Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: xXYtVH0rTQp5XKjzSb1uNWlIbCni5dtjFhpe1aZ5148=
Subject key identifier: 32:9C:B6:08:82:0F:D9:14:7C:1A:BF:88:D8:2C:99:C0:42:CF:B4:E9
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 01A1DF832AB55C861147636D78C54ACBB5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 14:01:17 +0000
Manifest this update: Sun 15 Nov 2026 14:01:17 +0000
Manifest next update: Mon 16 Nov 2026 14:01:17 +0000
Files and hashes: 1: GtGl-BBvFFBcdpKpuiQYDBXCAdw.roa (hash: XYcOZyTHSxXyWm/gUhgJbJlvzkzekIENxOi+BKo3Qdg=)
2: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: iLzKRCEMKfLJTNsTD29aSngWZn+9FQo1PDas6tL6RUA=)
3: ksmZbu_Ev5mtmyfSpVmazpqHLGI.roa (hash: gVRPBsFn190BZ9dIdQ0DD2P8Y4JiaTTWSPtce3ldHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:2a:b5:5c:86:11:47:63:6d:78:c5:4a:cb:b5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: Nov 15 14:01:17 2026 GMT
Not After : Nov 16 14:01:17 2026 GMT
Subject: CN=329cb608820fd9147c1abf88d82c99c042cfb4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:21:c6:4c:db:00:14:66:84:68:2f:9f:fd:
1d:68:8d:88:a8:e2:2a:57:90:05:aa:fc:28:e6:09:
1d:1a:83:3b:fe:66:12:ec:7f:1c:bb:a0:0f:a5:d2:
6e:41:05:ea:de:28:86:6a:9b:b2:21:53:00:91:b8:
43:18:dc:2c:15:8a:e2:54:eb:c8:0d:c9:a2:bc:2b:
e2:e7:e9:d1:7f:cb:93:3e:81:ef:3d:8d:1b:a9:91:
01:b0:15:ad:65:15:58:8f:ce:1d:da:d2:99:ba:94:
d4:c9:8b:17:d0:17:61:0e:9f:c3:fa:d0:43:1b:06:
ec:a0:d6:6b:ba:62:12:d1:3a:c0:4a:e8:90:f5:a5:
cc:73:56:b8:e6:27:02:45:44:d2:84:cc:a3:3c:6d:
ad:84:7d:e8:40:d8:23:88:67:db:93:16:c0:92:79:
9a:a4:d5:d4:2f:e5:72:2d:02:eb:57:10:91:78:3b:
7f:31:c4:83:96:81:cd:e9:c2:8c:86:72:c9:07:90:
bd:26:a2:6f:28:ec:2f:09:fe:2e:04:06:08:d8:d7:
4e:c9:37:12:ac:13:25:eb:74:f5:e5:da:c3:c2:13:
53:24:04:75:65:63:2a:d5:b9:aa:8c:48:49:e6:27:
fa:21:cb:a5:ad:3e:5b:96:3c:75:bc:36:7f:80:26:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9C:B6:08:82:0F:D9:14:7C:1A:BF:88:D8:2C:99:C0:42:CF:B4:E9
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8a:17:fe:c1:3d:4e:30:d8:a4:b3:6c:34:a3:61:74:3e:76:
7d:52:f2:75:a0:c8:00:d3:39:0e:a7:c0:14:9d:7a:f1:09:8b:
f4:0e:5b:e5:ac:1e:9f:81:72:76:c3:dc:85:f9:73:49:ad:a6:
b2:a5:4f:55:3a:3b:c4:55:ba:69:00:c9:7a:cd:0d:78:37:c9:
63:8e:d1:da:56:ca:6b:1a:f4:b6:f7:02:83:64:49:30:d2:c6:
5f:85:59:81:a5:7f:4f:42:69:84:df:c9:db:17:48:0b:9b:99:
c1:c6:00:33:d1:b4:62:67:cf:77:df:ab:f7:df:f0:37:e8:4e:
5b:32:e4:e8:c8:2b:38:98:42:41:20:db:17:cd:df:b0:96:e2:
43:f1:4f:90:84:f6:4d:63:b2:54:d4:81:f9:0c:fa:a2:0c:09:
a3:f7:7b:e4:6e:a0:65:66:41:73:f9:3a:fc:92:5e:bb:1c:ba:
76:63:db:a3:db:0d:bb:92:6a:07:f7:9d:3c:cb:15:4c:be:8b:
bc:cc:35:66:e9:96:e0:39:e9:26:e8:40:79:bd:04:ba:f5:0d:
69:2a:0f:6a:f0:df:67:5a:4c:5b:56:b4:fc:9c:9a:f6:56:1f:
c1:b5:d2:45:8d:e9:dc:3e:9e:3d:02:23:4c:95:bd:17:c0:eb:
a5:8a:f9:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfgyq1XIYRR2NteMVKy7XkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3N2MyMDczNzExNmJjNmQ1ZTViMjI0OTMxY2YxM2RkN2Y3
OWY5NWIwHhcNMjYxMTE1MTQwMTE3WhcNMjYxMTE2MTQwMTE3WjAzMTEwLwYDVQQD
EygzMjljYjYwODgyMGZkOTE0N2MxYWJmODhkODJjOTljMDQyY2ZiNGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyohxkzbABRmhGgvn/0daI2IqOIq
V5AFqvwo5gkdGoM7/mYS7H8cu6APpdJuQQXq3iiGapuyIVMAkbhDGNwsFYriVOvI
DcmivCvi5+nRf8uTPoHvPY0bqZEBsBWtZRVYj84d2tKZupTUyYsX0BdhDp/D+tBD
GwbsoNZrumIS0TrASuiQ9aXMc1a45icCRUTShMyjPG2thH3oQNgjiGfbkxbAknma
pNXUL+VyLQLrVxCReDt/McSDloHN6cKMhnLJB5C9JqJvKOwvCf4uBAYI2NdOyTcS
rBMl63T15drDwhNTJAR1ZWMq1bmqjEhJ5if6IculrT5bljx1vDZ/gCaUKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKctgiCD9kUfBq/iNgsmcBCz7TpMB8GA1UdIwQY
MBaAFId8IHNxFrxtXlsiSTHPE91/eflbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgt
ZTcyMzJmODQ0OGIwLzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hY2I5NTYtZTFiNS00NjgyLTgwYjgtZTcyMzJmODQ0OGIw
LzEvaDN3Z2MzRVd2RzFlV3lKSk1jOFQzWDk1LVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYoX/sE9
TjDYpLNsNKNhdD52fVLydaDIANM5DqfAFJ168QmL9A5b5awen4FydsPchflzSa2m
sqVPVTo7xFW6aQDJes0NeDfJY47R2lbKaxr0tvcCg2RJMNLGX4VZgaV/T0JphN/J
2xdIC5uZwcYAM9G0YmfPd9+r99/wN+hOWzLk6MgrOJhCQSDbF83fsJbiQ/FPkIT2
TWOyVNSB+Qz6ogwJo/d75G6gZWZBc/k6/JJeuxy6dmPbo9sNu5JqB/edPMsVTL6L
vMw1ZumW4DnpJuhAeb0EuvUNaSoPavDfZ1pMW1a0/Jya9lYfwbXSRY3p3D6ePQIj
TJW9F8DrpYr5ig==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:06 2026 by rpki-client