Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: 0OV+F4Xpo7kmpvnl4StrTZCWqd2xax8xJuLddN4fmLA=
Subject key identifier: 70:3A:CB:C1:EE:FC:09:7B:2C:88:C9:33:9A:C2:A2:65:80:5D:8C:DB
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 01A164FCF585144D395CC746CA8164758644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 1666
Signing time: Thu 22 Oct 2026 19:01:01 +0000
Manifest this update: Thu 22 Oct 2026 19:01:01 +0000
Manifest next update: Fri 23 Oct 2026 19:01:01 +0000
Files and hashes: 1: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: 7FAo+kfVLzMYQrVHWBbpIVbJm5WdAaZ8LhtHfKnnlIo=)
2: kWlk3w0dN2KpYIrrv87aaZ0vPSQ.roa (hash: 20/xm08kASZgABKR47mCBPYmafSiuXBV+p4gqeriUSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:fc:f5:85:14:4d:39:5c:c7:46:ca:81:64:75:86:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Oct 22 19:01:01 2026 GMT
Not After : Oct 23 19:01:01 2026 GMT
Subject: CN=703acbc1eefc097b2c88c9339ac2a265805d8cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ec:7e:e3:5f:44:69:68:59:bd:c3:8d:b5:c6:
e6:89:17:f9:77:91:f1:0e:2d:74:97:a6:9a:25:62:
e0:32:6e:1d:5c:c3:e7:cb:f8:e8:21:32:17:f9:c1:
aa:ef:35:bb:ce:6d:ad:6b:10:10:24:9d:36:d4:83:
42:0e:5b:a7:69:d1:31:24:34:b9:68:5e:55:a3:33:
21:75:47:ce:aa:e8:12:4f:1e:53:00:70:fb:1e:e4:
64:df:b4:2a:ee:4f:c9:a4:ec:67:8c:e5:6e:6c:08:
9e:2d:24:a9:31:5a:aa:56:dd:07:d4:08:ac:f9:9a:
1d:16:a5:2c:88:28:04:32:dc:58:bc:bc:87:2c:17:
fd:11:d9:3d:7e:02:11:d7:58:77:fc:5c:05:a8:67:
87:6b:a7:f9:ff:48:bc:05:a6:98:33:0f:f9:58:fc:
6f:f7:27:7e:5c:15:a0:63:36:39:8a:65:aa:d1:75:
40:96:94:06:4e:ef:45:b8:15:25:b0:b4:a9:63:99:
fc:ee:a3:e1:ad:21:e3:5b:55:b0:dc:c5:a2:16:f7:
2a:af:d9:9d:b1:29:76:27:ff:41:0d:39:bf:2d:f4:
86:26:ca:98:77:53:4c:d6:0a:27:a5:84:4f:ca:80:
d9:90:49:6b:2f:04:f5:60:15:b2:d5:ca:ac:53:cc:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3A:CB:C1:EE:FC:09:7B:2C:88:C9:33:9A:C2:A2:65:80:5D:8C:DB
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:5a:85:27:63:90:a6:f1:b3:5a:9e:47:7f:96:b6:da:ed:de:
e8:fa:f0:cb:da:78:23:25:0b:4d:41:05:da:b9:54:a8:ad:a7:
25:55:9a:51:e0:b1:5e:b6:cb:c7:08:e2:93:c3:bc:e8:27:f7:
26:cf:2e:f0:94:a8:00:7b:17:e1:c7:9b:a2:f9:ee:89:9f:70:
d2:7f:92:7d:a9:b9:bc:63:f1:d9:c8:f3:08:be:eb:94:9f:4e:
de:0f:9d:98:77:50:89:ea:94:78:5b:1f:df:65:72:fe:d2:a7:
63:0b:4f:49:cb:53:56:5c:e0:34:b1:97:e2:a5:ef:de:65:f7:
6b:39:16:57:69:b4:e7:96:ce:ac:d4:2c:80:2b:c1:22:6c:82:
94:43:8c:8b:7e:ea:50:70:5a:93:9f:4c:9f:75:e0:8d:1a:3d:
8f:d6:3a:ce:7a:f4:8c:f7:aa:a6:9e:09:14:a1:df:b9:1b:87:
21:1b:a4:91:86:56:cb:66:84:79:ec:1e:32:74:93:99:e5:5f:
7d:0f:1c:f4:49:9e:b1:0d:cf:a8:7e:35:45:b0:e7:a7:f6:04:
2d:f6:e2:84:fd:34:75:dd:00:20:66:24:17:f1:13:31:a3:07:
16:90:bf:27:28:20:74:06:04:31:78:dd:d0:d5:01:53:df:0f:
40:89:5e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:24:57 2026 by rpki-client