Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: rfz99OcCXRloM15JByf2dS9gE1SwfcxQ5A3k3xo3ez0=
Subject key identifier: 20:81:B2:68:FD:7B:46:75:44:5B:97:1A:49:1C:C4:8F:61:C1:88:78
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 01A06EDE2294AB491F26B24980DA85144AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 02D4
Signing time: Sat 05 Sep 2026 00:00:46 +0000
Manifest this update: Sat 05 Sep 2026 00:00:46 +0000
Manifest next update: Sun 06 Sep 2026 00:00:46 +0000
Files and hashes: 1: U9tquwjV-Fl1Rt7IVQP5hkEY43I.roa (hash: srgZ/d/1Mf+pXoVfocYHeRG57Srn6yyMLcULuvh4vxE=)
2: X7yocFTQF6cpDm4YRCXee2IMJAg.roa (hash: 47J3ggzuN8K15GJrL+w0gv5iDQyMBjOUoNghcomDNf4=)
3: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: ZlQloy9PjlU5kf+GGTeF5JgeFS6ATn78ruQiT+g7Whc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:22:94:ab:49:1f:26:b2:49:80:da:85:14:4a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Sep 5 00:00:46 2026 GMT
Not After : Sep 6 00:00:46 2026 GMT
Subject: CN=2081b268fd7b4675445b971a491cc48f61c18878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:d4:81:b3:fe:b0:70:3c:23:32:bf:bc:17:
6b:7d:87:a2:39:83:92:b7:6a:c3:85:b4:8e:cd:ae:
26:a1:36:97:b7:68:07:fc:ae:47:aa:34:a6:75:4c:
6c:d2:99:82:d3:f5:f0:5f:bc:5c:62:ca:9f:66:fe:
8e:72:4f:14:67:c6:b5:35:be:28:18:3f:8d:9f:f8:
ad:05:1b:6a:dc:6d:59:ad:b6:3e:35:e2:e2:61:77:
4c:87:68:ad:d6:96:fb:c8:92:dc:1b:cb:f3:55:7f:
c8:21:42:e2:8f:3e:7f:c0:5f:8e:33:68:89:fd:f9:
6a:f2:07:20:4b:a9:74:e5:c0:b9:17:ab:8b:c0:46:
8d:d1:f0:c0:63:ba:a9:55:97:3a:7f:8b:a1:69:8e:
d7:79:e1:b7:91:d7:de:7e:5f:06:98:41:29:2f:1a:
e3:0d:0c:6f:6d:e8:21:9f:d5:cb:29:b5:c2:a6:fb:
4c:fc:6e:dc:2b:ea:14:91:3e:a2:d9:13:d1:68:fa:
4b:5c:fb:a6:0f:02:d2:be:4a:b2:b5:4b:af:9e:d1:
60:9b:db:f4:e4:3b:fe:bd:42:7b:4f:ac:5b:a5:15:
70:78:0f:b7:9e:f4:c7:4a:f8:67:1c:8e:93:38:5f:
ba:31:d6:00:9a:76:3d:e1:6c:37:db:58:0a:fc:39:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:81:B2:68:FD:7B:46:75:44:5B:97:1A:49:1C:C4:8F:61:C1:88:78
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:ef:f0:40:31:d5:96:49:cc:eb:fb:de:ca:eb:d0:57:d0:73:
8f:d0:2e:95:2e:2e:a8:ef:fc:10:a4:e7:6d:1f:12:9f:60:0c:
4a:7f:36:22:cb:39:ad:21:d2:e4:7e:7f:cb:e9:5c:8b:48:a9:
2c:05:d0:82:e6:d8:7c:96:6e:3d:95:3d:13:eb:90:b6:11:28:
