Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json)
Hash identifier: YpHRUx1ul9NPUGV46VH0E41rVXefUPVgaL86agkVJjk=
Subject key identifier: 05:D1:5D:5E:6E:18:F0:7A:04:EF:59:CC:67:6D:9F:C6:89:E5:CF:AC
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 019D38D29AF74876A7138021411A9BEF3C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
Manifest number: 032F
Signing time: Sun 29 Mar 2026 09:00:19 +0000
Manifest this update: Sun 29 Mar 2026 09:00:19 +0000
Manifest next update: Mon 30 Mar 2026 09:00:19 +0000
Files and hashes: 1: dd_8XOt-AgZFAxv4LVoQ4tuZiZc.roa (hash: SfXOkOIMQUgKz0cDtjyVCOFX4NWLQaKSkA6RWiEx530=)
2: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: ySLk1U7+WuIQosr+hoIqK1z8rUTObo9qDBKhEaViLNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:9a:f7:48:76:a7:13:80:21:41:1a:9b:ef:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Mar 29 09:00:19 2026 GMT
Not After : Mar 30 09:00:19 2026 GMT
Subject: CN=05d15d5e6e18f07a04ef59cc676d9fc689e5cfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:8f:86:90:d8:74:5b:b9:00:18:0e:04:45:
11:fd:30:bb:4c:1d:94:ac:15:ca:80:34:f9:94:a8:
6b:4d:11:02:02:7c:07:41:76:ea:cf:c8:fd:10:d4:
b6:cf:96:c8:e3:62:67:9b:61:37:40:e6:d8:50:b4:
2c:fb:bd:d1:f1:ce:60:44:1b:29:f3:1e:6c:a3:b7:
55:11:d1:d2:42:a1:6e:d8:14:e6:7c:29:6f:86:88:
d1:1d:6f:27:b2:bd:52:66:bb:01:f4:c5:28:31:58:
8b:66:a8:27:15:01:3c:db:47:15:0b:13:96:ab:1e:
f1:fc:08:ba:ed:d2:4c:91:c8:5d:05:ad:1b:d8:88:
65:31:f6:ef:b0:42:46:57:c0:f4:6f:5a:f4:be:2d:
c9:08:1e:c3:d2:3a:0a:4f:33:3c:ce:c2:3c:87:92:
c7:5b:74:cd:12:ff:33:86:e2:3a:e0:c0:3e:40:2e:
19:92:0b:73:0a:ea:39:11:94:67:74:74:57:a8:39:
7e:fc:79:6d:f5:cd:77:4b:42:50:2f:ca:8e:92:70:
7e:dd:5d:6a:c8:dd:29:cc:08:5f:84:ad:51:b8:f2:
17:95:6c:e2:d6:a3:af:ad:db:cd:c0:7c:0c:3d:a8:
28:5c:a0:35:97:5a:c8:78:eb:16:75:ea:b7:8b:a9:
42:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:5D:5E:6E:18:F0:7A:04:EF:59:CC:67:6D:9F:C6:89:E5:CF:AC
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ee:49:cf:1f:bd:d7:8d:91:24:f2:41:fb:01:83:4c:67:c5:
a9:2b:f5:fd:00:31:3a:47:92:7e:fe:b3:2d:cd:7e:fd:6c:3a:
f5:85:58:34:f0:3b:dd:d7:b2:04:4b:a3:58:56:c5:13:69:fd:
fd:b8:1c:b6:0d:c7:24:7a:7a:b0:9a:d4:42:08:a8:60:9f:df:
07:36:bf:4b:96:c2:49:bc:53:98:56:87:2b:5d:eb:82:d3:09:
03:42:d2:73:2c:54:81:f1:cf:8a:44:0f:1d:96:c6:24:3c:30:
84:97:ab:1e:c0:23:08:dc:d3:ad:c7:82:41:60:8f:59:57:74:
f6:57:83:1b:e1:79:dd:2c:29:b4:02:f6:00:d5:1b:03:6a:2b:
7f:31:d5:a5:5b:4e:91:68:47:67:35:01:8d:fd:24:8d:b6:6f:
f5:5e:dc:87:6f:e3:c0:c8:d0:b8:1c:f2:fd:1f:c0:39:48:a8:
eb:ec:9f:45:87:b2:2e:da:58:99:c4:fd:a5:38:80:0a:c3:b1:
4e:4c:87:14:68:eb:c6:6d:12:67:a5:e4:08:50:9e:3c:bf:2d:
c0:7f:75:f5:f2:1f:af:20:2f:ec:ed:fb:6e:11:40:80:5a:2b:
f9:b0:8a:0f:4e:b5:f4:1e:37:1f:fa:21:b1:13:71:dc:7f:37:
54:d3:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:51 2026 by rpki-client