Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: WV7ydP4daNI/DKYhpXYJCMS6vStaumZy1P/asTLIQ4M=
Subject key identifier: DB:18:75:6F:6B:2D:9B:9D:2B:1D:50:27:25:6E:D2:65:B9:A1:E0:AD
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019CACEBDE1F571D288D0FEFE71F6765A996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 05:01:04 +0000
Manifest this update: Mon 02 Mar 2026 05:01:04 +0000
Manifest next update: Tue 03 Mar 2026 05:01:04 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: 3miQEfuOK8be1Is2B1Lg/XzxNvqEkEPM86CfkimeKtk=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:de:1f:57:1d:28:8d:0f:ef:e7:1f:67:65:a9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Mar 2 05:01:04 2026 GMT
Not After : Mar 3 05:01:04 2026 GMT
Subject: CN=db18756f6b2d9b9d2b1d5027256ed265b9a1e0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:39:de:31:78:6b:4e:ec:a3:93:ee:29:55:
7c:5d:02:d9:aa:22:bd:e4:ff:b3:d5:9c:8a:29:f3:
07:ed:e9:93:9b:9d:ee:06:0a:e8:96:e7:ac:fd:5a:
79:3d:c6:1d:1b:f4:59:cb:c8:59:89:8e:07:6f:f7:
44:2c:ff:ba:8f:ab:1f:a8:c4:53:78:72:79:ac:bc:
12:4d:00:cd:40:2a:64:3d:73:01:ed:b2:4b:3c:45:
85:fe:e9:14:b3:27:70:bc:f6:46:61:31:49:6f:c0:
b9:88:5f:f7:a7:3f:13:eb:0c:48:f1:02:18:cd:8b:
e9:cb:e4:56:ad:84:15:44:e2:28:ff:58:8b:05:21:
d4:3e:3b:53:fd:0c:0f:ed:69:63:12:40:c8:1e:94:
25:34:6a:52:e3:62:f5:26:ef:5f:20:95:c8:bb:d0:
93:1a:91:cf:04:2c:a6:a0:5f:3f:ed:5f:4b:5b:44:
2b:80:2f:69:7f:64:05:3f:5f:f8:6f:ff:69:c1:42:
d3:07:5e:74:02:d6:03:87:ed:e7:48:46:b7:9b:8f:
1b:c2:cc:df:ff:98:c4:1e:ca:34:d7:57:5f:10:49:
a7:81:55:9c:15:55:1a:45:6f:ab:7e:5f:48:14:de:
8e:a3:f8:4e:91:60:0a:3e:d5:43:1b:5f:e7:fa:0d:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:18:75:6F:6B:2D:9B:9D:2B:1D:50:27:25:6E:D2:65:B9:A1:E0:AD
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1b:fb:03:3a:37:69:2d:35:c0:3a:99:99:8b:b3:82:8e:80:
5c:f8:c6:5a:d6:0d:2c:c8:10:42:cd:61:42:e5:bb:d9:71:16:
e9:23:b7:c7:fc:e6:96:d2:7b:7f:31:96:21:a4:4a:fb:4c:9e:
b1:3d:70:6d:8b:c8:6b:50:32:9d:dc:83:e8:63:53:3e:8f:31:
a1:f2:c4:1a:43:20:63:ad:27:52:e8:93:71:1f:eb:64:d2:ef:
c2:ed:6c:14:d9:ef:97:18:9f:a5:f1:51:35:39:42:bb:6f:f9:
1b:99:3f:83:d1:7b:4c:dc:64:a4:34:df:ea:ca:41:28:6a:87:
d7:8f:dd:7d:d3:7e:ee:54:36:0b:f1:d6:8a:21:7a:64:62:1a:
94:c9:b5:13:8a:d4:c3:fa:92:94:5e:11:88:38:6b:8a:f5:63:
46:84:9c:87:65:82:d0:21:fd:71:ad:37:e4:84:55:36:ff:ba:
8f:2a:63:bb:f8:6b:b1:f4:11:40:ca:ef:c4:28:c7:e1:45:2d:
6f:6b:d3:c6:b8:e5:c2:b2:b0:96:ec:f1:7a:f5:02:a8:0b:06:
71:96:37:ed:4d:e7:3f:0d:76:f2:b7:f6:ad:10:87:c8:fe:10:
61:d5:8b:7d:b2:90:94:dc:6f:27:32:e0:de:0c:95:ec:ec:e4:
72:9b:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:34 2026 by rpki-client