99:5d:0c:5e:
ac:01:82:6b:ff:cc:d6:43:1f:4b:0b:ed:34:40:88:d1:ab:2c:
b8:e2:e4:05:ce:39:45:89:9e:a2:6f:18:6d:66:2b:d0:3a:a2:
e7:40:1e:74:49:10:f7:5a:04:db:eb:ff:83:c6:0a:21:86:07:
69:c6:0d:98:c8:69:e1:01:3b:39:5d:c7:bd:8d:b8:6e:6e:99:
e0:34:e0:b2:26:f9:54:f7:15:d9:bb:cf:62:b8:db:e9:6a:19:
82:f7:b0:d7:35:df:0a:e2:de:8f:c4:d2:06:4c:db:b9:c9:73:
64:a1:d9:46:a0:9c:c9:dd:f0:a2:77:09:17:3a:09:aa:ff:1c:
ab:c4:68:70:84:2a:fa:ae:b1:c4:66:b7:21:68:d3:0e:30:51:
61:08:b2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:55:38 2026 by rpki-client