Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: BdRryATdOIH1flTkUVmwSha8Aas1trsXCFHYcRf6CvI=
Subject key identifier: 4C:DF:9B:36:96:5C:F4:89:A1:D9:D1:83:D6:4A:E9:53:CC:BB:FA:A6
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 019DB1A173C5EA61D6015580B99A40CD179E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 0168
Signing time: Tue 21 Apr 2026 20:00:41 +0000
Manifest this update: Tue 21 Apr 2026 20:00:41 +0000
Manifest next update: Wed 22 Apr 2026 20:00:41 +0000
Files and hashes: 1: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: c463rH7mpR+nVqdAnyaSMnkTY2ozPLakfqQk9GcQc3A=)
2: pii4EjiWYU4Zm1fPwrFZx1lHAcc.roa (hash: uCsxcjM67iyaXfmTKhSaCnWCgdV8f42if+uMcnOjC+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:a1:73:c5:ea:61:d6:01:55:80:b9:9a:40:cd:17:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Apr 21 20:00:41 2026 GMT
Not After : Apr 22 20:00:41 2026 GMT
Subject: CN=4cdf9b36965cf489a1d9d183d64ae953ccbbfaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:d5:30:01:ab:12:08:54:50:e3:78:10:31:
3b:0f:71:7a:f2:a1:3b:75:b5:78:4b:eb:2b:19:92:
bf:6d:c2:ce:cc:95:c8:34:8f:57:01:df:f0:93:04:
05:a8:56:5d:7a:6b:0a:6e:28:5e:f5:7f:b6:0d:22:
fa:63:b2:3d:2c:dd:ea:c1:a7:34:fe:73:60:d9:a1:
08:f6:a3:cf:a2:6f:00:85:c9:bf:a4:01:f5:15:7a:
46:1d:cf:a1:d7:3d:33:44:c4:83:2e:e9:0d:ea:f3:
bb:e5:58:de:d8:ac:d0:9c:49:b3:a7:f2:af:69:67:
50:06:58:66:a9:2a:cc:39:b0:d9:c7:bc:87:52:18:
f4:3a:d2:2b:35:42:f6:73:77:52:13:65:7c:cb:8a:
0b:7b:8d:67:bd:ae:54:a5:e9:de:0a:6e:6f:0d:39:
04:68:11:3e:b5:eb:a8:f6:fc:77:9d:ef:08:d8:cc:
b3:5d:dd:d1:43:13:e3:d9:68:29:10:ed:97:29:6c:
5e:a1:1d:ab:1b:29:28:9f:81:20:5b:eb:d3:72:c9:
92:85:78:40:e2:cb:19:98:03:32:ee:71:af:39:f5:
e0:46:e0:80:2d:f2:55:14:e8:6f:b6:be:05:b3:28:
fd:a2:17:be:bd:a1:93:06:8c:e6:d2:47:11:d4:94:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DF:9B:36:96:5C:F4:89:A1:D9:D1:83:D6:4A:E9:53:CC:BB:FA:A6
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c4:7d:d4:b0:90:92:06:bb:84:8a:38:4f:3f:ef:cf:3b:0e:
0a:d4:36:d9:a7:8d:c2:04:22:5e:80:b8:18:75:66:45:79:fb:
8e:cc:95:57:a2:36:9a:61:c2:93:d3:fd:8c:ff:88:27:af:5c:
1d:3b:07:39:07:72:f8:09:66:39:a9:1b:7c:9c:d5:c3:7a:5f:
d1:f1:65:90:41:d6:5a:a6:5e:84:c3:79:e8:45:41:6d:d0:78:
63:c1:97:f0:40:0c:49:ee:2a:0c:da:54:5e:7d:67:ba:55:86:
ac:17:8d:b2:6f:2e:99:45:05:b3:e5:ac:95:75:3c:b8:aa:43:
6d:38:a6:41:00:30:23:c8:fb:2a:19:e3:28:5d:34:8e:f5:8c:
5e:b2:4b:54:4a:51:6a:5c:79:e7:cb:f1:f5:33:c7:76:6d:80:
81:ae:30:d9:8a:dc:76:bb:0c:0f:53:85:54:c6:e7:62:ad:58:
9f:74:79:e4:33:d0:cb:60:6e:05:43:db:03:e8:31:97:ce:16:
04:50:84:63:03:a5:11:75:96:ca:0d:b4:e0:d9:f0:e1:60:f6:
78:cf:b6:db:86:25:12:f7:70:92:30:ab:85:7f:3d:f2:d8:fc:
57:26:e3:ca:58:c0:e2:72:1f:bc:fe:a8:f0:63:aa:bc:9d:dc:
80:de:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:53:32 2026 by rpki-client