Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: ma0dF1yCa9nGFPWrnYyipEyuZDufMevcyWKNnYqHLVQ=
Subject key identifier: DD:0C:53:FE:94:37:EB:23:E8:51:81:F3:B2:21:EE:13:47:61:38:1D
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 019D382E5DE72658FBE57C3744B4E3EB41F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 15F8
Signing time: Sun 29 Mar 2026 06:00:55 +0000
Manifest this update: Sun 29 Mar 2026 06:00:55 +0000
Manifest next update: Mon 30 Mar 2026 06:00:55 +0000
Files and hashes: 1: 4cy1aqEYp9F7V13taLUgvqJl6bk.roa (hash: y4AZgnc6ll/dTvazfgvRlzMdkBW1msJHbGpj1pvELdM=)
2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: KE/WEw9pGwkTR+vi1K0JQflqs+tbgHTMkbOKj7Hmo2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5d:e7:26:58:fb:e5:7c:37:44:b4:e3:eb:41:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Mar 29 06:00:55 2026 GMT
Not After : Mar 30 06:00:55 2026 GMT
Subject: CN=dd0c53fe9437eb23e85181f3b221ee134761381d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:47:09:77:12:5c:ed:00:c1:2a:21:e9:6f:
17:b5:83:c0:f7:d9:e6:52:5c:26:f4:f4:d1:4d:1e:
5f:c8:38:59:6f:23:2c:b7:85:87:a8:57:5a:95:e8:
18:22:d5:e0:98:c7:02:16:e7:dd:4e:d2:7a:94:a0:
77:d5:d1:16:71:1d:d7:7b:56:e2:8b:96:dc:87:95:
e6:ed:77:c4:2e:e3:10:4a:86:60:f8:4f:e5:97:0e:
d2:86:1d:07:40:a1:86:d0:7a:45:52:c8:a4:02:d7:
b8:82:e1:bd:cd:cc:6b:cf:72:93:6a:6f:38:10:f6:
b4:67:58:b2:3e:2f:08:99:d1:47:90:f0:46:26:22:
e7:a1:4c:87:6d:4d:71:a6:6d:41:c0:69:e3:93:b5:
52:28:1a:aa:88:ea:52:e8:e6:b0:a2:57:dd:03:57:
72:33:46:45:68:ae:d0:1c:51:a2:e2:ba:70:78:59:
3b:3a:67:94:dc:df:f7:1a:21:d7:cf:13:6b:2a:a4:
33:fc:a9:13:2a:c7:59:df:d9:9d:d9:8b:3d:dc:c2:
77:ba:f9:e0:ba:18:bb:c0:53:70:ee:e8:5b:3b:23:
19:e8:aa:a5:60:74:05:1c:bb:86:f1:7b:7e:8c:a6:
f6:ea:66:c0:42:8f:23:53:3d:e4:28:62:07:8a:7e:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0C:53:FE:94:37:EB:23:E8:51:81:F3:B2:21:EE:13:47:61:38:1D
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:66:d8:df:5c:61:12:03:71:95:36:ec:91:e8:06:76:6e:e1:
70:44:1c:73:78:e9:79:51:d5:de:bc:3f:24:94:86:5b:96:5c:
72:f8:b6:3a:d6:08:79:74:b6:da:b1:ef:b6:bf:6f:32:b6:bf:
e5:4a:e4:33:c3:ce:1e:30:db:00:a1:cf:27:0a:26:0e:ef:01:
cf:3b:2a:96:48:92:bb:7d:bd:0c:b2:e2:4c:5c:64:8a:a8:33:
f2:81:fb:e5:9d:e2:fc:3e:7f:e1:42:39:00:45:1a:59:0c:50:
4c:f4:a6:89:be:70:fc:9c:f9:ae:68:36:b1:40:9d:1a:d5:a9:
3e:17:dc:aa:b7:6e:eb:7d:1c:85:71:03:57:90:44:15:24:77:
2b:bc:11:83:ce:b4:8a:f0:82:e5:9d:0e:8f:f8:5b:b2:c1:f8:
5d:68:83:33:f1:60:f7:22:0d:03:fa:5e:85:84:ca:b8:b5:38:
ad:02:26:18:99:fd:f5:66:2e:01:9c:6c:8d:19:f6:a4:8e:f3:
08:40:93:d3:e5:c5:97:30:2f:61:29:c2:7d:e6:64:7c:a8:8e:
0f:d9:fa:22:c8:9c:93:ee:50:26:46:d7:16:15:3e:8e:bf:36:
03:6d:36:8d:17:19:4b:bc:ba:86:82:e0:c4:da:a5:f5:19:cb:
e5:05:15:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:06 2026 by rpki-client