Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: PYzO8LhyJ3cGISaq48Fj9CPQ/5fafoE8gURp2XgJ6qE=
Subject key identifier: 87:57:2C:88:3E:23:01:38:95:66:8C:20:48:D2:7C:DC:A7:35:9B:B5
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 01A0C58E68D3E60B9AD6C51C897361913F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 20:00:39 +0000
Manifest this update: Mon 21 Sep 2026 20:00:39 +0000
Manifest next update: Tue 22 Sep 2026 20:00:39 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: SnKmbVbAcWiweH32CWssGllYjuzYGhxGDemg6VotniM=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:68:d3:e6:0b:9a:d6:c5:1c:89:73:61:91:3f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Sep 21 20:00:39 2026 GMT
Not After : Sep 22 20:00:39 2026 GMT
Subject: CN=87572c883e23013895668c2048d27cdca7359bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:38:3b:e3:d2:f1:ad:88:1a:07:a5:aa:5b:
68:4c:13:16:7a:a7:7d:73:d8:34:8a:8a:de:ff:54:
2c:d3:33:98:9d:50:5e:c1:86:8b:02:76:36:f7:70:
07:5d:46:0f:bb:ed:f0:62:42:2b:83:b2:2f:14:54:
45:06:46:df:98:10:64:4d:d2:ea:27:73:44:e5:f7:
0c:98:f5:e3:37:fb:c1:11:d1:68:91:5c:5b:93:7e:
71:aa:33:a3:ab:cf:96:24:53:1d:52:8a:02:66:cb:
b3:22:c7:1b:72:59:78:5b:93:14:97:fd:b0:a1:87:
00:16:07:bd:4c:da:98:74:77:f5:a8:64:a3:f2:25:
84:06:c5:f3:13:d1:f0:81:ad:e4:50:b0:1e:c7:dd:
5d:f6:f1:f3:7f:90:cc:5e:11:c7:83:40:68:94:4d:
db:bb:8f:d6:de:8e:45:4a:fe:39:22:f7:5b:67:f1:
fc:a3:7e:47:a4:64:84:5b:ee:8b:40:67:62:56:ab:
51:33:d3:6f:5d:66:a6:eb:4b:04:96:74:8b:ac:a8:
17:83:7c:a0:a1:18:23:48:eb:22:27:e1:0e:05:30:
36:3f:63:e7:40:93:c6:6c:10:fb:01:6a:f7:74:5c:
91:cd:b8:94:87:f5:8f:54:69:7d:fb:03:55:a6:d3:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:57:2C:88:3E:23:01:38:95:66:8C:20:48:D2:7C:DC:A7:35:9B:B5
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:58:ed:b5:aa:3b:4d:10:ad:1f:c8:6f:89:7c:0c:12:55:94:
94:2a:c7:b8:67:e1:b6:9a:c4:b9:73:15:26:0c:b4:be:c9:c7:
1c:bc:40:e0:e6:91:5c:85:47:fb:1b:5b:b1:bc:af:62:44:50:
b6:b5:67:7b:4c:b2:2a:04:8e:ce:a1:af:b6:4d:21:1d:fb:61:
cc:56:90:dc:f7:08:d9:f7:60:ce:0a:1e:ef:86:df:b2:7c:be:
5c:58:a7:3f:09:a2:01:c6:ac:08:ba:69:1d:1d:03:e2:98:e1:
01:50:c0:3f:b4:87:64:e2:59:67:04:d5:b4:c8:a9:71:f0:a3:
84:2f:d4:d5:da:ef:1d:82:16:0e:cd:62:8c:f3:39:0b:fb:ff:
ed:37:8d:f6:c7:42:18:37:5b:ec:01:c0:bc:7a:a2:44:5b:3d:
f1:f7:be:e7:ca:80:9d:8c:a1:0f:75:7d:f9:0c:cc:6c:22:76:
41:97:41:b2:70:a2:6e:cd:2e:1a:17:4d:f0:a9:fe:fa:fb:34:
b1:6e:2b:0d:6b:e7:aa:7d:a3:5a:d0:a9:b1:bd:c5:0f:b9:cd:
9b:90:fe:56:cf:ae:5b:b4:e0:58:3c:1b:e9:72:1e:68:2c:22:
1c:0d:c0:c1:22:f6:ce:ab:45:fa:ee:9d:20:ca:5f:91:08:e5:
5f:35:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:52:52 2026 by rpki-client