Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: /9FrccpyXCvhuZPOJlLxPbFQSvb7EC7F91YXJH0xJMo=
Subject key identifier: 33:38:FE:69:A6:78:46:94:9E:16:8D:87:A7:FB:CE:7E:3B:81:80:28
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019D97E2591C54213C4F9779E74FFD269401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 18CB
Signing time: Thu 16 Apr 2026 20:01:26 +0000
Manifest this update: Thu 16 Apr 2026 20:01:26 +0000
Manifest next update: Fri 17 Apr 2026 20:01:26 +0000
Files and hashes: 1: 8gHT_lp19vgQo-djG0BRf5eWAE4.roa (hash: Vche9wHHqKAp5aWnmI6EY8xEE+HzW3Pog606cPmiZs0=)
2: B_EncHrDvifkg2nCGMklUrOo0Ug.roa (hash: xcZDiT2m5lq0I5LG6Q29RjfmHvdiXJHBI+h2WR1rfvY=)
3: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: G6TVvB4J4+WDVPAhpf1IMEtXM3HqfYpn6nUPuZrn67o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:59:1c:54:21:3c:4f:97:79:e7:4f:fd:26:94:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Apr 16 20:01:26 2026 GMT
Not After : Apr 17 20:01:26 2026 GMT
Subject: CN=3338fe69a67846949e168d87a7fbce7e3b818028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:5e:aa:4c:71:6e:08:c8:67:98:92:d1:ff:
c2:91:0e:9f:36:57:f3:69:1c:08:9f:90:58:55:8b:
37:03:63:c7:71:1e:0f:08:d0:22:b8:1f:75:dd:a7:
6b:e4:de:88:7f:49:c9:8b:12:d7:ee:6c:f2:4e:26:
a7:38:26:4b:36:16:60:45:3a:9c:11:14:bd:9b:d0:
2b:5e:5b:19:e9:be:76:90:2d:74:5d:f8:a7:4f:82:
0e:75:01:ad:8a:f2:6d:96:ca:c6:09:5c:3e:8e:1b:
79:f0:4e:8a:80:4b:38:2f:e5:c5:cf:e2:32:1a:ab:
1f:59:42:ad:35:ba:10:a8:23:0f:00:8d:ec:a8:82:
94:68:cc:ab:1e:e0:7b:99:6f:6d:6a:f1:43:cf:98:
fe:5b:17:de:99:c5:a6:6d:92:8a:a4:bb:c7:21:43:
76:04:b5:94:84:5b:23:ea:4c:a1:25:b0:05:f4:fe:
74:c0:6e:cf:4e:8f:d0:76:a5:4a:23:93:be:62:81:
c6:79:78:b5:0a:a1:5f:a3:9a:66:48:a0:f6:50:d4:
63:16:d5:c0:cd:7b:5a:b0:92:80:44:06:63:b8:d4:
8d:21:d6:29:fb:78:d0:e3:9f:34:b9:61:a4:4e:87:
fb:9a:ba:35:b3:74:dd:02:24:45:3a:2f:68:7c:06:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:FE:69:A6:78:46:94:9E:16:8D:87:A7:FB:CE:7E:3B:81:80:28
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f1:44:3b:b9:7c:f3:09:16:32:b1:f9:bd:81:80:a2:ba:f7:
3a:d7:9c:5b:38:cf:9b:8f:07:cd:a3:c5:c9:0a:23:ed:3d:d8:
5e:e1:7e:43:bd:14:c2:09:b2:46:1d:9a:99:7f:5c:50:f3:43:
88:15:78:fc:60:07:ee:60:dd:cc:a0:fa:56:9a:01:93:49:ab:
e2:2b:80:27:23:d5:0b:92:7a:b5:05:23:c7:34:30:02:7b:08:
60:64:75:be:be:e4:fc:fe:65:81:55:f6:1d:36:29:dc:c7:05:
d1:66:c8:2f:ad:a1:80:26:36:49:78:50:33:97:67:0c:17:9c:
76:bd:b2:de:ce:93:e1:de:66:23:fe:1b:5a:5b:e7:b3:43:0a:
17:19:ea:0b:7c:4b:cc:98:65:fb:fd:db:68:e8:5d:4c:5c:f5:
e2:f7:f1:e2:0e:cd:32:14:c4:e7:4b:04:55:1a:24:0a:e9:b7:
60:56:da:8a:61:72:31:0e:06:65:d9:6a:83:29:83:d7:0e:53:
9e:56:af:a1:ea:45:75:ae:77:bd:df:d9:c2:13:15:bd:18:91:
18:b9:1e:1a:f4:77:3a:84:37:11:98:e4:f1:10:22:ea:fe:3d:
58:9a:14:84:5e:72:e6:6f:10:c4:b2:1c:d7:a1:89:5d:56:91:
f6:e2:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:24:16 2026 by rpki-client