Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: 1xtskKT/E9SZhqibf++HVa1Q6d8LzfR1OQ/GJvHPv1Y=
Subject key identifier: 60:A5:B7:6F:BB:44:BF:86:7E:2F:FE:A3:C7:BF:29:24:35:14:8A:C2
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 019EBFFEF1C9373A39A5F886C0A75AC758FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 08:00:16 +0000
Manifest this update: Sat 13 Jun 2026 08:00:16 +0000
Manifest next update: Sun 14 Jun 2026 08:00:16 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: GQac6Q3/gd8NiA0d8xrDh0XzCWcspOTx2A8lH09NDAU=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:f1:c9:37:3a:39:a5:f8:86:c0:a7:5a:c7:58:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Jun 13 08:00:16 2026 GMT
Not After : Jun 14 08:00:16 2026 GMT
Subject: CN=60a5b76fbb44bf867e2ffea3c7bf292435148ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b7:5e:70:cb:85:1f:2e:11:5e:f6:78:0a:a2:
eb:8d:c2:5d:28:1f:78:b0:22:b9:d2:34:e3:80:f3:
93:19:cd:10:fb:e0:16:8b:06:5c:74:c8:eb:63:e5:
37:9e:7d:29:bb:55:35:4b:5b:9d:9f:b6:69:9d:02:
94:7d:57:eb:ca:b9:f1:da:e4:07:f4:cf:46:f4:f1:
a0:b3:20:51:24:7a:3f:7f:62:c6:41:1d:03:0b:3a:
08:15:ca:02:46:9c:a1:9c:a7:dd:0f:cf:61:94:52:
d4:f9:51:cb:3d:07:40:c5:75:45:7a:73:c7:19:f4:
33:6d:cd:76:a4:56:cd:b4:47:20:d3:b7:64:c7:53:
7c:15:73:af:6c:1a:93:6d:8b:be:c8:eb:ec:3c:09:
5d:0b:02:77:33:38:f0:80:86:bb:fb:50:d2:85:60:
bf:72:ec:3e:ec:a0:b6:25:fd:8b:8f:e0:0e:28:10:
66:b4:83:01:97:62:24:00:a4:17:89:24:5d:82:aa:
61:c6:eb:61:9f:97:d0:0d:dc:f9:ee:5c:6c:5c:8e:
a2:67:4f:57:8f:9f:a4:32:3a:d2:2e:51:e7:be:32:
ac:29:de:da:1e:4a:a7:f3:e1:a0:09:41:a3:86:70:
f0:50:47:1d:9d:0b:51:ab:bb:0f:2d:12:b1:91:81:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A5:B7:6F:BB:44:BF:86:7E:2F:FE:A3:C7:BF:29:24:35:14:8A:C2
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1b:3a:ff:f0:90:05:b9:1b:07:8e:5b:c7:8f:44:6b:75:25:
80:57:73:e2:bc:93:8a:66:a6:cf:46:41:ea:57:56:45:a8:d9:
ce:f6:5f:f5:0e:32:cd:d3:7e:88:94:3b:94:58:3e:a8:e5:51:
40:e3:9e:ea:7a:54:73:f6:f2:a8:13:a6:5c:32:dc:fd:84:e5:
76:92:c4:3e:6c:93:03:08:8b:6c:48:21:b3:b2:1a:c2:c1:96:
ba:d3:e3:ea:f5:6a:0b:2b:e6:8c:5e:a1:15:0e:16:7f:22:17:
30:c9:23:52:b1:c6:ab:ad:e2:e7:88:9e:9b:ed:5e:7c:20:86:
fb:69:3c:a5:cc:10:cd:eb:23:68:5b:66:e9:31:d4:86:67:61:
75:c4:75:45:8f:ac:61:7d:22:bb:8b:85:02:4c:14:e6:a5:2b:
10:bc:a6:b6:7b:80:df:e5:ef:3f:f3:60:77:ad:d6:fe:e8:1d:
fc:cf:58:47:3b:1f:64:b4:23:46:04:5a:ab:07:6a:4f:ed:4f:
99:11:51:14:71:b1:6b:c0:1a:82:f8:dd:00:73:0d:7a:ac:b6:
03:2d:8c:d5:67:f7:33:fe:e4:2c:8d:c7:37:8a:bd:01:4f:07:
c1:6a:a6:90:5f:68:4e:1c:18:e4:b3:9e:de:c8:9f:d2:9e:1b:
6f:d9:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:24:06 2026 by rpki-client