Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier: us/TZc2K/4QABhPrOKutwLsW+qVJFuGRyTpkbSBKpis=
Subject key identifier: B4:DC:C9:20:A4:D6:E5:C8:BA:35:BC:3E:C3:10:94:4D:62:7A:53:06
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 019D39E60FB1E40348631A58F169E69A719A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number: 0F84
Signing time: Sun 29 Mar 2026 14:01:11 +0000
Manifest this update: Sun 29 Mar 2026 14:01:11 +0000
Manifest next update: Mon 30 Mar 2026 14:01:11 +0000
Files and hashes: 1: K3q7rDAAcTkhLcTgXHyQCl5GQuI.roa (hash: XY2CV23nGfpFfkmgGkboOd40b6zMjm8v5H58JjAU0/Y=)
2: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: H8mX1qqHPD/9MZrTaKe4PsGoRCkYSCEIPs/bI+5GSTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e6:0f:b1:e4:03:48:63:1a:58:f1:69:e6:9a:71:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Mar 29 14:01:11 2026 GMT
Not After : Mar 30 14:01:11 2026 GMT
Subject: CN=b4dcc920a4d6e5c8ba35bc3ec310944d627a5306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:53:81:a3:41:ca:be:b1:14:97:59:b2:ae:5c:
90:ad:48:37:dc:26:9f:a3:5f:34:83:27:90:08:bf:
8b:1d:0f:14:ef:d1:95:e4:d0:b0:7c:d5:a9:42:cf:
12:6a:8a:15:f0:1f:9f:da:4f:0e:dd:18:72:dc:df:
09:5c:dd:d5:92:dc:da:41:e8:22:86:81:2f:56:12:
d4:e4:26:52:d0:af:16:5f:ca:cd:1b:79:cb:c3:1a:
58:71:fc:94:b8:71:5a:b6:3d:a4:b8:d3:28:67:2d:
e4:e0:7f:a6:ad:e6:9e:16:b9:26:f1:e6:6a:ce:c2:
c9:75:e5:2d:99:f3:7f:8d:87:36:87:56:a8:b3:e5:
c5:57:07:03:8b:ae:29:f1:e9:0d:3e:70:c0:dd:f5:
bc:b2:af:2a:aa:37:6a:7d:0c:d0:70:0a:ce:39:81:
68:f0:d1:c4:ab:77:b4:48:d6:17:7f:aa:43:02:75:
fc:43:aa:df:48:41:7b:3a:49:18:7d:cc:4f:9c:84:
f5:cf:47:c3:0e:37:62:f1:cd:a2:66:58:2d:e3:04:
7a:c0:77:34:01:93:36:09:13:37:b4:d5:c9:8c:a1:
af:3d:6d:74:26:bd:5f:9b:d6:4b:b0:9a:d0:9d:41:
20:c0:21:5c:74:a5:a8:d9:18:71:69:4d:1a:4b:b3:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:C9:20:A4:D6:E5:C8:BA:35:BC:3E:C3:10:94:4D:62:7A:53:06
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:87:40:ba:99:c3:ca:b5:59:9f:78:b2:dd:41:a4:9e:6b:60:
08:ec:80:ef:cc:6b:17:db:79:20:6a:4e:4a:16:69:a6:d0:c7:
c0:7b:54:c0:c0:7a:ab:ab:04:fd:37:ca:81:06:e4:65:87:f8:
51:c5:80:6e:fe:00:81:e7:33:55:27:43:2f:61:04:83:0f:22:
00:2e:38:af:b6:d8:37:a6:31:01:05:00:23:f2:ff:f7:e7:e1:
7d:14:94:1e:36:e6:e5:b3:5a:22:d1:ea:7a:fa:9b:94:12:da:
c2:55:21:cb:67:05:9b:cc:79:bc:7a:d0:92:f8:bb:21:03:b0:
78:80:25:1e:b2:86:b8:5d:ce:2d:5c:36:2b:c6:4a:41:d7:62:
e9:14:55:f5:c5:0f:a5:90:de:a5:32:b6:d6:28:41:55:e4:82:
57:6a:00:fa:83:e6:e4:ad:96:8f:7d:84:c6:36:1c:ce:2c:5e:
28:ac:80:f7:14:c4:3d:ae:68:19:69:ea:99:ae:95:40:c2:e9:
a5:76:c6:9c:f3:7a:81:a9:3a:02:1f:e9:61:6b:65:c4:8b:67:
12:0e:d9:09:04:74:65:0a:cb:e0:5c:ef:08:9a:0a:19:23:e8:
bd:7d:89:e3:73:7c:6e:0b:b1:f1:c0:d6:65:22:44:84:bc:f3:
a3:56:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:36 2026 by rpki-client