93:bf:aa:46:af:d7:a1:10:b1:08:1c:6d:bd:dd:92:86:1b:7c:
2f:b8:44:d1:88:57:04:fc:50:21:9a:56:1e:ed:10:58:78:5a:
75:91:75:90:8f:be:94:64:dc:92:6f:38:2b:cd:56:da:7d:6a:
1c:aa:3c:10:e4:8a:06:2f:00:48:5f:89:b2:cc:fe:33:58:aa:
d7:c6:54:4e:d1:8d:c8:d7:cf:f7:b3:b7:e0:ff:dd:46:99:fa:
9b:51:46:a7:ad:76:15:88:47:72:30:f8:75:a1:75:6a:17:a8:
a3:49:b7:93:c3:42:0d:24:a4:92:0d:8f:01:3d:27:1f:d6:4b:
42:bc:4f:44:97:f7:77:74:e8:a4:af:36:24:a5:b8:e4:cb:c9:
1e:4c:46:46:05:8d:04:df:06:5b:22:b6:7c:b2:b1:f7:cb:f6:
3a:e0:25:32:fa:7d:4d:97:fc:87:04:41:c2:ae:30:c2:91:a6:
43:80:d6:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBu3iKUq0kfJrJJgNqFFEq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YzQ4ZmM1YzJlYjJjNzRhMjQyYTQ3YmQzMjE1NzdlOGYx
ZTZhNzEwHhcNMjYwOTA1MDAwMDQ2WhcNMjYwOTA2MDAwMDQ2WjAzMTEwLwYDVQQD
EygyMDgxYjI2OGZkN2I0Njc1NDQ1Yjk3MWE0OTFjYzQ4ZjYxYzE4ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRnUgbP+sHA8IzK/vBdrfYeiOYOS
t2rDhbSOza4moTaXt2gH/K5HqjSmdUxs0pmC0/XwX7xcYsqfZv6Ock8UZ8a1Nb4o
GD+Nn/itBRtq3G1ZrbY+NeLiYXdMh2it1pb7yJLcG8vzVX/IIULijz5/wF+OM2iJ
/flq8gcgS6l05cC5F6uLwEaN0fDAY7qpVZc6f4uhaY7XeeG3kdfefl8GmEEpLxrj
DQxvbeghn9XLKbXCpvtM/G7cK+oUkT6i2RPRaPpLXPumDwLSvkqytUuvntFgm9v0
5Dv+vUJ7T6xbpRVweA+3nvTHSvhnHI6TOF+6MdYAmnY94Ww321gK/DnHcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCBsmj9e0Z1RFuXGkkcxI9hwYh4MB8GA1UdIwQY
MBaAFIfEj8XC6yx0okKke9MhV36PHmpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDhTUHhjTHJMSFNpUXFSNzB5RlhmbzhlYW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZDIzNTktMmM0YS00MWI2LWExYjYt
NTVlNGM5MmE1ZDUwLzEvaDhTUHhjTHJMSFNpUXFSNzB5RlhmbzhlYW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZDIzNTktMmM0YS00MWI2LWExYjYtNTVlNGM5MmE1ZDUw
LzEvaDhTUHhjTHJMSFNpUXFSNzB5RlhmbzhlYW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0O/wQDHV
lknM6/veyuvQV9Bzj9AulS4uqO/8EKTnbR8Sn2AMSn82Iss5rSHS5H5/y+lci0ip
LAXQgubYfJZuPZU9E+uQthEok7+qRq/XoRCxCBxtvd2Shht8L7hE0YhXBPxQIZpW
Hu0QWHhadZF1kI++lGTckm84K81W2n1qHKo8EOSKBi8ASF+Jssz+M1iq18ZUTtGN
yNfP97O34P/dRpn6m1FGp612FYhHcjD4daF1aheoo0m3k8NCDSSkkg2PAT0nH9ZL
QrxPRJf3d3TopK82JKW45MvJHkxGRgWNBN8GWyK2fLKx98v2OuAlMvp9TZf8hwRB
wq4wwpGmQ4DWeQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:44 2026 by rpki-client