
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: 8FO7KuSI9cy8VQJ7Qm/5P6PsRfAtEq5n+a9xDEBOuz0=
Subject key identifier: FB:0A:7C:3D:48:73:D6:A1:3B:C4:C6:55:33:B4:5D:53:E3:9B:BE:93
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019EC3370A740741C364D60E6FC20E88EC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 1966
Signing time: Sat 13 Jun 2026 23:00:24 +0000
Manifest this update: Sat 13 Jun 2026 23:00:24 +0000
Manifest next update: Sun 14 Jun 2026 23:00:24 +0000
Files and hashes: 1: 8gHT_lp19vgQo-djG0BRf5eWAE4.roa (hash: Vche9wHHqKAp5aWnmI6EY8xEE+HzW3Pog606cPmiZs0=)
2: B_EncHrDvifkg2nCGMklUrOo0Ug.roa (hash: xcZDiT2m5lq0I5LG6Q29RjfmHvdiXJHBI+h2WR1rfvY=)
3: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: qjwfiZsg+jGr0h+iFxiBgj7Yl3TC2kE+XfASqXl4uO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:0a:74:07:41:c3:64:d6:0e:6f:c2:0e:88:ec:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jun 13 23:00:24 2026 GMT
Not After : Jun 14 23:00:24 2026 GMT
Subject: CN=fb0a7c3d4873d6a13bc4c65533b45d53e39bbe93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:d9:1f:5a:ef:b3:83:1a:a2:84:e9:c2:12:
0a:ee:17:c9:3d:f4:03:20:40:77:33:37:c3:9a:60:
ce:4d:21:8e:37:70:31:b4:6a:38:8e:57:c7:86:59:
1c:e6:1a:33:c8:e9:d5:93:c8:0b:18:3b:57:d1:1f:
5f:07:83:b3:e2:fa:a1:91:47:25:49:31:be:ca:38:
e4:4d:77:a7:a3:70:56:49:cc:75:d8:42:a9:eb:5b:
b8:7b:c4:d5:6e:2e:19:e5:22:40:1e:6f:66:71:ec:
b5:e6:1c:a3:b7:2b:e5:a3:73:8f:45:e4:b7:76:dc:
44:f3:48:5e:2a:60:18:7c:e1:c4:ac:a1:24:b3:a0:
85:42:75:a4:b4:27:ca:f8:08:9b:8a:d4:93:1d:10:
39:0f:a1:00:22:c3:be:7a:86:9c:be:81:0c:05:e6:
22:c5:a7:8f:f1:68:ab:06:90:29:03:b4:41:d1:c6:
eb:bf:bc:3f:7e:f4:2e:8e:41:74:cb:7b:b6:96:c5:
39:8d:b6:db:d3:40:3c:6d:4a:96:ac:34:32:33:a7:
03:b7:62:5e:90:b0:43:92:0e:20:a1:38:17:13:58:
5d:74:20:58:cc:69:a2:cf:1f:74:9c:c5:f4:60:68:
78:9a:a4:ec:ea:48:06:be:3f:95:17:49:1d:71:a2:
43:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:7C:3D:48:73:D6:A1:3B:C4:C6:55:33:B4:5D:53:E3:9B:BE:93
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:17:07:f4:b2:db:90:36:5b:cf:92:2c:8a:3b:76:83:43:67:
94:fa:c0:3e:3f:81:56:22:3a:2b:44:a6:19:f5:1c:da:ef:33:
b8:41:c5:ea:ab:cb:43:f8:01:f9:c7:ec:2c:0f:73:de:0c:22:
f7:91:d4:14:2f:a3:66:58:67:e7:7a:9e:f8:5b:8d:ba:92:67:
39:69:bf:43:43:86:dd:fc:d1:db:c0:37:d5:90:aa:bf:19:97:
89:e4:33:36:7d:47:f0:19:bb:75:55:30:c5:b5:ea:a9:ea:4b:
65:9c:f3:59:fc:c8:d5:a9:a5:33:b2:d0:7d:ec:fe:41:51:36:
1c:1e:22:7f:1e:bf:a0:d6:7a:b0:d5:23:f3:45:7d:c9:2b:d0:
4d:4c:ee:74:42:1f:fe:52:e0:48:9c:8f:d0:c5:36:a6:f3:18:
58:51:66:72:92:4e:2e:b8:c2:c4:70:19:e2:16:c3:5c:e2:31:
ef:de:d5:f2:7e:0e:ce:2a:ad:19:5f:8f:fa:54:c1:47:34:c1:
f2:b7:cc:d4:43:9b:90:58:4d:88:cb:4d:c6:bc:1c:cc:56:8b:
d9:1e:5c:57:31:53:75:72:56:3d:2d:c7:68:18:6f:37:ea:16:
00:b6:7b:37:2c:84:ac:a6:5a:0d:a2:49:7d:a1:79:38:b7:48:
0d:93:ca:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:45 2026 by rpki-client