Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: fr34lftl+vDd0I9e0wU18VzW+wT9ZpyPRg/2c/8yyfQ=
Subject key identifier: 72:3D:53:D7:D1:62:D9:EF:9C:79:BD:71:73:74:B8:DD:07:C7:C6:00
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019D9886E5913EEAD6764CB880FF610F9259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 23:01:10 +0000
Manifest this update: Thu 16 Apr 2026 23:01:10 +0000
Manifest next update: Fri 17 Apr 2026 23:01:10 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: DqdgUoLgOsnieUYbwpY8IRDUouB4vdkdUp7opNttt34=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:e5:91:3e:ea:d6:76:4c:b8:80:ff:61:0f:92:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Apr 16 23:01:10 2026 GMT
Not After : Apr 17 23:01:10 2026 GMT
Subject: CN=723d53d7d162d9ef9c79bd717374b8dd07c7c600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:c7:12:61:c0:16:34:c1:9d:85:56:61:51:
36:4e:9c:dc:80:5b:f8:18:d0:a3:41:44:e6:f4:60:
ad:fe:09:ff:80:3d:2b:43:e9:3f:38:68:de:f7:1c:
ce:1c:6f:44:d7:3c:3d:83:57:ca:36:e9:f7:c6:d2:
3e:a5:fd:ef:9a:92:2f:bf:01:bd:4b:33:41:9e:27:
d1:8a:fd:f4:35:47:51:6e:db:88:3d:2b:04:22:cb:
f2:65:9a:59:2a:8c:7b:ea:3d:45:1f:4a:68:ce:54:
08:ba:90:f4:e0:ca:9f:8a:12:c4:e1:b2:a3:ba:62:
7a:6d:12:d5:ea:27:14:ee:36:67:42:76:4f:56:b5:
f9:1b:20:e2:94:07:dd:3d:e0:c4:90:89:ef:e8:b1:
89:3d:49:4c:a3:24:78:06:f6:e8:94:f5:d0:49:30:
17:30:ce:1c:0d:89:15:3f:a6:b4:ee:72:0b:e6:ae:
6a:03:64:45:47:15:ce:f6:b5:c6:dd:01:02:3e:09:
ca:2b:44:02:67:04:2d:93:34:b1:37:b6:90:ed:4e:
51:b4:b5:a2:9e:77:ec:27:95:d0:61:65:3e:f8:89:
83:1f:80:2a:4a:b5:a2:20:49:e7:3b:f8:e8:28:8c:
a4:54:46:de:7f:9d:55:44:8f:09:7f:c9:59:b1:34:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:53:D7:D1:62:D9:EF:9C:79:BD:71:73:74:B8:DD:07:C7:C6:00
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a5:fb:cd:a6:bb:07:b3:77:5e:c5:fe:b4:3f:e6:7a:65:a9:
cc:c6:86:aa:57:64:58:c8:68:0a:69:cd:ae:ef:43:8f:a7:b3:
29:63:ef:c1:1f:8c:ac:70:fe:cc:1c:3d:ef:76:e3:a4:ff:bf:
42:cc:69:e9:46:fc:ad:1c:2d:c1:cd:66:aa:64:55:d8:bc:51:
45:fa:6c:f3:23:a7:b1:73:3f:0a:f8:2e:f2:27:c4:93:08:13:
1c:12:e7:84:e0:ee:ce:81:79:72:dd:02:cd:77:0c:4a:58:86:
26:3b:c3:83:89:65:12:7a:19:a1:e2:8d:fb:52:b8:6f:b9:1b:
ea:8a:cc:9f:14:01:ab:24:7a:7c:be:f9:73:0a:d6:a9:78:8f:
b7:6d:36:e3:f2:78:a7:74:7a:b4:35:d8:0c:2d:a9:50:1a:19:
ac:75:8a:c1:78:53:b8:b4:1e:35:e0:f3:d8:43:d4:37:1b:73:
82:55:2b:e3:c6:2b:5e:4b:c8:08:b4:3d:49:36:a4:f5:67:92:
95:40:84:59:c9:1e:30:e9:c1:d8:31:7f:e6:12:bd:57:a3:b5:
a2:1c:ab:ae:54:ee:b4:b2:f5:63:5a:d3:0f:fa:43:9a:4b:f5:
c5:c7:7f:64:4d:f8:36:23:91:8b:cf:48:70:15:c1:c7:4f:d6:
0b:04:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:44 2026 by rpki-client