Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: PjIAM64CBjrVej3wAzRZClXO8WuXqDwg5H/8+VghDr8=
Subject key identifier: C9:21:20:E5:F0:EF:66:31:2E:1A:FE:86:34:A5:08:34:87:E4:66:A3
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 019EC3375D968BDF215A84EA2389EF5AD2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: A1
Signing time: Sat 13 Jun 2026 23:00:45 +0000
Manifest this update: Sat 13 Jun 2026 23:00:45 +0000
Manifest next update: Sun 14 Jun 2026 23:00:45 +0000
Files and hashes: 1: AhAcdKgAbaxev6WZheq94rPVhy4.roa (hash: jnz0tuvjSI9nchLY2GePdtWDuCFuuGK4nahWThqEMJU=)
2: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
3: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: tNPS8npNP3zi+76MdHmoS3XlECokRf1Fao28t1YxqkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:5d:96:8b:df:21:5a:84:ea:23:89:ef:5a:d2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: Jun 13 23:00:45 2026 GMT
Not After : Jun 14 23:00:45 2026 GMT
Subject: CN=c92120e5f0ef66312e1afe8634a5083487e466a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0a:5e:94:3a:b7:9e:91:3d:9b:b9:97:51:df:
65:7a:c3:36:49:97:7f:87:90:20:2b:66:24:03:84:
1b:db:d6:8f:3f:44:dd:40:17:a3:01:ce:11:fa:dc:
40:11:2b:99:82:73:d5:94:e8:e3:03:8a:d1:22:21:
21:2d:c0:74:ca:a3:05:9f:16:69:d2:9d:8e:76:0d:
87:3c:d9:dc:86:69:41:a9:fe:bb:a1:e7:bc:e4:4e:
5a:36:cb:aa:84:95:2f:db:fc:a7:46:e0:2c:d1:fb:
23:9e:b7:a4:7e:19:42:d6:61:cc:1f:1d:ac:f0:63:
a7:f6:33:13:f7:78:47:d8:ef:76:4a:ba:8b:38:04:
e7:d7:32:e1:81:a1:ce:1d:15:2b:46:77:9c:05:06:
76:5f:26:a9:46:08:82:63:a4:b7:88:a6:93:6f:2c:
76:97:d3:10:b7:08:3d:5e:6d:de:c2:3e:28:7b:52:
8a:a9:ca:a5:b0:b6:a1:fb:ed:d7:1b:88:99:1a:fb:
c5:4b:a1:ad:1d:7a:64:fb:af:54:e2:91:8a:8e:b2:
49:6c:4e:a8:f1:81:e8:64:34:c8:57:a5:b1:00:cd:
43:d2:58:cc:11:45:ee:bf:8c:96:f8:07:18:51:54:
7c:95:88:4d:f8:52:6b:17:78:c6:11:ef:d8:80:fd:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:20:E5:F0:EF:66:31:2E:1A:FE:86:34:A5:08:34:87:E4:66:A3
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:30:3c:14:c3:69:92:d5:01:9f:11:a1:76:ef:1b:78:a0:69:
6d:4d:ff:d9:4a:1f:ee:fd:4a:84:3b:1d:91:31:48:70:1e:ce:
72:d0:69:17:c6:d2:6b:35:3c:8a:10:c1:36:1a:5f:4e:fb:e0:
be:ff:0e:c9:28:74:25:fa:36:98:89:48:3c:d9:1b:27:65:23:
98:17:c8:34:59:00:3b:15:ec:f4:40:95:f2:03:a9:b2:81:86:
a6:91:bb:27:ae:c2:a6:36:3a:6e:77:11:62:2f:2a:d3:ba:aa:
94:ae:46:7e:da:08:6f:42:12:52:99:fb:57:97:24:38:75:6f:
5d:76:69:4a:41:a1:1c:5f:25:76:0a:c8:b4:fb:d5:7e:79:a9:
ea:8f:a5:e6:12:56:92:89:8a:c4:d5:83:88:48:d9:1c:02:99:
c4:d5:9b:d2:5e:71:d4:f1:e9:cb:47:54:1b:97:48:ff:17:f0:
31:ce:27:3b:3b:2b:a1:4e:1e:c7:57:5d:5a:5e:a7:20:7a:6c:
50:d0:8a:5c:5f:ed:24:62:0d:37:3b:d5:ce:23:cb:67:ec:88:
85:e3:ae:ce:56:b0:0b:2b:43:90:f4:68:d4:d1:d3:e2:2b:f3:
f9:2b:cd:bc:29:58:ae:fa:89:90:42:1f:70:d1:2f:25:8c:38:
4b:e9:0d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:37 2026 by rpki-client