Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: TSkagCJIKmAASDmq+JeIQNnVcWnhnk+J/uOxPsBglrk=
Subject key identifier: 60:58:9E:E7:53:98:B4:CA:20:3F:B6:E5:1C:19:18:BF:A9:D7:7C:E6
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 019CAAFD6E74263DEEF12595BBA9ADE49B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 0C60
Signing time: Sun 01 Mar 2026 20:01:01 +0000
Manifest this update: Sun 01 Mar 2026 20:01:01 +0000
Manifest next update: Mon 02 Mar 2026 20:01:01 +0000
Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: 2kIqDMT255tb2wDQ80Pu848KPFv2HIAjkHB07WZyKzM=)
2: sa-VxIHIFXVHRevvOB_tVdLXAUg.roa (hash: AJ35gvwbYj3xRDQgq3Eq1FxMxn80Yq+XvR8L/G/XxyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6e:74:26:3d:ee:f1:25:95:bb:a9:ad:e4:9b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Mar 1 20:01:01 2026 GMT
Not After : Mar 2 20:01:01 2026 GMT
Subject: CN=60589ee75398b4ca203fb6e51c1918bfa9d77ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:38:c1:1c:0e:1c:ff:3b:65:11:04:d2:e0:f9:
7d:a1:43:28:7a:29:ce:00:84:95:aa:c2:8a:90:ef:
43:fb:96:37:05:ae:a3:6c:ef:e5:73:55:bd:7a:6d:
9f:96:2c:45:86:d3:3e:1f:73:e8:d8:8a:f1:41:1c:
f7:ae:1e:ca:2d:ed:75:4c:81:b2:ba:8c:3c:10:de:
05:48:2d:b9:30:06:f0:41:22:8b:66:73:db:18:2f:
a3:da:7f:f0:fa:4d:1d:06:ae:74:d9:76:17:65:65:
df:91:9b:96:48:05:07:f8:d7:b3:d5:d3:c0:c2:b4:
14:64:74:f2:62:c2:83:c4:e0:3f:2b:59:82:b0:c6:
80:0e:d4:a2:63:06:c3:5c:8a:78:fd:9c:61:96:18:
c1:2f:8f:6e:c6:09:63:16:21:b4:28:c1:f2:12:1f:
e8:a0:b1:78:0d:d9:87:96:f8:9f:74:d9:fa:e3:6a:
eb:c2:4c:6b:a0:ec:8e:13:c0:bc:ed:1b:cf:11:7e:
de:6c:cb:38:95:5e:1c:12:78:2e:b2:63:88:23:50:
b0:55:98:16:06:0d:aa:93:36:6d:f3:aa:4c:81:3a:
57:de:f0:00:19:f7:12:89:31:2f:84:30:0f:57:64:
64:58:82:83:1f:95:32:43:d9:63:73:46:22:72:e8:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:58:9E:E7:53:98:B4:CA:20:3F:B6:E5:1C:19:18:BF:A9:D7:7C:E6
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:62:43:85:f7:83:96:68:f2:71:a2:c1:45:3b:d9:b7:18:f2:
e0:41:72:dc:eb:fd:f3:b0:5d:d3:17:7b:0f:66:62:f4:08:90:
cb:ec:4d:d2:d9:2c:86:c5:a4:76:8c:4b:cd:59:76:c2:87:ce:
cb:13:2a:eb:2c:37:ae:62:75:84:f1:79:ca:fe:9b:8a:b5:40:
0b:6b:34:73:29:ce:2c:67:ab:f2:78:ad:18:c4:96:13:5f:68:
4c:c6:a6:ee:e5:ec:df:87:99:7e:15:9f:07:45:ac:69:bc:88:
17:99:fb:0b:60:e5:f7:08:7a:23:02:2f:2b:d7:1d:d6:30:1f:
c2:19:02:96:33:98:d5:a3:08:81:dd:00:20:e8:a9:6b:b5:7f:
58:af:b1:4d:4c:90:95:0f:04:35:1e:11:5f:74:24:a9:5a:a2:
52:b3:ae:76:72:0c:a5:63:1d:21:b0:86:9c:74:b7:25:a4:03:
bd:71:cd:78:fb:52:d6:0d:7f:bb:34:39:8c:e4:45:4c:1f:99:
78:6c:d2:c7:ed:3c:40:83:9a:4d:78:e4:cd:bc:4f:4c:53:52:
89:b9:2f:48:8a:9f:1c:58:4d:0a:03:f6:29:e4:63:58:45:f6:
93:82:54:86:25:29:bb:ca:1c:cf:9e:a2:e2:80:4c:48:ca:5d:
25:17:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:12 2026 by rpki-client