Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: 49YDz/zfnewI5iiSJWO6+nJ9eEFejGubyg5T0uZRI0c=
Subject key identifier: 80:CD:C2:CA:87:CD:BE:AD:CF:66:FA:DB:97:F1:6F:EE:3D:5B:8C:B4
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019CE7124D91E1CC3D50E095639B420ED202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: E8
Signing time: Fri 13 Mar 2026 12:01:02 +0000
Manifest this update: Fri 13 Mar 2026 12:01:02 +0000
Manifest next update: Sat 14 Mar 2026 12:01:02 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: 91xvjosGgMPo0sCK6/V/fb2gR/XmDORcwMGWvsRseEU=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:4d:91:e1:cc:3d:50:e0:95:63:9b:42:0e:d2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Mar 13 12:01:02 2026 GMT
Not After : Mar 14 12:01:02 2026 GMT
Subject: CN=80cdc2ca87cdbeadcf66fadb97f16fee3d5b8cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:62:3a:3b:15:09:70:72:19:a3:7c:3b:42:
a5:33:b7:5a:60:f0:24:d8:29:7f:9f:83:2a:6f:f0:
30:5b:fa:ee:7e:10:c3:39:22:51:c5:de:98:22:41:
1d:17:63:55:50:c5:73:6d:1b:bd:56:35:cd:00:09:
72:df:b7:d4:f5:38:cf:67:09:a0:e4:63:d2:3d:7b:
b8:77:a9:e4:77:73:c3:bb:fe:8a:d4:5a:ad:ae:28:
ef:87:f8:cd:da:fc:c8:74:cd:c0:19:8d:91:39:c9:
c1:44:8c:9e:70:e1:d1:69:c9:81:4f:90:2e:84:1c:
21:1a:28:e3:0c:99:52:2b:6b:0b:df:96:42:bf:28:
7f:1d:22:a6:9b:eb:58:5d:49:f5:df:f9:b9:30:12:
46:aa:4f:b7:b8:94:3f:01:a8:e8:02:08:0f:86:87:
fc:95:fa:54:d6:09:81:b4:89:13:78:ea:06:f3:95:
ed:83:06:76:90:db:7d:c5:64:32:2e:69:24:44:67:
67:b8:6d:86:33:2a:21:70:ae:11:a7:d2:34:51:62:
a8:f3:00:53:fe:66:0d:6d:db:1c:a2:f7:81:52:12:
c8:8b:dc:3a:67:52:cb:fe:65:ab:2c:75:ae:a6:a7:
ad:21:5c:fe:91:69:c4:ac:89:ec:d7:25:1f:9e:0b:
eb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CD:C2:CA:87:CD:BE:AD:CF:66:FA:DB:97:F1:6F:EE:3D:5B:8C:B4
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:49:3e:b2:1a:c9:7e:b1:a7:c4:cf:b6:bd:b9:fd:89:4b:
34:2a:b8:3f:1c:0d:e7:d1:eb:76:e0:38:ed:e9:f5:ed:68:5c:
56:f2:cd:26:c1:17:5a:00:de:4c:aa:0b:2e:da:ca:29:89:9b:
65:d0:a2:e1:f9:d1:b0:a3:5c:6c:dc:c0:26:a4:a0:f7:ab:f2:
e5:36:b9:fd:4e:54:1d:33:05:30:24:51:b2:9c:77:be:d1:14:
13:f5:b5:c2:eb:d2:e3:33:a4:6e:5f:75:f6:61:7b:1c:e3:d7:
44:90:d2:e0:49:f4:6f:4c:61:e8:3a:35:61:f4:67:96:9d:26:
66:a0:e7:a9:54:42:29:1c:ed:e9:17:a5:48:dc:a6:4d:ec:7e:
a0:22:df:aa:7f:da:94:7c:3a:a7:9c:83:2f:37:a7:4c:23:13:
f8:4b:68:aa:89:8a:d5:46:da:4b:ad:79:f6:2a:d7:62:66:25:
c8:e2:be:e0:ed:55:89:a7:58:77:a2:30:bb:eb:a4:f8:bf:dc:
79:b2:91:92:d9:75:14:3c:bc:fd:3f:5b:4a:d7:68:67:4b:45:
7b:b9:86:48:f2:b0:d9:1d:f0:97:9b:dc:07:16:d1:7b:e1:af:
7f:4b:ee:70:60:aa:f0:6e:b7:af:4f:1a:56:1a:42:c1:7f:1d:
38:e1:a2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:56 2026 by rpki-client