Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier: 0Y8sV63eTCzbKkiLtXjbetck62an0amLe/2Xi9TCB6w=
Subject key identifier: 6C:EB:D8:73:45:A5:1D:8F:E1:BB:20:49:2D:4E:38:E4:4C:07:74:BE
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 01A08CE8BF39BAD6C6551435CF682C88EB7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number: 0DD1
Signing time: Thu 10 Sep 2026 20:00:58 +0000
Manifest this update: Thu 10 Sep 2026 20:00:58 +0000
Manifest next update: Fri 11 Sep 2026 20:00:58 +0000
Files and hashes: 1: 3I57kWj-MwOuWGgEJOOA7NVOnaw.roa (hash: u4MWGRCWmsfLRNP506Vpdbs2aaAzu9zhtPD+IDIYvpU=)
2: CnF9cjlgaGUvfor-A11xEctTpak.roa (hash: lSwL0usE/Gb/GkCss8GSY6ht7fo/KB8MqQdEL3prjBY=)
3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: T7ZaYdgW0oljGDCoNSKvKC1/ykV/+y/tFaHK2yx6xEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:bf:39:ba:d6:c6:55:14:35:cf:68:2c:88:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Sep 10 20:00:58 2026 GMT
Not After : Sep 11 20:00:58 2026 GMT
Subject: CN=6cebd87345a51d8fe1bb20492d4e38e44c0774be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5c:ef:f7:8e:db:5a:ec:94:83:89:aa:66:b1:
2b:34:08:a1:4f:45:78:bf:33:a3:05:c2:2d:c2:c1:
f8:c7:f3:34:85:e7:73:ab:b6:0f:bc:7c:4f:d5:f7:
43:73:30:cc:52:44:31:a4:9e:54:68:c3:65:7d:e8:
7e:18:14:b5:01:c3:4f:86:0a:7a:ff:a4:0b:dc:ff:
6e:a4:99:39:ee:69:39:39:b0:7c:88:7c:b1:5c:a0:
07:7d:89:85:3f:88:db:34:79:aa:b1:a5:11:13:4f:
85:64:16:1e:51:e8:51:ec:3b:51:dd:ef:33:aa:a8:
7a:da:57:0f:2c:94:e7:ba:88:20:6f:01:34:72:8e:
a1:55:92:d5:2c:7b:c3:8c:aa:98:1c:50:28:a8:01:
88:8b:1e:4f:30:65:81:9c:d1:d2:0f:cb:60:6d:93:
79:ad:1f:66:28:b7:d9:f8:4b:12:8c:2b:15:38:46:
9e:38:27:2f:04:84:64:df:24:67:39:34:00:b3:5b:
7e:81:81:ab:67:da:48:ab:72:b5:db:dc:22:dd:11:
0c:c3:25:4a:88:b6:43:62:11:b0:85:71:5d:ab:7a:
75:d7:70:d1:db:e8:dd:81:5a:d9:5f:ac:ba:64:58:
2b:da:fc:7d:d0:b9:58:46:09:37:6d:4f:4f:2e:58:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EB:D8:73:45:A5:1D:8F:E1:BB:20:49:2D:4E:38:E4:4C:07:74:BE
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1f:46:00:27:35:a8:c2:b2:f5:af:36:c6:d1:2a:2c:34:78:
46:79:40:61:7f:91:dc:14:6f:76:e0:dd:a3:1f:cc:9e:ed:80:
b9:d9:c9:52:3e:54:74:dc:89:6b:76:6b:8e:65:47:56:5e:5b:
36:9b:23:7b:c5:25:3b:c1:c4:d4:2b:6e:53:e4:45:65:99:0f:
5f:93:c3:6d:23:0e:09:23:97:c4:64:29:91:c1:6f:b8:25:47:
36:69:e4:3a:85:bb:84:54:d6:a0:99:22:75:9f:bd:ef:ed:94:
77:88:b2:be:f8:87:6b:84:b9:a1:74:ac:26:05:d0:38:90:b3:
6b:33:bf:51:68:00:3d:2e:7a:52:0d:69:a2:55:77:cc:00:12:
a3:4e:19:f4:9d:3e:ec:a7:0f:58:63:91:27:e7:29:db:a2:77:
dc:3c:9e:aa:35:66:a4:06:bc:a5:55:9d:db:27:0f:64:1f:3f:
4a:b6:e4:6b:04:c3:ef:60:15:7e:8e:24:f0:79:49:a2:71:fc:
60:f1:c0:53:51:f4:66:cd:2f:55:f1:af:2c:4e:04:a3:28:2f:
3d:23:5e:c7:80:92:e7:fe:f6:f8:b1:57:15:76:3c:77:c2:95:
2b:f5:d9:a6:43:d4:33:16:7a:7f:35:8a:4e:60:8d:0f:3b:84:
9f:a6:cb:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:26 2026 by rpki-client