Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier: bg9ZH6fgfBe9eXfZG7wf4a5ND6lAfqnbcaXWLjy6Kz8=
Subject key identifier: 92:1F:70:19:14:91:E4:D0:96:6F:85:4D:06:FB:3A:9D:BF:A0:02:9B
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 01A186083B33E7E0F972A86562FC0944F8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number: 0E52
Signing time: Thu 29 Oct 2026 05:00:48 +0000
Manifest this update: Thu 29 Oct 2026 05:00:48 +0000
Manifest next update: Fri 30 Oct 2026 05:00:48 +0000
Files and hashes: 1: 3I57kWj-MwOuWGgEJOOA7NVOnaw.roa (hash: u4MWGRCWmsfLRNP506Vpdbs2aaAzu9zhtPD+IDIYvpU=)
2: CnF9cjlgaGUvfor-A11xEctTpak.roa (hash: lSwL0usE/Gb/GkCss8GSY6ht7fo/KB8MqQdEL3prjBY=)
3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: l+H7fIX8z/UpRwPmkavjaBdpFO/HJGUn+ODgDYUE5aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:3b:33:e7:e0:f9:72:a8:65:62:fc:09:44:f8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Oct 29 05:00:48 2026 GMT
Not After : Oct 30 05:00:48 2026 GMT
Subject: CN=921f70191491e4d0966f854d06fb3a9dbfa0029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:b8:a9:1d:19:ab:12:83:99:79:15:1e:99:
02:75:99:c0:1c:08:20:18:9f:9d:c9:16:b0:71:44:
bd:f7:26:19:0d:0e:3b:6a:44:5d:3c:09:a4:e3:1d:
65:b8:cc:f1:2a:17:5e:86:38:72:ec:5f:ce:62:a2:
5a:f7:0c:fc:b3:b9:35:80:8a:b5:26:6e:04:b0:d5:
51:34:40:18:d1:70:3b:67:c6:a3:de:44:a5:52:f7:
91:52:86:0f:de:20:72:3d:4d:f8:26:ad:ae:c4:87:
2d:01:31:7a:f8:63:25:54:ce:78:55:8a:f4:cc:9b:
38:53:7d:39:a7:93:62:26:4c:22:d1:59:3d:cc:7f:
37:dd:86:4b:56:f2:88:b9:19:a6:aa:2e:ff:80:45:
5d:fe:7e:d3:00:29:ab:66:c7:8d:33:3d:3f:ce:2f:
e4:28:70:3b:59:7f:b1:f2:be:c9:fd:41:91:23:f4:
cc:04:c7:41:0a:83:59:51:c3:84:cc:83:bf:45:42:
f1:b8:a1:ef:2d:37:8e:21:d7:85:3f:d0:6b:12:44:
34:f9:4e:77:c8:61:91:1c:4e:8b:04:d0:23:0b:43:
9c:4a:44:ba:34:b5:ac:87:60:46:1c:4e:62:c2:1c:
db:d6:b8:6f:1e:db:7a:41:7d:09:bd:8d:d3:31:bc:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1F:70:19:14:91:E4:D0:96:6F:85:4D:06:FB:3A:9D:BF:A0:02:9B
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fa:cc:c3:49:7f:98:86:6e:bd:bc:7e:37:09:db:c7:b1:2f:
1d:48:3f:ce:2e:1f:8c:0a:dc:62:69:75:01:ae:ef:5c:3c:c8:
65:30:74:6e:e2:9b:d7:7e:86:7f:5d:6e:b3:fa:e9:0e:34:90:
03:57:af:de:19:d6:e1:46:2d:f8:92:9f:55:28:27:64:72:d1:
f1:1d:c4:6c:f2:9d:b2:6c:2c:1a:9e:6b:53:1a:ed:05:d7:95:
de:32:d2:4a:0e:68:59:f5:9c:92:f7:20:1a:ce:b2:d1:f6:92:
a2:25:b9:4e:95:12:28:c7:f9:dc:58:88:14:b9:e7:b0:8b:0f:
5b:67:c2:d6:13:8b:46:d8:77:fa:69:6f:1c:4f:ef:16:5c:38:
1a:72:33:86:5e:3b:e1:10:e5:ec:3e:26:a6:e9:22:8f:a7:91:
01:e2:32:a8:49:45:ff:59:cf:b0:b6:51:55:4c:ca:28:d0:80:
61:74:34:93:c1:6d:9c:9b:57:84:b0:76:c8:6e:ba:9c:e1:41:
b7:d2:26:2d:da:9a:bc:b6:64:b5:42:66:4e:2c:73:32:6d:3b:
45:2d:2c:90:32:96:cc:99:fd:68:b5:42:b7:a4:e8:a2:91:93:
f6:d7:c1:17:cb:d5:23:0b:db:0f:5b:e0:2a:60:5f:43:80:2a:
a3:78:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:59:32 2026 by rpki-client