Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json)
Hash identifier: Cdoq+FRuz/BYlqy7CsN4297AHC5ljZkl3+tYBmcdLXQ=
Subject key identifier: C3:A7:54:BE:82:5B:70:18:3D:94:20:E2:32:AE:9A:17:46:EE:13:48
Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03
Certificate serial: 019CAA584EC8EAACBF0FA07800B1D5E80920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 17:00:39 +0000
Manifest this update: Sun 01 Mar 2026 17:00:39 +0000
Manifest next update: Mon 02 Mar 2026 17:00:39 +0000
Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: aIvviDk4ndelOPx6YTnZ3/VIYpcXrIuOHATzNu4tkjk=)
2: psNr_hTMl_I5KVL4YqNClQzsa0U.roa (hash: iOzy4wHtJLtwL9zu93am3QAJzNv3kq9Sr3PhqUJ5iL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:4e:c8:ea:ac:bf:0f:a0:78:00:b1:d5:e8:09:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03
Validity
Not Before: Mar 1 17:00:39 2026 GMT
Not After : Mar 2 17:00:39 2026 GMT
Subject: CN=c3a754be825b70183d9420e232ae9a1746ee1348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:02:a7:f2:7f:84:02:40:71:9e:6f:48:f0:
8d:cd:a0:c7:bb:77:0c:83:19:81:e0:08:c7:d2:2f:
1d:c0:95:4f:e8:91:2a:14:92:8b:7e:e9:e7:ca:f3:
95:95:08:1b:aa:99:fb:4c:5f:ae:fa:e4:97:2f:4d:
96:af:8e:4d:50:cf:26:d1:08:aa:2a:b9:1f:73:1c:
b2:c8:35:86:76:09:4c:99:fb:cf:0a:4a:a3:a9:e1:
27:8a:52:d1:45:77:2b:78:b1:c0:ad:9b:66:b7:bb:
e4:ec:25:14:18:d4:e4:06:65:dc:2e:8c:df:33:fe:
98:dd:8d:45:50:d3:8c:d7:ab:24:21:e2:fe:1d:e9:
bb:86:aa:69:82:2f:70:d9:15:9d:23:0f:bb:80:36:
ff:5d:c5:a8:e8:c2:ab:0d:30:21:c1:8f:d4:ca:2d:
7e:2a:7c:c1:b7:97:0e:d9:e2:c2:82:12:2c:4c:37:
d0:27:78:da:b4:8f:01:26:1f:08:00:0c:b3:be:21:
66:15:38:ec:35:0f:21:ee:0e:68:d1:bf:51:e5:c8:
9f:9d:48:98:3c:93:19:db:d9:73:cf:4b:7d:b0:a4:
ca:13:d5:db:0d:f9:9f:fc:36:cc:00:f2:e0:04:0b:
e0:03:12:e1:3c:97:6d:81:90:50:3b:ed:f6:a5:24:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A7:54:BE:82:5B:70:18:3D:94:20:E2:32:AE:9A:17:46:EE:13:48
X509v3 Authority Key Identifier:
keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:cb:42:cd:df:01:b7:ed:d5:0c:c3:02:a5:6f:03:db:dd:
69:17:67:db:f8:94:5b:dc:20:8c:29:ff:1a:6f:3d:27:c6:55:
4b:55:c0:bc:6b:4e:85:3e:79:74:5b:5d:f3:3f:5c:52:e0:6b:
65:bd:3a:05:dd:c3:98:64:5d:c2:04:52:55:22:ec:d4:d8:61:
5a:a8:2a:41:70:43:2b:3b:ae:ef:9b:6f:0e:c5:be:eb:05:24:
28:91:b3:51:72:34:d2:4f:12:75:17:94:44:ca:59:e8:f1:e3:
f7:d8:e3:33:24:06:49:9d:72:ac:d2:c2:3f:d7:10:8d:1d:e1:
30:ed:66:e8:76:07:29:c8:63:36:73:d3:d4:86:ba:1b:e6:dd:
3f:eb:b9:eb:60:88:56:5b:97:1b:9c:0d:1e:14:26:4c:5d:51:
c8:bf:b7:ca:d4:fd:12:95:91:fd:f6:44:1f:54:27:a3:e9:51:
71:cb:c9:a1:cb:3c:49:9a:7a:4e:f0:d0:48:9a:ed:9c:bd:3b:
c5:1f:bf:ec:5f:8d:8e:6a:52:fa:6c:69:4f:eb:7f:72:e1:f4:
9d:c1:28:d6:05:b1:7d:1a:2a:27:c0:07:8f:32:89:fd:3c:6d:
c6:11:96:36:fe:c2:a5:98:3f:ae:53:8a:d3:0d:34:06:49:57:
f3:3a:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:18 2026 by rpki-client