Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: Q4Aw23evNHuCpeU6KeUN+UGxhVOo1tSveK1iL6mIPLg=
Subject key identifier: A5:74:46:EE:33:22:31:D0:40:16:D2:FA:E6:BB:56:5B:21:2F:85:E7
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019FAB99EBC9C65BFEB0F9AC73853C9A4E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 02:00:18 +0000
Manifest this update: Wed 29 Jul 2026 02:00:18 +0000
Manifest next update: Thu 30 Jul 2026 02:00:18 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: sEull0Flv0cwJNLN/bw9wotkya6q5b7yDwYl44ClXs4=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:eb:c9:c6:5b:fe:b0:f9:ac:73:85:3c:9a:4e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Jul 29 02:00:18 2026 GMT
Not After : Jul 30 02:00:18 2026 GMT
Subject: CN=a57446ee332231d04016d2fae6bb565b212f85e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:2b:12:ba:12:6a:82:f6:10:f8:cd:9a:7f:
86:68:2e:11:7b:93:e2:da:f3:ec:ae:d9:90:e9:c3:
f6:e5:f1:aa:de:cf:7d:10:5d:9e:2f:68:0e:5a:8b:
e9:d9:2e:fb:dd:18:e5:13:5f:a4:e5:d4:88:b0:ec:
d4:cb:99:bf:e1:f5:7e:cb:db:bc:92:f0:94:4a:24:
cd:25:0b:eb:96:67:6e:ab:84:ea:c3:c6:40:2b:ec:
0a:95:03:bc:7f:a0:9f:0e:40:96:7d:63:4f:34:74:
7c:40:da:44:ec:08:f1:1c:39:0d:59:60:76:b7:83:
dc:f4:1c:f7:57:ad:d9:20:27:f6:5f:80:0b:10:94:
fa:2d:2f:b8:31:a3:70:99:ae:fb:89:b6:f4:9a:76:
8a:f8:f3:6d:fe:f9:ee:39:83:81:84:78:2d:db:ee:
66:be:a3:2f:ca:a1:ce:56:41:9f:71:21:a1:93:41:
3d:dd:51:9b:89:35:b0:f5:c1:5a:09:26:66:0e:11:
18:26:ca:e7:8f:cf:fc:56:a1:25:73:0f:17:b5:e8:
bd:a8:eb:95:2c:7b:32:39:7a:14:66:7a:a8:2f:3e:
ff:06:4f:27:0d:d8:7c:68:8c:84:38:46:ec:6e:5d:
70:17:b1:77:08:8d:c1:c2:91:96:00:19:a2:ba:02:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:74:46:EE:33:22:31:D0:40:16:D2:FA:E6:BB:56:5B:21:2F:85:E7
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:60:26:be:67:7e:82:91:91:dc:b8:fb:c3:65:0c:e6:96:ec:
f2:d4:30:a2:00:0c:9a:15:33:6b:da:6e:ba:2f:cf:be:12:2e:
cc:15:7e:be:b2:41:84:d5:f4:c2:06:ac:a6:09:7f:37:d7:d1:
2b:db:ba:86:5c:06:b3:c0:e7:ea:4d:15:17:4f:92:1d:0f:24:
04:9c:3e:4f:8f:40:f0:02:76:df:28:13:9a:08:9d:29:76:bf:
10:2b:7d:b7:e6:19:c2:90:10:82:85:76:44:d1:80:02:72:cb:
a1:71:fe:65:22:ad:76:59:0e:40:31:92:76:39:c3:20:0e:29:
6f:65:35:8c:e8:24:af:3e:91:27:d1:98:82:58:24:05:8a:55:
b7:58:c5:f0:8e:87:ce:ed:4f:05:b3:6d:08:8c:9b:a7:46:dc:
b2:81:aa:97:9b:c6:65:88:91:8a:2d:63:eb:90:61:dd:8a:8b:
72:5b:ca:a2:63:28:9f:e1:91:21:64:64:92:f7:b7:e0:84:9c:
26:a3:04:f2:08:08:bc:e6:fb:7d:d2:fc:6c:f4:89:2f:f2:65:
d7:1e:d1:4e:cf:85:98:15:1c:e3:43:57:2f:45:10:e6:ab:53:
60:c0:50:42:ca:aa:1a:47:ca:c6:18:35:ce:5d:d2:22:c5:aa:
93:2f:76:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:04:01 2026 by rpki-client