Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: XEbiVTImFiIVo85XQTnY06ttdfpsG4qm+MUhueAJsSA=
Subject key identifier: 7F:9E:7C:43:FA:71:6F:8B:D6:30:27:93:46:F7:39:50:CE:46:40:8C
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 019ED3BCFE5B8BEF5006E73142C875D7D39D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1966
Signing time: Wed 17 Jun 2026 04:00:38 +0000
Manifest this update: Wed 17 Jun 2026 04:00:38 +0000
Manifest next update: Thu 18 Jun 2026 04:00:38 +0000
Files and hashes: 1: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (hash: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs=)
2: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: p+bBxXwkrz1+Yth6MR2oXYnb2NX16KCSJKNXkgvt9kw=)
3: x2_izSBmWmdLTS9fNjX2mfjFlPM.roa (hash: 3ob8odmwEnrugyVikE+TbFdzGSmxmii1yJoYbGejTds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:bc:fe:5b:8b:ef:50:06:e7:31:42:c8:75:d7:d3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: Jun 17 04:00:38 2026 GMT
Not After : Jun 18 04:00:38 2026 GMT
Subject: CN=7f9e7c43fa716f8bd630279346f73950ce46408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:53:ae:3d:73:9c:33:57:34:d8:ca:ee:2e:
4d:21:c4:e2:62:39:60:13:6a:30:0c:b0:bc:a8:aa:
c4:78:a8:4b:6c:18:85:2f:1b:d1:18:36:a3:0c:49:
f0:2a:fa:82:45:e1:ed:78:19:1a:43:c1:53:3c:71:
cb:4a:cb:37:29:0c:3b:64:fe:82:89:d9:13:89:19:
c7:b6:0b:87:3d:8e:0e:cc:c0:89:01:85:71:c8:e6:
0f:8c:b2:0f:32:eb:09:fb:27:c5:05:4d:c1:a3:0d:
13:28:4e:90:fb:64:51:19:73:34:b2:41:6a:df:2c:
8c:3b:8e:fa:08:33:86:6d:c9:b0:86:a4:24:94:cf:
50:88:e7:20:55:59:8c:bd:fb:e7:39:aa:a0:32:10:
4a:4a:66:d4:5e:34:6e:57:f1:31:99:fa:46:f2:82:
c9:69:50:50:cf:b8:d0:6d:c2:2f:f9:5d:aa:52:54:
1b:9a:7b:f6:41:a2:4e:4a:6b:48:3d:f3:65:5a:0c:
ae:5e:99:3d:dc:d8:5c:96:4c:5e:bc:21:93:10:cd:
af:07:1a:34:23:85:5e:7d:f8:13:85:8c:5c:9f:6d:
32:30:46:7a:61:87:c6:cf:78:03:1c:2b:cb:66:d5:
21:98:6a:01:d1:2f:af:e8:7c:b2:3b:39:db:8d:a3:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9E:7C:43:FA:71:6F:8B:D6:30:27:93:46:F7:39:50:CE:46:40:8C
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3c:c4:5c:af:3f:de:c4:44:23:e6:1f:f3:0f:b6:51:85:5d:
41:ac:76:de:c1:84:24:c2:21:95:5d:96:d4:40:ba:db:72:d0:
e9:12:e4:df:13:de:75:7b:56:77:2a:90:72:e3:19:b4:39:52:
7e:b7:7a:bb:45:22:60:d2:69:6b:55:bc:bb:ed:8f:35:ca:82:
3b:00:ef:e7:72:37:5e:18:3a:3f:c4:12:36:9f:f0:e5:5b:c5:
75:ef:d5:46:c3:3c:b9:a1:df:d8:59:ef:bf:48:9c:d1:ca:40:
78:76:d5:ef:97:ff:f0:9f:5c:93:75:03:ae:f2:4a:10:91:d6:
fb:a1:15:35:63:6d:64:0b:e3:70:3a:2c:55:5b:07:95:2c:98:
ff:84:d7:c1:66:1b:17:f6:e2:5c:46:39:71:41:4c:a4:8f:a1:
a6:ab:8e:97:a3:b7:5d:8e:c1:ca:09:93:2b:ac:72:14:a5:ee:
99:0f:74:95:5d:9a:9f:6e:51:51:15:8c:c8:d2:26:ce:1f:3b:
0f:ac:b8:b4:db:96:16:7d:3e:2b:12:8b:94:45:b6:19:ee:c8:
b2:4d:dd:7e:cb:a9:9f:9d:2a:bb:b9:bc:87:7d:6f:42:b7:82:
30:67:55:9b:68:cf:11:50:60:bd:68:8c:5e:18:21:c1:95:d0:
66:d8:4c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:47:09 2026 by rpki-client