
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: VHFPIQD8pm0bDWgbATAtkLjXYsUafAaayDF7ebIS+kQ=
Subject key identifier: 05:0F:B1:95:C2:31:51:1E:E9:86:63:D3:1D:B6:13:12:93:EE:D5:D3
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 01A004395AAB51DB0F77ECE162A62EDE47DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 1A04
Signing time: Sat 15 Aug 2026 07:01:02 +0000
Manifest this update: Sat 15 Aug 2026 07:01:02 +0000
Manifest next update: Sun 16 Aug 2026 07:01:02 +0000
Files and hashes: 1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: LS9I4HF2M3Tu7vBF/eil08wkieZrQqngXpToIFN3DRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:39:5a:ab:51:db:0f:77:ec:e1:62:a6:2e:de:47:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Aug 15 07:01:02 2026 GMT
Not After : Aug 16 07:01:02 2026 GMT
Subject: CN=050fb195c231511ee98663d31db6131293eed5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:0f:f1:10:bb:fe:b6:95:62:bf:37:e9:4c:
b4:86:10:87:3f:47:2e:b3:b2:cf:a0:3c:c6:62:56:
d6:25:9c:c1:7b:07:d8:b0:ba:94:b2:40:fb:9d:f4:
ec:7b:06:dd:58:69:3d:2a:a0:f2:83:67:67:84:a6:
13:6e:18:4e:25:21:55:da:4b:6d:56:42:be:b6:4f:
10:bd:03:df:cc:cc:69:e9:ca:3d:2b:0e:26:89:27:
60:e3:c1:18:35:aa:f8:89:2a:c9:b0:dc:84:13:3a:
33:b4:a9:de:fb:52:da:9e:d2:e3:65:06:3a:10:96:
3c:19:b6:7d:f7:15:50:05:0d:e6:19:c7:f9:f0:d5:
f4:9e:b0:52:bb:00:22:e3:c0:46:e6:4b:ae:31:0d:
68:4b:35:6e:80:73:59:b8:69:b4:8a:1f:fd:f8:2c:
eb:ef:80:05:51:2d:31:55:ea:61:05:6b:ef:0e:48:
1d:c1:9c:30:a2:7e:3c:5a:02:dd:5c:7c:04:51:14:
71:48:49:ab:9f:a7:4a:b1:29:46:41:87:5c:ef:13:
24:c1:9d:8d:fe:b5:7d:0d:59:d6:5f:55:77:23:69:
fc:11:18:18:a0:11:19:3f:f0:02:2e:27:1f:9d:92:
5b:ec:e8:16:20:4e:7e:cd:79:1a:7e:ba:08:82:6e:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0F:B1:95:C2:31:51:1E:E9:86:63:D3:1D:B6:13:12:93:EE:D5:D3
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:19:76:5c:99:f1:70:00:12:f3:e5:cc:7d:96:73:b9:dd:80:
5a:bc:fb:cb:57:3b:f0:5d:2f:00:3d:91:07:4f:81:d7:56:d5:
24:cb:7c:7d:e9:ad:11:dc:b5:de:07:78:11:dd:6c:37:ab:c4:
8b:e2:0a:d5:d0:11:94:cb:75:24:7d:97:ee:66:be:75:80:70:
2c:a5:30:74:49:c2:57:8d:50:60:e9:a3:6e:2f:2e:97:ff:43:
33:85:b4:ad:a1:4a:13:a4:b2:42:d0:c2:e4:b4:18:eb:57:62:
2c:23:d2:bc:c2:c9:ea:79:e1:0a:7d:ac:95:2d:c3:31:95:c7:
3c:fc:70:c6:b5:17:a9:c9:b3:42:bf:6c:32:74:a3:21:70:96:
88:58:36:4b:ec:c9:86:a6:f4:44:8c:7c:72:67:76:8b:6e:01:
b6:05:ec:b4:86:27:30:c4:3e:98:18:4f:d8:54:bf:ed:98:46:
54:ee:cd:29:63:9d:32:d1:64:1f:51:cc:ab:01:f4:91:1e:af:
4c:32:4c:f1:98:2d:e0:ca:d3:d0:1a:e4:78:f2:ee:a7:a6:17:
65:5c:0e:a8:05:19:84:5b:85:e5:d5:98:2c:1d:91:c7:3b:7b:
c0:53:39:54:b9:74:a0:a0:15:ad:99:55:52:7d:f6:9c:94:52:
ba:b6:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:27:06 2026 by rpki-client