Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.mft
File: h5WLpmHENczSXCBgRi72ANJxnuA.mft (raw, json)
Hash identifier: +/wQfCb1KuonhTaT3+bynYjgJPiIzf7mv+4aBqCsKH8=
Subject key identifier: 7A:E1:64:19:6C:7D:8B:34:7B:E9:0A:24:A5:D8:9A:7D:75:08:FF:0A
Authority key identifier: 87:95:8B:A6:61:C4:35:CC:D2:5C:20:60:46:2E:F6:00:D2:71:9E:E0
Certificate issuer: /CN=87958ba661c435ccd25c2060462ef600d2719ee0
Certificate serial: 01A17BF26315FFC010E33E5EBAAFDCDDDDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5WLpmHENczSXCBgRi72ANJxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 06:00:44 +0000
Manifest this update: Tue 27 Oct 2026 06:00:44 +0000
Manifest next update: Wed 28 Oct 2026 06:00:44 +0000
Files and hashes: 1: ff3rWotipxB5dvlUy4f5nYkMPs0.roa (hash: 0kFsDh0f69aGD5kG+8GzoVmb9MJyy9m9HMkqJTww73U=)
2: h5WLpmHENczSXCBgRi72ANJxnuA.crl (hash: glLIFmRhgwqtU+99CvFgQFBgz7K/UJSaqTK9wskI4xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5WLpmHENczSXCBgRi72ANJxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:63:15:ff:c0:10:e3:3e:5e:ba:af:dc:dd:dd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87958ba661c435ccd25c2060462ef600d2719ee0
Validity
Not Before: Oct 27 06:00:44 2026 GMT
Not After : Oct 28 06:00:44 2026 GMT
Subject: CN=7ae164196c7d8b347be90a24a5d89a7d7508ff0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:16:02:22:ae:f4:46:3b:a9:32:a4:df:e2:f1:
0d:1f:58:3a:9d:38:d0:6f:43:cf:bb:73:ec:a6:16:
1b:c4:3a:6c:ff:f4:19:fd:c4:0e:f1:25:d3:49:b9:
b5:72:aa:8e:e9:38:93:13:43:12:e5:54:c1:aa:24:
f5:d3:54:75:c0:f4:54:f4:27:6f:99:49:a0:40:3c:
bd:c9:43:10:54:13:76:4c:8f:08:77:5e:72:94:fa:
e3:31:72:cc:58:66:a0:07:72:d3:65:07:78:7f:5b:
4e:ca:05:eb:a8:08:f9:b0:9a:82:18:70:96:8d:f1:
40:3d:1c:2b:9f:da:68:6d:51:f5:34:89:fb:58:c0:
34:1b:64:00:2f:26:92:dc:ee:75:95:5f:a3:7f:43:
09:5d:8a:8f:51:f5:cf:2a:d1:3f:00:3f:64:0e:55:
f0:e4:b9:09:ac:c7:d2:ed:bb:11:85:21:b1:2e:2d:
7d:3e:b1:59:fb:27:5f:e4:5f:fa:61:a2:d3:6b:67:
64:e1:8d:7e:d2:16:f1:1d:a0:e5:29:ed:b6:e0:dd:
f1:5f:e5:29:97:e9:8e:eb:e9:7e:3e:54:08:c5:78:
6e:32:7e:8b:4e:1f:3f:3c:7a:61:03:9b:aa:af:47:
5b:7a:c7:57:a5:94:6b:3c:7f:3e:f9:c9:e0:dc:4d:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E1:64:19:6C:7D:8B:34:7B:E9:0A:24:A5:D8:9A:7D:75:08:FF:0A
X509v3 Authority Key Identifier:
keyid:87:95:8B:A6:61:C4:35:CC:D2:5C:20:60:46:2E:F6:00:D2:71:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5WLpmHENczSXCBgRi72ANJxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:02:37:e3:d7:98:76:5e:d4:40:98:8d:fc:54:df:ab:85:2d:
29:af:1e:55:52:9c:6c:82:53:04:28:f8:a4:08:40:38:0d:9f:
fe:57:56:38:89:3b:db:2c:36:a4:8e:3b:6b:89:2f:25:54:25:
ff:fc:50:2e:15:98:f0:1a:1f:e0:e1:4a:c4:45:76:a9:96:ec:
3b:c7:27:53:14:78:f1:bc:85:aa:92:31:7f:a9:d2:5a:7f:2f:
f1:79:e4:b9:0d:41:fb:37:8b:c3:0d:19:ad:6e:19:34:08:25:
95:3f:ea:ee:97:f4:1a:24:dc:7d:e3:8d:45:f3:7e:aa:7f:32:
ad:ae:f0:70:c6:c6:f8:24:f2:e4:5b:b5:96:ce:45:7d:93:54:
0b:69:e9:34:24:c4:46:53:a8:5d:e7:d9:c1:b9:96:2a:98:32:
60:f0:ed:d2:9b:8e:bf:97:f1:83:58:6f:4f:ec:a2:b7:e9:31:
25:93:bb:9b:0a:d9:8f:32:de:87:ea:cf:ea:6d:91:63:1b:ab:
9a:cc:73:95:dd:14:f9:7f:43:d3:4a:d8:b7:e6:01:98:49:da:
c2:47:54:63:14:97:f5:b2:5a:c2:20:2e:00:d7:29:9c:03:61:
6c:6a:a5:d9:c8:e6:05:84:5a:59:a3:4a:88:8f:31:7c:46:ee:
d2:8b:40:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:16:46 2026 by rpki-client