Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: L4WNXiQSox1FNJFtM+Qj72d864VX0RVt3uuwLAwLPsc=
Subject key identifier: BD:F1:5B:5A:22:20:AF:5C:35:5B:35:9B:44:91:F5:49:88:67:9F:66
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 01A0C40D8333F0AE6291EB3812F7192F4D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 13:00:14 +0000
Manifest this update: Mon 21 Sep 2026 13:00:14 +0000
Manifest next update: Tue 22 Sep 2026 13:00:14 +0000
Files and hashes: 1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=)
2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: bbVVpFYcgbZMt9czItQ1FyLg8SPdJQTy3QPtAMjFw80=)
3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:83:33:f0:ae:62:91:eb:38:12:f7:19:2f:4d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Sep 21 13:00:14 2026 GMT
Not After : Sep 22 13:00:14 2026 GMT
Subject: CN=bdf15b5a2220af5c355b359b4491f54988679f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:7a:1d:62:c2:ff:14:52:13:a3:96:f4:87:
de:73:2d:0b:e7:b3:38:d7:f8:41:e2:e4:c4:f4:0f:
67:c3:d0:e0:66:59:2d:14:d5:41:da:ff:22:46:97:
f7:22:10:4e:2d:59:c3:ab:63:0a:a6:fd:d1:5e:44:
41:f0:0c:5b:57:da:0a:ef:8b:6e:36:53:f3:2c:36:
bf:ae:47:3b:6a:ae:8c:f1:4a:97:91:08:1b:99:ab:
89:8d:a5:8b:b6:a0:ee:28:27:b4:28:9c:bb:f5:81:
8a:c9:37:80:5e:a4:78:db:91:85:e9:b8:0a:d8:a0:
9a:24:d8:7b:b1:82:d1:9a:9b:4e:87:82:7f:71:02:
6c:84:b6:59:d1:db:32:c9:1c:42:87:8e:2f:a7:10:
04:a1:29:80:8e:a9:48:2f:4e:20:3b:f1:de:f5:7a:
00:d4:70:81:db:79:32:b1:1d:c6:a4:af:2b:3c:fb:
1a:f3:eb:3c:ba:93:3d:12:29:b7:4e:e8:7f:3c:dd:
0b:d4:6e:c8:25:f8:49:2d:22:4e:9d:19:11:36:2e:
2e:e2:bf:1b:d4:81:ce:40:0f:e8:2b:12:11:7a:5f:
da:30:a0:85:b5:77:1b:55:f4:3b:12:08:f8:c9:4a:
d1:de:57:89:bf:ab:49:d8:9b:1c:f3:31:cb:c3:9c:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F1:5B:5A:22:20:AF:5C:35:5B:35:9B:44:91:F5:49:88:67:9F:66
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:8c:d4:1b:05:d8:d8:a9:9d:02:2b:ec:54:c4:cf:60:17:78:
8c:1b:31:98:8a:6b:93:78:0d:8a:f4:11:c4:34:aa:eb:7f:62:
84:01:27:63:f8:f3:13:97:21:b6:0a:73:26:94:a3:f0:06:9c:
78:c5:b3:62:c0:c7:e5:af:d1:33:ce:c1:38:c6:dc:89:34:57:
35:ec:da:af:b2:5e:77:ca:e3:ff:99:bd:67:8d:ce:65:f4:27:
39:a9:36:e8:58:91:bf:4b:af:c3:61:8e:4f:35:8d:33:e0:3a:
f5:24:7d:15:90:25:e2:51:98:dd:1a:a7:8f:9d:05:16:7c:44:
2f:ec:03:d5:34:39:8b:77:e9:92:20:b5:74:6e:48:78:db:d1:
dd:02:52:da:83:e1:f9:94:0a:5b:37:4b:aa:e9:53:77:88:85:
49:f9:c1:fb:68:46:ba:57:8c:01:5d:be:76:d0:a9:53:07:2e:
ed:a0:5a:79:d0:89:9f:e7:ab:cb:d9:c6:58:36:09:2b:2f:31:
2e:18:8f:47:81:95:e3:b2:9b:9a:ec:21:ca:95:c8:79:fd:da:
3f:98:4a:ae:16:ac:1e:a2:4e:b6:1a:d7:74:31:0b:15:2b:87:
97:ef:35:ca:1c:00:f5:20:a5:97:65:c3:c2:f7:38:85:44:9c:
27:9f:79:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:27:30 2026 by rpki-client