Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: KprOIBnXTCGY3AAhXnEBnrL1GGcpHr7FeoAutjF3HKY=
Subject key identifier: EC:CA:2F:D9:D3:4D:D7:A0:7F:9E:C7:82:F8:C7:93:97:E1:E0:59:C0
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019CE7B71AB640DEC4980DF36D60044DCAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 12EF
Signing time: Fri 13 Mar 2026 15:01:02 +0000
Manifest this update: Fri 13 Mar 2026 15:01:02 +0000
Manifest next update: Sat 14 Mar 2026 15:01:02 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: SGVU/2ttffJvQjh9gaCGpAJORZREMqbGzGrRaiawaN4=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:b7:1a:b6:40:de:c4:98:0d:f3:6d:60:04:4d:ca:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Mar 13 15:01:02 2026 GMT
Not After : Mar 14 15:01:02 2026 GMT
Subject: CN=ecca2fd9d34dd7a07f9ec782f8c79397e1e059c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:42:61:44:69:95:b0:72:01:f1:56:3d:48:
c5:e1:33:97:ae:a3:7d:ec:ac:7d:6b:89:77:52:af:
df:f6:c2:7d:bb:e2:b0:43:69:de:f9:a7:5e:02:21:
f7:2a:fa:d8:ca:d8:b5:02:a2:ec:16:fb:32:82:2b:
ae:53:fb:50:2b:65:61:0b:d7:78:08:96:6a:e5:98:
85:ba:ab:f7:2a:e6:6d:bb:1c:a0:28:1e:1c:85:4b:
b8:a5:12:6a:5a:97:ce:fb:55:77:9a:87:dc:78:75:
86:8e:56:40:ea:21:86:62:75:6f:9b:e3:b3:f9:89:
5c:11:8e:be:60:9e:5c:fa:31:a7:b7:83:18:eb:02:
24:42:ab:4d:87:af:13:ec:da:cc:bb:96:86:e8:c5:
26:8e:ac:62:a0:cc:df:cd:0c:17:20:ac:51:a7:0a:
6c:0c:69:ea:d9:be:ab:4e:1f:d4:0d:a3:4d:63:8d:
64:18:77:8b:7f:ef:55:aa:53:c4:87:33:43:f0:64:
ef:6d:f9:80:bf:94:3e:28:60:e3:c3:d3:75:25:08:
8c:bf:a8:b8:cb:12:0d:14:c2:59:3a:53:54:a7:c0:
a3:ab:d7:fb:39:4e:d2:bb:5c:36:5e:1f:e0:17:df:
25:4a:a6:6f:6f:c0:bd:51:72:5c:70:e7:5e:2f:69:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CA:2F:D9:D3:4D:D7:A0:7F:9E:C7:82:F8:C7:93:97:E1:E0:59:C0
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:98:b8:e3:47:ba:9a:0a:4d:38:58:6f:92:5c:19:c5:ac:1c:
ba:ad:95:d9:58:05:f3:03:ba:24:62:27:8f:07:04:e2:db:43:
97:b5:f8:71:2f:27:96:46:6b:c8:60:d8:ab:f2:53:bc:b0:f6:
7e:1c:11:d1:05:b8:31:0f:2c:24:eb:5f:a6:7a:1b:4f:50:f9:
90:f8:68:59:de:03:19:40:c6:ba:0e:a2:1b:d8:ab:cc:9c:85:
73:12:b2:98:8b:35:95:29:63:4d:f0:00:16:53:c9:c2:9a:13:
0e:8c:da:ca:9b:e9:a0:d6:c5:1c:15:89:3e:d9:3a:b8:54:7e:
e6:f8:42:07:75:bf:ec:ca:fb:da:1c:98:2e:d9:0b:34:44:cd:
5f:12:e2:bd:42:db:2c:ac:bf:64:ac:3b:15:cd:df:b3:13:db:
9a:46:53:e2:99:c7:57:4f:82:d3:e6:19:a2:2a:b4:0f:b0:07:
d0:66:1c:cd:90:02:1d:25:bd:49:a3:d5:7c:53:51:9a:49:8e:
65:f8:52:5e:2f:07:7e:7d:81:f7:55:07:07:84:83:cc:a8:3c:
e5:eb:49:fa:79:7d:b4:f0:63:71:be:4b:20:ac:5d:aa:7e:d4:
b8:66:98:ec:16:be:cc:62:20:d7:d9:34:5f:79:b6:e6:0a:ec:
2c:67:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:56:24 2026 by rpki-client