
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: oBIR7dVXyWpWothe3ul1CJCbmHS5c1m4Vj4W9NkvW74=
Subject key identifier: 59:D4:F6:A0:69:7E:BD:A0:48:F1:C6:CE:3F:7B:B3:A6:61:A4:7B:FF
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01A17627FDC918E138BD5869BA659CB6F00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 154B
Signing time: Mon 26 Oct 2026 03:01:34 +0000
Manifest this update: Mon 26 Oct 2026 03:01:34 +0000
Manifest next update: Tue 27 Oct 2026 03:01:34 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: c2eJPufNvCLO+9t0CPptX/Np9ZO95YegbEW6EV+TSLg=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:fd:c9:18:e1:38:bd:58:69:ba:65:9c:b6:f0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Oct 26 03:01:34 2026 GMT
Not After : Oct 27 03:01:34 2026 GMT
Subject: CN=59d4f6a0697ebda048f1c6ce3f7bb3a661a47bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5d:fa:41:8a:66:22:ba:b1:49:94:74:43:b4:
31:3e:99:4d:b9:e4:3f:60:19:3d:67:4d:ce:b7:52:
c6:71:3c:66:61:9c:6d:fe:96:61:76:a4:c2:82:bd:
7f:8a:fd:bd:82:50:9b:fa:22:0c:2b:26:22:56:c7:
87:95:c3:aa:52:59:98:0c:73:d8:d6:76:17:25:7d:
d1:ce:46:65:ea:8e:ff:9b:f5:d3:ab:59:8d:15:4a:
6a:4c:31:4b:34:9e:26:2f:db:24:b1:cb:d4:13:a0:
38:de:9c:0d:74:27:03:58:4b:3f:49:68:f0:c0:31:
6c:f4:b9:32:5b:86:4b:25:fc:8c:3c:e7:98:39:6e:
6c:ab:56:92:e3:b5:90:12:d9:a0:d9:52:48:d2:11:
4c:db:84:6c:e6:d3:96:ad:52:99:d3:96:0f:f9:64:
1b:00:ad:42:c0:ee:9c:a0:53:4d:dc:29:d6:92:5f:
a9:48:b4:2a:6d:e8:65:91:2e:53:63:7e:a3:fc:87:
57:87:ed:46:5e:29:e7:50:ee:3e:48:53:31:72:45:
12:56:49:c0:9f:1f:f8:af:50:44:66:57:94:50:73:
c5:f3:67:3d:11:67:c4:f7:67:4a:37:04:ad:3c:88:
e3:d9:fe:63:08:58:c1:89:84:07:b4:5a:b6:cf:f7:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:F6:A0:69:7E:BD:A0:48:F1:C6:CE:3F:7B:B3:A6:61:A4:7B:FF
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3c:2e:6d:9e:dd:c3:6d:f4:07:a8:d6:18:7c:cc:e7:de:78:
bd:9f:40:a1:82:12:d1:9d:a0:7b:f1:b9:74:e6:ef:50:48:c3:
23:8f:2d:99:6a:f0:64:a9:bf:a7:37:11:72:c1:ee:e4:70:e1:
20:3f:86:3e:c2:76:41:e7:7d:26:99:58:86:b0:c7:fe:c0:18:
ee:cd:2d:1b:b0:3e:bf:62:5b:4a:8a:76:74:be:89:d6:20:e3:
76:af:2d:d4:72:a0:fc:09:82:11:35:4f:7e:30:ca:99:97:77:
51:90:98:0b:30:cf:31:9a:88:d1:08:3b:c4:b1:85:63:f2:be:
1a:32:42:93:9b:37:5f:6a:f9:45:98:56:60:b2:92:85:02:3d:
9d:ff:89:18:a1:78:8c:bb:da:2b:e7:3a:62:fe:b7:bd:c1:2c:
45:ce:b4:ec:b2:91:68:63:cc:63:37:44:c9:6a:fb:25:1d:d7:
ee:53:69:fb:57:03:73:86:c1:5d:a1:40:2d:f8:cd:3b:1a:3a:
ca:bb:dd:c4:bd:00:e1:11:1d:d3:27:0a:c0:68:1f:77:59:ad:
1f:5f:6b:5d:d0:13:17:61:f3:24:be:75:27:23:34:d9:04:aa:
be:52:22:b3:d4:2b:81:61:d6:e6:6b:3d:1f:e7:86:d9:7d:32:
6a:a4:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:43 2026 by rpki-client