Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json)
Hash identifier: oM4+XR9c7FdYu2xqYqSafH53PA6DFECB4wZdxR2cIGg=
Subject key identifier: 98:CC:54:28:CE:AB:7F:43:18:2A:DB:9E:49:FB:19:61:86:2D:7C:49
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 019EB5E92FC58AF09B0A3052332E2C5286DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
Manifest number: 03FB
Signing time: Thu 11 Jun 2026 09:00:18 +0000
Manifest this update: Thu 11 Jun 2026 09:00:18 +0000
Manifest next update: Fri 12 Jun 2026 09:00:18 +0000
Files and hashes: 1: GfYfpyN5jeyVGMtR1H-p-7019jc.roa (hash: hDtfxcTWErCdzm61MCC3VwTe2487YmqIRLbxpndSgYk=)
2: eHMuNXANl1YlZG7VoFbYe8kGvQU.roa (hash: 0S394nr4mqSN2oEz6TpDcjQlD/IHIemle0MDvIWsbyU=)
3: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: Fj8KnJAx9LPEK4LRWKQlKcTYD8cDUssz1HaGNfh8dkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:2f:c5:8a:f0:9b:0a:30:52:33:2e:2c:52:86:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Jun 11 09:00:18 2026 GMT
Not After : Jun 12 09:00:18 2026 GMT
Subject: CN=98cc5428ceab7f43182adb9e49fb1961862d7c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:3b:a5:23:77:07:24:77:06:4f:05:42:11:
96:f5:6a:bb:ad:36:a2:9a:b8:bf:5d:03:d4:ae:70:
89:08:c8:73:b2:3b:80:3f:6a:7b:f3:69:b3:50:43:
6a:e6:ba:32:1e:22:e6:92:6f:c3:0c:b4:9a:b9:ad:
c8:a8:b9:6a:a9:11:11:57:02:1f:f1:8c:55:87:54:
0b:27:c1:fd:9d:fd:6d:ba:84:80:1e:e4:8a:68:59:
b4:73:ad:24:65:8a:11:b0:26:58:09:5a:65:f7:12:
a8:e7:ec:7e:08:c0:ba:f4:a4:63:70:57:d0:75:06:
c2:4b:cb:25:67:97:31:1d:d7:3c:bd:b7:36:2a:13:
c2:8e:b8:85:34:47:88:f0:c8:15:fb:6e:bb:f9:32:
5c:db:2b:da:66:2b:06:5c:d5:91:88:98:f4:e3:a3:
90:38:af:91:d4:c8:2f:ed:34:e5:f4:e4:47:e2:43:
b0:c5:1a:03:84:e3:88:d5:39:43:44:65:29:37:c4:
df:c7:ae:b6:b3:aa:64:cb:16:34:a9:05:b1:fd:3e:
0d:44:55:17:ac:af:ef:79:c6:24:46:f5:15:3f:38:
8e:50:db:1e:64:b9:f9:4b:c2:ed:99:c0:1a:da:2f:
4a:2f:e4:84:a7:2c:f5:c4:62:44:98:15:9f:fe:12:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:54:28:CE:AB:7F:43:18:2A:DB:9E:49:FB:19:61:86:2D:7C:49
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a0:33:93:d7:ab:f1:19:18:b9:b2:33:d0:e9:4c:c2:87:ef:
41:25:d4:45:a8:c9:b3:17:00:6d:7c:e4:6a:7a:47:95:3a:57:
28:6b:eb:98:34:dc:ba:bd:92:aa:7d:0b:e1:8f:b7:70:e4:3d:
d4:5a:75:54:99:c6:d8:bc:2f:bd:43:f4:91:c9:33:69:93:b6:
be:84:0a:46:2f:59:44:8f:da:a5:9a:84:de:20:bd:28:52:18:
9a:6f:20:2b:2e:c0:8d:60:0e:61:9b:3a:49:f5:cc:b9:0d:16:
99:8b:0c:81:b9:48:22:0f:2b:2b:ea:c4:07:31:21:d3:9e:19:
51:c2:2d:25:17:73:6f:94:f8:bc:09:df:f8:ec:f1:6e:0f:2b:
ac:f0:89:fd:8f:ef:44:bf:c3:9a:82:96:ea:93:f8:04:5a:7b:
0e:af:40:4c:0e:07:25:c1:a0:9d:a6:69:27:ce:2f:dc:da:6a:
41:e3:1e:88:4d:ea:fc:dd:a7:90:a8:5c:b2:b1:11:64:7d:9b:
e8:9f:0c:b5:02:b4:cf:fe:f4:8f:d5:9f:32:c8:f3:3e:a4:eb:
07:09:14:47:97:74:0f:12:d7:7f:02:e9:32:09:eb:bf:e7:96:
ab:6d:1d:a1:78:86:9c:56:da:91:3b:b6:96:c0:5d:78:2d:e6:
c0:49:a0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:59:21 2026 by rpki-client