Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
File: h94IWXXeZYjgf-0TVROqOKztt2M.mft (raw, json)
Hash identifier: 40xZXtfLGvDIZd2YLnNoz7fp3Is41176cEpe4/6gVeA=
Subject key identifier: 52:6A:1D:E7:6C:EC:37:DC:0F:4B:4A:01:68:FA:03:3D:EE:FA:B3:8A
Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
Certificate issuer: /CN=87de085975de6588e07fed135513aa38acedb763
Certificate serial: 019DDD67DADF077D11A91F8BFE0D4214FE46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
Manifest number: 0CCD
Signing time: Thu 30 Apr 2026 08:01:04 +0000
Manifest this update: Thu 30 Apr 2026 08:01:04 +0000
Manifest next update: Fri 01 May 2026 08:01:04 +0000
Files and hashes: 1: h94IWXXeZYjgf-0TVROqOKztt2M.crl (hash: X3nzzbOh6kGT0O9wI+uvQ2SMj1k1DQofp5Fhv2RTlbg=)
2: kGQeneiJZNT_BjB_XoReSyXguQ8.roa (hash: yt9dzzQfHrZsnLkuZ9r3U4v8elv0IkIyoER8sIW2HPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:67:da:df:07:7d:11:a9:1f:8b:fe:0d:42:14:fe:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87de085975de6588e07fed135513aa38acedb763
Validity
Not Before: Apr 30 08:01:04 2026 GMT
Not After : May 1 08:01:04 2026 GMT
Subject: CN=526a1de76cec37dc0f4b4a0168fa033deefab38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8b:05:bc:6c:71:e4:c6:63:cb:cb:aa:27:10:
f3:6e:15:02:b9:ac:df:c7:6d:13:1d:ad:ae:0f:13:
5a:d0:4c:8f:bd:60:55:5d:d8:6e:29:01:51:8e:62:
6d:81:eb:59:ca:d0:20:63:0b:0d:7f:fb:d9:e5:6c:
bd:47:69:17:ab:88:96:50:58:06:76:d1:77:8c:86:
a1:90:f0:32:58:b8:21:b0:5c:c6:a3:22:4e:50:b3:
6e:c7:49:9d:2d:f9:d8:29:b4:a5:44:1b:be:35:db:
21:f2:bf:bd:f5:df:44:f8:fd:b1:40:55:ac:f6:c3:
fc:3d:e6:d1:70:5c:ef:f5:08:b2:65:9d:e0:20:2e:
80:70:ec:a7:b8:f4:3d:e4:a6:4f:58:32:3f:bd:9e:
9d:1b:63:bd:32:ec:5e:9e:51:8e:72:d6:c7:6d:0b:
d8:2f:8c:0e:1d:5a:27:69:d7:14:3e:5b:a0:4f:7f:
ce:e3:1b:18:4e:2f:73:8c:b2:77:84:08:6b:34:28:
cb:86:95:60:8c:23:18:b0:53:98:18:13:3d:0c:9d:
95:e6:ae:44:93:3b:15:73:2a:1d:6f:00:00:74:fa:
39:d3:a5:d5:19:2b:e6:16:ff:8b:e7:3e:82:ef:da:
8a:33:05:c5:da:0d:75:97:34:2b:43:b7:92:f8:0d:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:1D:E7:6C:EC:37:DC:0F:4B:4A:01:68:FA:03:3D:EE:FA:B3:8A
X509v3 Authority Key Identifier:
keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:46:c3:26:33:e2:6f:5a:ea:35:1f:b4:6e:94:00:0a:d4:31:
14:bc:00:f1:38:2c:a4:6a:21:1b:63:c0:28:d1:8e:57:cf:bf:
d4:0b:31:1b:e1:88:6a:8a:53:c5:07:27:66:af:64:a7:53:3c:
1b:46:12:c7:6c:e1:d0:0c:34:db:6a:bf:de:c5:4c:aa:32:cc:
16:88:82:f4:96:6f:a8:1f:49:7a:b5:6f:1d:24:11:a0:92:25:
06:a8:41:91:c3:c8:cb:87:ae:e9:06:b3:f3:fd:f1:29:b3:81:
d3:84:c8:07:7d:5b:da:bc:57:2a:27:41:3e:6a:dc:1c:ae:b9:
f3:af:27:a1:bc:a2:f5:15:e6:2c:8d:c8:c3:98:ba:2e:95:3a:
e5:4b:0b:17:34:a1:03:19:e7:9c:dc:e4:85:5a:53:78:22:44:
79:a0:ef:f6:a7:95:44:c5:b5:39:de:18:d5:e6:4a:0f:5e:76:
8a:9b:66:56:42:32:d7:9b:ab:9f:d0:00:a4:d6:c3:55:34:a8:
eb:8e:2f:20:85:8a:3b:b2:a7:55:0c:18:cb:6d:77:74:c1:ee:
86:21:31:d1:03:9c:42:0b:d4:5c:5c:54:ac:24:b3:f9:28:31:
13:c9:ce:a8:eb:f9:9d:72:82:8c:2f:c6:20:1c:39:64:d0:06:
58:44:bc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:40 2026 by rpki-client