Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: KR+8ptfpo7zOCLG7mZIx7KwJLGi5KcyjgZu+960wfbo=
Subject key identifier: 0E:9D:15:5B:AD:B3:12:B5:CB:44:65:2A:42:82:10:ED:1B:BF:D7:87
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01A08A8D9618226C9A39731EE65DD2344BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 14D1
Signing time: Thu 10 Sep 2026 09:02:09 +0000
Manifest this update: Thu 10 Sep 2026 09:02:09 +0000
Manifest next update: Fri 11 Sep 2026 09:02:09 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: 63w+i5fjYuh2kqRDzD3wkBoqY6mwUxkJpp8qwUC5ELM=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:96:18:22:6c:9a:39:73:1e:e6:5d:d2:34:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Sep 10 09:02:09 2026 GMT
Not After : Sep 11 09:02:09 2026 GMT
Subject: CN=0e9d155badb312b5cb44652a428210ed1bbfd787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:fc:7d:91:48:f7:72:0e:a0:0c:40:5d:60:
58:5f:ec:e6:b9:5c:99:c4:4f:ac:d2:cc:4d:6d:44:
96:28:89:da:86:e9:27:a7:06:7c:67:81:0e:83:44:
63:7c:01:d5:09:8a:b6:ae:37:46:6c:93:08:84:84:
e5:d9:ff:55:d2:1e:66:6f:e8:a5:5e:70:b8:05:58:
b2:83:18:4b:87:5a:34:5a:6f:48:72:b6:8a:64:41:
1a:68:b6:3b:b0:cf:bb:b6:55:61:66:d6:b7:f4:9c:
6a:99:d6:09:cf:2d:e2:75:92:6b:df:68:89:fd:3a:
73:7a:b4:e9:55:89:51:e8:98:08:6c:f6:ff:b8:09:
96:28:33:fb:20:08:e2:e5:4b:b3:72:af:7f:61:fa:
10:c2:35:55:1d:21:27:71:d8:74:8a:b1:64:fd:26:
fb:39:a5:25:57:80:5d:35:6e:c1:03:0a:26:c9:16:
e1:bd:d0:1c:67:ae:1e:39:8c:da:c5:c9:14:36:70:
1e:a6:a1:b8:64:24:fa:81:5c:d3:02:ea:1b:c5:3b:
8c:db:9d:5d:30:7b:4d:a5:85:2f:7d:e5:42:04:11:
04:49:cd:8b:16:35:08:fa:67:d1:78:1f:00:0c:06:
56:5d:df:6a:e0:67:a5:4e:be:48:9e:55:3c:88:0c:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:15:5B:AD:B3:12:B5:CB:44:65:2A:42:82:10:ED:1B:BF:D7:87
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:11:a3:b8:4c:1a:75:b5:0c:eb:80:d8:2e:5c:db:ad:0a:73:
f8:90:5d:37:d9:df:f1:03:39:69:62:69:14:20:1a:1d:d8:1b:
bc:d2:8b:fd:b7:27:ab:6b:7f:48:e4:c2:c7:c4:13:83:b0:66:
7c:d3:15:16:a9:37:1a:4f:d3:ca:8c:89:4c:38:b8:7f:d1:b8:
8e:7b:99:ab:cb:b3:de:0e:0e:29:75:c8:31:87:85:92:76:dc:
6f:aa:8d:6a:af:8d:99:c1:61:65:38:b6:cb:30:3e:13:3a:6a:
ec:38:11:b2:cd:bc:d0:89:77:63:1c:c4:aa:30:eb:79:ba:8a:
59:45:f8:17:88:7b:a9:54:55:70:2b:79:24:f6:7a:d2:3b:5b:
cc:fe:91:96:f5:ba:a3:41:bb:a4:97:ca:ba:9e:55:ab:e7:89:
c6:c0:2a:16:18:7a:af:ed:37:3e:c2:9a:bd:8a:65:2c:77:36:
3e:09:f0:c5:b8:19:d0:c9:5d:d6:c7:2d:ef:a1:6d:d3:0c:c6:
fa:03:f3:04:c8:e7:3c:31:d2:f0:08:49:bb:32:2b:11:6d:f1:
8c:63:5a:03:28:c7:dd:ed:f3:c4:d5:57:4b:c7:b0:19:42:a3:
01:26:20:d8:79:e7:c3:60:82:ec:99:d2:0a:59:60:42:e7:9f:
58:77:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:33:00 2026 by rpki-client