Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: xzEy4TCNEJPaFXucskoOc0UhLOXLzn7UrOAmlL/MYWk=
Subject key identifier: B8:9E:08:6E:C0:78:BE:FD:FB:6E:59:51:12:8A:F2:CD:67:5A:60:A9
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 01A16DC8A2F523F28B1032596B05D71B4C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 0358
Signing time: Sat 24 Oct 2026 12:00:27 +0000
Manifest this update: Sat 24 Oct 2026 12:00:27 +0000
Manifest next update: Sun 25 Oct 2026 12:00:27 +0000
Files and hashes: 1: U9tquwjV-Fl1Rt7IVQP5hkEY43I.roa (hash: srgZ/d/1Mf+pXoVfocYHeRG57Srn6yyMLcULuvh4vxE=)
2: X7yocFTQF6cpDm4YRCXee2IMJAg.roa (hash: 47J3ggzuN8K15GJrL+w0gv5iDQyMBjOUoNghcomDNf4=)
3: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: gTKOcpEPIAX2ln7j6tgyrxjNVJJCDcfpf6W3ka7UjlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:c8:a2:f5:23:f2:8b:10:32:59:6b:05:d7:1b:4c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Oct 24 12:00:27 2026 GMT
Not After : Oct 25 12:00:27 2026 GMT
Subject: CN=b89e086ec078befdfb6e5951128af2cd675a60a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:46:6c:06:cc:5b:db:f4:0a:38:70:31:6c:
70:e0:00:00:1c:f4:0c:ea:b6:7a:bf:9f:a5:2b:d9:
55:cf:aa:52:2e:44:83:de:18:8b:65:8c:1d:b5:4c:
8f:df:52:cf:80:2b:63:87:2d:48:e2:65:96:a0:2b:
87:6b:27:1f:ba:1e:e7:a4:a9:33:c4:da:c3:07:dd:
e3:c7:80:26:8d:20:4b:2a:be:b8:cd:0f:3c:e4:a7:
ec:5d:e9:c7:5d:de:d7:e8:c4:f1:52:bc:97:98:2a:
66:41:dd:10:7a:00:ec:a5:c7:16:07:0c:e3:2c:75:
80:2d:4d:eb:57:2a:7d:31:2a:b2:6d:00:2f:3f:fc:
43:a6:fb:12:ab:c3:06:97:43:86:a5:78:b7:c7:28:
c4:5d:bb:9e:51:dd:a6:34:24:84:36:a3:b3:3e:48:
b1:5f:1c:52:82:81:02:67:f5:0a:79:6f:c8:ef:8e:
ee:b4:c2:3f:bd:d3:f2:70:37:df:4d:b6:1f:fc:d4:
a3:5d:d1:9f:f0:24:38:c7:89:e0:5c:0c:1c:73:c8:
09:7a:e3:c3:a3:16:ab:a0:d7:31:ee:f9:4d:31:0b:
b8:29:68:5e:14:42:31:3d:4a:20:cc:3c:41:fd:f7:
f4:84:3a:47:9f:0d:6c:b2:eb:fc:18:3c:a9:26:21:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9E:08:6E:C0:78:BE:FD:FB:6E:59:51:12:8A:F2:CD:67:5A:60:A9
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:36:01:05:f9:ea:52:27:7e:a4:c2:14:25:21:e6:94:0a:80:
57:3d:24:8d:f1:77:d8:33:4a:4b:b9:a8:84:de:3d:50:9e:d7:
0e:df:20:27:16:08:2a:58:d8:71:d0:fa:e2:93:4f:bf:58:9d:
ae:b7:d4:09:97:5b:35:ff:d1:0a:44:00:b2:e6:54:81:69:a8:
99:17:17:16:86:81:d4:8e:6f:b2:42:4f:83:7b:ab:c4:5b:cc:
90:fc:81:ea:d4:a4:f4:5c:e9:38:3f:ae:b3:88:e3:e6:2f:74:
19:93:3b:b4:a6:ae:96:37:2c:cf:7f:b9:4d:b7:aa:b9:d5:7f:
d4:4d:b0:19:f8:4d:de:5b:e9:6a:51:93:15:3a:f2:72:22:16:
5b:50:62:d7:d6:29:27:e5:c2:12:09:f8:b2:bf:09:42:dd:8f:
81:2e:88:c6:3d:13:f9:d6:df:fc:4f:ea:36:dd:1b:eb:59:ef:
ca:a5:b7:40:00:6b:93:8d:b2:61:35:36:d5:9f:8e:fd:50:d5:
ca:b1:6d:09:26:05:08:bc:5b:c4:42:39:92:67:ed:aa:99:7a:
91:6c:51:49:0f:0c:b7:61:54:bd:54:de:9a:0f:4f:5e:18:44:
82:63:41:be:1c:a0:89:d1:01:b4:e4:05:ee:1a:f5:76:7a:ef:
d7:ef:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:44 2026 by rpki-client