Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: hU+oPq7DGpyAdrl65Vvr+aFsZ/mYMUXuYoVILYoGXnU=
Subject key identifier: A3:D0:6A:F3:C6:0E:B1:84:B0:60:4D:04:D1:E0:8D:3F:AA:0A:EF:95
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 01A16D5B0B7F7FEC67778AE85DE627F20939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 1AD1
Signing time: Sat 24 Oct 2026 10:00:45 +0000
Manifest this update: Sat 24 Oct 2026 10:00:45 +0000
Manifest next update: Sun 25 Oct 2026 10:00:45 +0000
Files and hashes: 1: 4L2HrkOMp5Px3ZdgqOBGMnz6oXw.roa (hash: qjbkKzm11wnXRFJIt4quryujdmBS5m5m8Id3/w9vHFw=)
2: 78tSQmB_UZC_rIGDHLnxnqOm3fI.roa (hash: 3kNkwMTWy/XYCkJODFF1IVosQpGtDfhW2/dwVf0UwBQ=)
3: JIk4GJqmgSwzYSk0JGPNI21QRnM.roa (hash: 45ZLZSPO108JAO0yb1j8MEBiHT4QdE4zU9XBhQbVqtg=)
4: PY323kbvCRFsNrwGFI26gXv0gpE.roa (hash: U0ksXLpw7uH4vwqe/cNwV58+FVim6JoHjXiFGt1giNE=)
5: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: TV/LXug/J6rjAZ2ps+Fv007BaR1l3nHIQZq+dszRkug=)
6: oLb_BG6B2irYYvpJ_Dg1uPHKCq8.roa (hash: iEVASa2ks9RBbT4CSfXOVtY8JacDD8nYL36EtVLSvLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:5b:0b:7f:7f:ec:67:77:8a:e8:5d:e6:27:f2:09:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Oct 24 10:00:45 2026 GMT
Not After : Oct 25 10:00:45 2026 GMT
Subject: CN=a3d06af3c60eb184b0604d04d1e08d3faa0aef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:14:70:6a:37:44:71:be:c5:18:fc:a8:89:
e5:b9:a5:79:88:0c:ae:8b:c6:b3:a5:17:fe:aa:99:
28:5b:62:18:d7:4e:c1:20:dd:d3:d1:28:41:01:d0:
6b:01:51:c2:0a:2c:38:2e:d6:b9:fa:df:48:2e:70:
e2:63:5d:89:6f:71:4f:86:fd:de:3b:75:d1:67:97:
fd:6c:db:0d:81:b9:24:33:ac:f4:91:13:52:04:28:
f0:7f:38:f8:a1:22:4e:1a:96:b6:4b:19:31:d6:f6:
e2:c9:a5:71:b8:66:3f:0f:dc:50:ed:60:59:c4:6b:
6a:f2:5e:3e:b8:90:89:17:df:7b:54:7d:65:77:45:
a9:70:d1:34:75:f4:2b:6b:e0:5c:b0:06:fa:28:8e:
c2:bb:36:b1:0c:37:d2:0d:f1:99:3a:01:30:e6:4b:
c7:33:74:4d:91:50:ab:86:d5:df:8f:e6:bc:ce:c3:
3d:4f:1e:b0:f6:ca:d9:52:d9:92:f6:d7:c2:13:f9:
7b:94:08:8d:65:a8:aa:4a:a0:4b:84:e6:09:92:a3:
99:99:e6:64:f1:cc:0a:8f:b0:8f:bb:31:b7:ac:32:
fa:83:2f:c2:c5:1c:61:6d:bf:78:94:52:89:2a:48:
0d:28:97:39:fc:aa:5d:71:40:2f:84:07:03:50:cc:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D0:6A:F3:C6:0E:B1:84:B0:60:4D:04:D1:E0:8D:3F:AA:0A:EF:95
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bd:22:ae:68:4a:e2:8e:c8:f1:40:f9:9a:72:84:76:0b:52:
73:cd:49:2e:ea:67:f3:40:d3:ae:0a:91:e7:a1:4b:7e:05:54:
84:d3:c0:c8:76:06:25:3c:65:07:16:18:ae:f2:8c:a6:5e:7e:
c5:57:c3:74:d1:bc:e4:e4:e9:f0:ee:e9:9d:73:f4:41:c7:9a:
d8:df:05:c9:c8:c1:eb:01:f4:df:04:7b:ed:46:ff:bc:aa:92:
62:41:5c:81:4d:3b:34:b0:8d:e0:bc:dc:a8:fd:48:5e:71:94:
1b:b1:7f:f0:6c:35:29:a7:41:c7:1b:8e:e3:40:b1:ad:0a:da:
95:3e:9c:6d:b5:e1:2b:58:4a:a5:e1:ca:1a:48:1f:a3:f1:7b:
b7:77:1c:65:57:51:79:ea:08:dd:94:a4:77:64:05:bb:99:25:
61:8a:66:ce:d7:ac:38:b8:36:56:be:4c:8e:96:fe:97:4a:27:
01:20:4b:07:68:cf:29:1e:f9:2f:51:dd:42:e1:0c:ef:2a:97:
01:10:14:8e:6d:76:11:b5:70:a5:49:d7:b4:fd:c1:a5:fa:9a:
7e:10:ad:8e:5d:ac:c5:f8:ae:f7:c3:da:f5:b4:24:56:87:0f:
38:a9:cb:4d:40:35:db:cd:16:89:38:cc:10:22:de:4f:85:25:
f9:e7:0b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:25 2026 by rpki-client