Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: yMdxOJbv6n5NkOJLecVNz0JIShWxuwxccatnFS2ajgY=
Subject key identifier: A9:D7:FB:75:BD:71:31:D6:13:02:D5:B1:52:83:65:EB:00:28:43:E5
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 01A124D49ADA2B421C9B4F4E58817163D70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 03BD
Signing time: Sat 10 Oct 2026 08:01:15 +0000
Manifest this update: Sat 10 Oct 2026 08:01:15 +0000
Manifest next update: Sun 11 Oct 2026 08:01:15 +0000
Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: yi8eynnWG+xKp4gkAY6sxdKaCjajaDvOSxbpNdA+NDY=)
2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:d4:9a:da:2b:42:1c:9b:4f:4e:58:81:71:63:d7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Oct 10 08:01:15 2026 GMT
Not After : Oct 11 08:01:15 2026 GMT
Subject: CN=a9d7fb75bd7131d61302d5b1528365eb002843e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:e8:44:d5:09:f1:7b:28:ce:dc:7c:3e:9d:
e0:d8:69:0d:4e:0c:6f:7a:ee:e8:0e:02:99:4d:ad:
a8:4c:5f:44:19:e2:87:8f:fe:4d:97:66:65:b9:66:
c8:fc:1e:80:42:ab:8d:f2:bf:e5:2b:f7:3a:bf:2f:
dd:70:4e:06:c3:20:e4:8f:8d:a7:84:a9:be:24:01:
17:94:7e:ef:9d:f5:23:f0:c9:dc:03:8e:a6:89:18:
58:44:42:52:bb:43:2d:42:a1:7f:70:d5:4c:66:bc:
1d:2b:5b:f8:86:5b:a4:38:1b:17:11:a7:11:c6:19:
6d:0d:52:28:d1:65:ad:bf:84:fb:75:4b:46:4a:b8:
55:98:e6:22:4f:11:06:e0:fc:99:cb:4b:09:9d:01:
3a:7c:8f:d7:2d:71:e6:04:f2:36:0b:2a:f8:4a:bc:
39:05:07:64:6d:bd:d8:2d:28:98:32:1c:89:97:8a:
3e:f1:42:76:34:40:77:b7:2f:30:c2:18:0e:d0:a6:
10:36:5d:e7:05:d2:1d:e5:39:e8:cf:fd:65:44:22:
87:50:b9:be:8d:47:ec:8a:a5:d3:9e:4d:de:ce:84:
bf:79:ef:31:c6:07:34:33:6b:50:a4:54:9c:15:38:
f7:ec:28:b5:bc:4a:44:ac:b1:fb:b8:96:25:41:c1:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D7:FB:75:BD:71:31:D6:13:02:D5:B1:52:83:65:EB:00:28:43:E5
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:d1:6c:fe:62:61:eb:9f:d2:ba:70:f7:13:71:b9:99:14:46:
91:8e:a7:48:f5:76:6f:06:01:f0:9a:97:d4:85:bf:e5:12:55:
09:e8:8e:40:3a:da:72:75:f2:e5:5d:14:70:65:8d:d0:73:37:
55:ce:2d:41:ce:8d:21:10:ab:d5:96:1f:5d:bd:f6:e7:84:ff:
7c:d3:04:78:29:1c:56:bd:2a:69:2f:84:67:76:2d:7f:8b:f8:
7b:c0:b8:d8:d2:b7:4b:66:e7:fc:31:4d:f1:aa:8f:9f:1c:25:
84:e3:98:68:3b:a4:f6:88:d8:3b:0d:c0:9b:45:e3:d1:01:aa:
1c:10:f7:c1:09:e7:43:53:57:f5:b4:f4:87:19:2e:3f:9d:e4:
75:f9:e1:5c:c6:b3:24:2b:0d:87:76:03:ac:52:0b:2b:14:ee:
91:a9:be:a7:6f:51:b6:4e:fd:f6:03:10:92:03:a8:8d:25:e3:
e8:77:45:d9:b1:6c:bf:a3:e4:b6:9a:89:69:d0:fe:5f:b8:ad:
f8:95:24:85:a3:44:0b:37:ea:2a:e3:5e:db:c5:11:be:af:57:
f1:6a:b9:af:0c:b3:05:0f:df:57:56:53:c5:ef:1b:8c:f5:bf:
86:ad:fa:a9:0d:3f:ff:8c:1b:97:44:15:40:a4:53:94:46:e8:
e1:fa:7b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:55:46 2026 by rpki-client