Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
File: h94IWXXeZYjgf-0TVROqOKztt2M.mft (raw, json)
Hash identifier: hISyDMiK7FnyNUMYZmfRMHzZIZhVk/f/TH31zoXAJpk=
Subject key identifier: 78:FA:85:1F:FC:3D:C5:AF:FE:48:BA:CD:1E:A0:C7:01:A8:BE:B2:44
Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
Certificate issuer: /CN=87de085975de6588e07fed135513aa38acedb763
Certificate serial: 019CF3BB1B4A1E436FD4881187242DF4EF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
Manifest number: 0C54
Signing time: Sun 15 Mar 2026 23:00:51 +0000
Manifest this update: Sun 15 Mar 2026 23:00:51 +0000
Manifest next update: Mon 16 Mar 2026 23:00:51 +0000
Files and hashes: 1: h94IWXXeZYjgf-0TVROqOKztt2M.crl (hash: 64PVW7hgsBDTIaKM9ATXMosKv90Ux0CSlnFuGjgnnpM=)
2: kGQeneiJZNT_BjB_XoReSyXguQ8.roa (hash: yt9dzzQfHrZsnLkuZ9r3U4v8elv0IkIyoER8sIW2HPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:bb:1b:4a:1e:43:6f:d4:88:11:87:24:2d:f4:ef:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87de085975de6588e07fed135513aa38acedb763
Validity
Not Before: Mar 15 23:00:51 2026 GMT
Not After : Mar 16 23:00:51 2026 GMT
Subject: CN=78fa851ffc3dc5affe48bacd1ea0c701a8beb244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:4e:3a:12:7c:b5:94:17:98:8f:23:19:4f:
0d:91:70:91:bc:eb:36:a8:a7:f9:b7:43:43:89:6a:
f3:4a:bb:50:58:44:18:09:2b:d1:ee:15:4c:2b:ca:
e4:ef:ed:af:2b:35:6e:20:4f:68:ab:ce:c7:93:e2:
a3:e6:74:ed:ab:d1:c1:0c:a7:75:12:83:cc:92:ff:
e9:8d:af:c3:fe:31:38:ea:65:39:45:52:a7:2c:79:
80:9e:36:4b:91:7f:b3:bc:c1:d5:0b:64:8b:b9:28:
c9:5d:49:11:4f:fc:79:42:c7:04:3f:5a:47:25:8d:
a1:8c:5a:14:d7:6b:b8:21:fc:6c:4c:69:a8:89:ea:
b8:5e:c4:cc:9f:8c:7f:5e:ac:2c:44:8a:cb:f8:e8:
ab:22:c2:0c:57:9f:af:b5:a2:eb:87:2c:f8:aa:56:
96:76:04:dc:ad:36:c1:21:7e:d3:8f:7d:a3:4e:30:
f2:13:ca:76:cc:02:96:70:f1:40:c3:3b:02:1c:60:
07:49:ba:b0:44:0a:a9:d6:ea:1f:5e:d8:27:bf:de:
f0:53:6f:5f:f6:6e:3c:3c:6e:9e:4e:7b:ba:24:21:
87:e5:e8:97:8b:b1:8c:9b:dc:f7:3a:80:3f:ba:a5:
3c:96:f5:c5:46:6e:03:90:b1:31:b1:a8:51:97:03:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FA:85:1F:FC:3D:C5:AF:FE:48:BA:CD:1E:A0:C7:01:A8:BE:B2:44
X509v3 Authority Key Identifier:
keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:42:71:77:43:44:b0:46:1d:f7:cf:e5:66:16:95:12:6d:aa:
48:62:37:c3:84:02:65:d3:63:a0:14:e2:84:f0:b9:12:2b:c2:
08:90:b6:d6:1c:90:d3:08:55:6b:2e:11:02:a9:ab:ee:27:54:
02:1d:f1:9e:74:77:73:4a:de:06:5f:0f:4d:91:d4:16:ac:11:
13:e7:76:d1:eb:e8:fa:3a:e7:ed:2f:a0:eb:09:2c:57:09:e5:
b0:f1:55:0d:9e:ff:5a:be:a2:b1:b9:5c:06:87:d5:2f:28:2d:
e8:5a:dd:04:98:46:0a:69:ea:d4:e9:7e:af:24:75:61:c3:e5:
80:41:4f:a1:30:29:4a:71:ed:a3:a5:41:b8:94:b1:6d:79:d5:
7b:3b:a4:08:87:0b:11:b4:ad:3b:43:97:08:12:29:9b:9b:2c:
b4:ab:ac:76:a0:74:c7:68:c0:94:2a:b7:0f:f8:b1:57:a0:0b:
05:67:0e:02:4a:96:af:0d:60:ef:bc:97:41:49:98:29:4c:cf:
15:da:3b:ff:eb:5d:62:50:82:c9:9a:00:02:7e:a4:73:51:2f:
88:62:d7:54:6e:e2:39:ee:1b:fd:ef:35:e7:c1:a3:b9:6b:37:
eb:6c:cb:4f:a6:2a:2d:ea:75:04:65:f1:91:bb:2e:01:77:fa:
88:c0:42:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:53:24 2026 by rpki-client