Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: qmOxqu3sDwwYqbsvqlbOTB/BaEqHhx54h3EPmCexNc8=
Subject key identifier: EF:17:B6:24:88:B7:8C:EC:5F:60:33:59:74:3B:22:0E:02:92:78:CC
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 01A17B4D6BD62D6A45C917713DCF5953BC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 0347
Signing time: Tue 27 Oct 2026 03:00:33 +0000
Manifest this update: Tue 27 Oct 2026 03:00:33 +0000
Manifest next update: Wed 28 Oct 2026 03:00:33 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: Q9aHMMyDx74M9X2AWMySvzAKvdZZ20RddvaFlnf5ODE=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:6b:d6:2d:6a:45:c9:17:71:3d:cf:59:53:bc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Oct 27 03:00:33 2026 GMT
Not After : Oct 28 03:00:33 2026 GMT
Subject: CN=ef17b62488b78cec5f603359743b220e029278cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:65:2b:9d:87:89:88:0f:92:21:9c:e0:8c:ca:
0c:bc:46:b1:44:1e:05:d8:a5:db:eb:70:cd:22:17:
7d:51:2e:cc:4d:b2:a1:5d:f7:59:d4:95:02:42:56:
3f:2b:1c:2a:f2:67:dc:d0:8e:44:91:ff:40:b4:34:
2f:45:61:65:49:f6:9c:a1:35:9a:65:7f:75:9a:ae:
91:23:b5:c7:23:0f:f1:e7:34:1c:79:99:3d:7d:5e:
4b:41:ab:81:7a:9e:fe:5b:8e:97:d9:1b:30:51:24:
ca:b1:9c:29:cb:1d:52:a4:03:ca:5b:fe:70:a9:c8:
a9:07:52:a1:56:5e:59:e9:cd:c3:91:87:b5:21:a6:
74:fa:1f:a3:fc:93:b7:c2:42:d6:cf:e4:79:26:c3:
8e:9e:93:4e:af:32:da:a6:10:3e:b5:b2:f6:bd:59:
5e:aa:70:0d:60:c0:7f:ff:49:af:b8:7c:12:f6:c7:
8d:26:a7:16:64:9b:01:9a:54:f6:3e:9e:67:2d:6e:
b2:58:d7:e4:5c:e5:bd:3f:cc:2e:a1:dd:6a:2f:6d:
56:49:d1:d8:4b:37:3c:d6:36:e0:ec:66:4e:f4:6e:
11:78:da:b8:66:52:6a:3f:99:b9:ee:2e:19:c4:c9:
06:1b:0a:66:4c:30:58:e2:57:7a:ad:7e:fb:a4:60:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:17:B6:24:88:B7:8C:EC:5F:60:33:59:74:3B:22:0E:02:92:78:CC
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8e:35:31:bf:66:15:71:54:88:05:41:e0:67:ca:9e:7c:60:
24:4a:63:11:d6:df:33:44:cf:3f:52:b8:b6:7e:b8:c1:8e:57:
d9:ef:f4:49:23:cb:24:01:4c:9c:d2:2a:1f:09:26:e8:94:62:
29:bb:10:47:ca:a4:ad:56:a2:3a:6c:cc:d0:a2:25:04:8f:91:
d5:f7:95:d6:53:08:d9:74:cf:0e:ca:d3:a1:b5:85:61:82:ba:
03:18:24:24:b3:15:10:e2:f9:31:9a:30:2a:c4:3a:37:9e:99:
24:52:40:e9:5b:b5:54:b0:b9:5e:3d:a3:19:d8:1e:7f:86:17:
b6:1f:b7:d0:fb:fe:b4:12:40:98:33:34:04:47:c9:8e:18:65:
47:3c:c0:60:78:4f:1e:da:48:45:5e:89:ed:28:9b:5a:e3:01:
4b:f4:27:9f:df:ee:31:dd:28:d3:c5:7e:f4:dd:cc:7a:cb:b4:
11:1f:7c:b6:20:3c:e7:1c:dd:04:43:e0:a3:0c:22:45:0d:91:
0b:a5:fb:03:9b:46:17:df:2e:cd:de:fa:37:48:69:bf:98:46:
82:bc:be:58:bc:78:b9:45:6e:58:30:74:a8:d1:0b:61:d2:48:
39:53:c4:08:0a:e3:2a:4c:ae:fb:93:25:2d:ff:7b:66:be:ff:
c0:69:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:49:54 2026 by rpki-client