Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: 16ruzkcTkC0WtI1+Whak7Qs4HYIi8BybpLD0PjmTRIw=
Subject key identifier: B4:1C:CA:A8:1D:4B:00:84:16:8E:D8:EB:DC:83:E0:35:09:A7:EA:BC
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 019D9A74871979A9B45330F1382C45013E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 0CDC
Signing time: Fri 17 Apr 2026 08:00:21 +0000
Manifest this update: Fri 17 Apr 2026 08:00:21 +0000
Manifest next update: Sat 18 Apr 2026 08:00:21 +0000
Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: RS+bGgUpByIy3Jp2cW6ZkzWtnjLKRRANp+/cA11ewNA=)
2: sa-VxIHIFXVHRevvOB_tVdLXAUg.roa (hash: AJ35gvwbYj3xRDQgq3Eq1FxMxn80Yq+XvR8L/G/XxyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:87:19:79:a9:b4:53:30:f1:38:2c:45:01:3e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Apr 17 08:00:21 2026 GMT
Not After : Apr 18 08:00:21 2026 GMT
Subject: CN=b41ccaa81d4b0084168ed8ebdc83e03509a7eabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:04:26:1c:7e:82:9b:62:c3:14:fa:d9:38:32:
f6:d3:ad:c0:2a:bf:56:2f:56:a9:45:d4:0a:96:07:
3f:80:b8:c3:6e:49:1f:9d:36:d6:a9:9d:31:a0:01:
14:a4:c1:d7:05:74:7c:af:99:1b:02:cb:b1:05:c1:
f4:1a:c5:a3:d9:dc:5b:41:7f:75:2c:fb:69:8e:31:
a3:ac:0e:22:d0:57:b1:cc:4e:37:7b:90:d1:06:bd:
77:8e:00:23:c7:23:4c:d1:7a:05:03:36:71:ff:0a:
2f:85:3a:50:99:23:4c:20:b3:95:c6:27:ce:74:dc:
3a:32:83:9a:c4:d2:71:57:93:5f:bb:10:fd:4d:96:
de:da:e8:f9:3a:6f:c9:37:30:db:ce:9d:19:6e:ce:
23:d6:95:48:cc:38:19:8d:ba:c6:7e:5e:77:62:95:
2a:5f:32:42:99:01:0d:99:83:69:5f:77:ac:36:19:
70:b1:87:08:96:4c:f7:88:23:a2:ca:67:cf:e2:2a:
46:8e:9f:fb:60:dd:47:2c:18:ca:04:ab:3b:fa:7e:
20:2f:04:b0:2b:a1:b9:0f:e3:0a:2a:27:1e:f2:1b:
46:d1:d9:7e:da:49:c3:58:17:73:07:21:9b:14:46:
34:e8:ed:36:05:32:3d:c5:fb:6e:e4:20:90:f8:9f:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:CA:A8:1D:4B:00:84:16:8E:D8:EB:DC:83:E0:35:09:A7:EA:BC
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e0:69:48:fa:21:4b:70:63:f3:ee:9a:91:bb:20:b5:b1:4f:
34:31:66:03:f1:c2:5f:ef:bf:ea:e5:1e:85:48:e3:f1:df:81:
df:39:59:03:16:58:eb:6f:29:1e:bb:a1:41:ba:77:f3:2d:9d:
e9:aa:1d:82:17:2f:04:82:fc:96:66:47:6d:ea:62:1c:c1:67:
74:bb:f2:95:8d:5d:1f:75:9d:b8:9e:97:b3:4d:fb:70:2e:65:
b8:69:eb:c8:96:1a:0e:ea:d4:70:2e:b9:35:cb:f9:1c:54:0a:
ea:5d:bf:7b:63:fc:32:f0:19:05:42:d2:75:5c:51:93:7a:1a:
e6:c2:c6:6d:12:bf:a5:78:08:d2:04:b6:05:43:90:41:ee:d9:
fd:7f:bf:83:58:70:83:6c:2d:ee:93:98:14:9d:d2:78:b6:3f:
35:b7:e3:db:8d:a9:14:e7:65:a3:44:09:86:dd:b0:df:f9:7f:
86:a1:30:0b:82:f8:0c:50:d7:ce:28:63:7b:ed:8c:98:1c:b6:
4b:2c:e1:54:ac:38:10:b3:31:7a:d4:c2:41:21:60:5e:bd:c2:
2e:fc:90:81:b2:c7:5d:1a:5f:df:2b:c3:8e:ac:e0:b9:04:78:
a8:fa:7a:2c:44:43:40:a0:61:2d:25:3e:cd:d6:43:ad:9d:ec:
69:0f:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:02 2026 by rpki-client