Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: pzOQ/rbc/bEPg/B9lx0JBvfu3b93vHa1Ks7mF2uP1N8=
Subject key identifier: D6:76:4E:EA:88:CB:26:B4:75:02:6A:BE:F9:41:E9:00:B2:D2:07:A4
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 019F834330DF12837ECDB039447411E601B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 025A
Signing time: Tue 21 Jul 2026 06:00:46 +0000
Manifest this update: Tue 21 Jul 2026 06:00:46 +0000
Manifest next update: Wed 22 Jul 2026 06:00:46 +0000
Files and hashes: 1: U9tquwjV-Fl1Rt7IVQP5hkEY43I.roa (hash: srgZ/d/1Mf+pXoVfocYHeRG57Srn6yyMLcULuvh4vxE=)
2: X7yocFTQF6cpDm4YRCXee2IMJAg.roa (hash: 47J3ggzuN8K15GJrL+w0gv5iDQyMBjOUoNghcomDNf4=)
3: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: aWOosivssdWUe8csQsPf41bb6xNQU3P75/2LU0dkUeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:43:30:df:12:83:7e:cd:b0:39:44:74:11:e6:01:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Jul 21 06:00:46 2026 GMT
Not After : Jul 22 06:00:46 2026 GMT
Subject: CN=d6764eea88cb26b475026abef941e900b2d207a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:43:51:0b:7d:40:26:93:22:a4:8d:2e:bd:
f2:1c:9b:5d:81:c1:01:23:6c:a5:29:8d:58:fe:87:
53:cf:d0:c1:0e:75:71:e8:90:1d:29:eb:69:97:87:
e5:04:83:5e:f1:b9:be:16:64:6a:80:c9:40:c7:ea:
27:d8:cb:5d:d7:c2:b5:f0:42:9f:18:b8:73:bf:ba:
28:aa:b6:a3:52:dd:0a:5c:c6:0c:6d:25:08:66:9f:
96:9f:8a:36:a4:27:ed:05:14:b1:2f:54:8c:5e:54:
29:e0:8c:a4:b5:64:7b:f0:0d:eb:a5:21:d9:c0:96:
b7:fc:82:cc:06:f9:ac:18:88:74:65:6f:8d:8a:67:
68:ee:08:4e:b6:3a:4d:76:6c:bc:fe:9a:f3:5a:af:
9e:3c:2f:f8:17:78:23:90:31:48:95:72:42:56:ee:
9e:9a:b8:da:e5:49:7b:9d:33:4e:35:4d:7d:35:bd:
c6:5c:aa:21:72:28:ec:ec:8e:ce:fb:ab:90:e3:90:
c4:04:9c:e8:f5:b0:9a:e2:f6:19:fa:dc:ce:9a:93:
59:15:b2:5d:f3:2c:3f:b6:2b:62:e2:c4:8b:4e:f0:
8e:cc:74:9d:81:29:70:a9:f6:9c:7a:ab:c1:ed:ca:
d5:14:5c:a5:d6:59:ff:91:92:e2:61:fa:f0:95:3f:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:4E:EA:88:CB:26:B4:75:02:6A:BE:F9:41:E9:00:B2:D2:07:A4
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ff:41:99:bc:4a:1e:6f:12:59:29:11:32:46:ac:99:56:49:
4d:c6:ef:13:c3:63:75:3d:83:34:df:ca:ce:8b:38:ed:5a:f9:
28:ac:15:3e:e7:78:f9:fd:60:ea:cf:14:6c:b2:77:25:56:b1:
73:4b:47:34:cd:ef:2a:0e:16:89:49:e8:f2:69:c1:85:b5:0b:
0f:fc:6a:17:00:ba:b7:cd:47:5a:f2:8e:8a:74:51:4e:22:08:
43:28:75:b2:aa:ad:23:b0:5c:ef:a0:a1:ae:a4:c1:30:7d:52:
bf:e3:ff:ac:ed:cf:70:1b:23:5b:b1:f0:76:6f:d0:08:02:4b:
87:a7:3a:ca:11:8a:6e:00:05:3a:b8:26:50:78:c9:f4:56:bc:
cd:22:f6:ab:15:d9:fc:2a:b3:6b:cd:b4:ed:d6:78:24:bb:ea:
ab:0d:15:09:1a:bf:14:98:5c:76:65:23:c6:9d:65:6a:6f:40:
fa:f9:9c:1e:b2:16:a4:38:07:d3:cb:df:7e:b3:fd:80:d5:bd:
e1:d8:6c:71:25:9e:da:e6:e6:89:b5:aa:22:3f:41:75:63:b1:
c1:12:52:7e:9f:41:33:23:0f:28:00:91:ac:41:d6:ec:73:75:
a6:38:10:a7:0d:7f:f8:67:8d:e4:e7:2c:f7:bd:de:80:df:36:
0f:b2:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:58:46 2026 by rpki-client