Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json)
Hash identifier: BYPrVn3PlAxwYsMGK98dlMYIZkhEu+JHJL6VFIn7H9k=
Subject key identifier: 70:F5:7C:3C:C9:28:F8:5B:BB:4D:0E:7A:33:F8:5A:E3:5F:FE:C3:8B
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 019D386634DAFD94EFCBCD19D881CA93E49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
Manifest number: 0924
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: 8gaFDPVm7425HwLUH8kmf-jVUCE.roa (hash: U1D2gfVixMPcnJRary8djiMaZdiJbp1bCUJ4yOL20hY=)
2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: wDLvOoBaLIDFxj99pB+YR+Yn+v8RRXJeyDMDeEeJ7TQ=)
3: ydGFE-vOjkRoY9XDm0d0hrrNVz0.roa (hash: ip0u+uChx3w8r1t9QF+aKgGRt/jAva0+561xQaWYRlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:34:da:fd:94:ef:cb:cd:19:d8:81:ca:93:e4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=70f57c3cc928f85bbb4d0e7a33f85ae35ffec38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:54:fd:94:1f:70:f0:64:d2:24:04:78:ba:
6a:f1:c6:65:e0:87:d4:68:5c:4b:54:da:a8:6e:3e:
b1:11:95:cc:ee:08:0c:a7:3e:38:60:2f:06:97:54:
57:38:ca:22:14:ad:39:97:62:06:01:84:27:7b:b5:
d8:4f:da:65:bc:f4:ec:28:c5:b4:16:ba:8d:7e:18:
df:c9:4b:a8:80:98:70:1e:88:0c:04:45:4c:73:68:
9b:0c:67:44:df:0f:15:f7:7c:4b:1f:be:74:4b:ba:
1a:cd:1e:6b:c4:88:5a:6f:98:95:db:ae:3f:38:a7:
40:82:5a:66:54:cd:98:9c:95:44:60:81:d7:36:67:
29:f3:ae:fb:cf:d7:eb:88:6d:cc:3f:16:5e:cb:25:
5b:a7:37:5f:c1:fd:5e:e3:a1:28:ce:35:45:97:0d:
60:ac:e3:24:48:8d:87:f2:e2:71:2a:74:34:eb:8c:
28:f7:b3:d9:dc:60:84:c3:61:10:b8:e0:5c:8c:41:
f5:4b:15:fa:a9:b7:e9:b7:29:c1:5e:d7:79:ee:08:
8a:c9:74:6e:47:9b:e1:a0:f4:f9:b7:57:48:c2:2d:
ee:8e:25:92:85:df:57:41:25:26:ec:85:b1:ba:9a:
fc:26:bb:07:52:08:b2:ef:29:52:03:3b:41:d7:27:
b6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:7C:3C:C9:28:F8:5B:BB:4D:0E:7A:33:F8:5A:E3:5F:FE:C3:8B
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9a:78:ec:f5:dc:ca:0c:81:6f:e9:41:df:6c:af:73:54:13:
3c:26:7e:fc:99:84:82:d9:0c:1d:5e:23:a1:d0:03:5c:e4:cc:
33:2d:91:cd:60:76:74:b9:32:46:b4:69:66:5b:ad:84:4a:57:
b9:60:02:be:d6:62:b5:3a:b4:29:cc:5b:cc:fb:9a:8a:bb:e3:
75:97:3f:05:db:1c:8a:78:3b:12:a2:42:69:f5:f7:85:20:e3:
18:56:c9:78:65:cd:48:93:c0:bb:9c:31:ee:8e:d3:2d:5f:6f:
76:9f:17:13:19:f2:ac:51:d4:12:68:20:dd:52:24:06:53:22:
03:c0:5f:bb:a9:e3:30:ec:ab:2e:c3:31:48:fd:b9:1f:9e:dc:
a1:0c:bb:0f:ce:22:af:ac:53:ad:c5:b4:5c:93:bc:23:b4:ff:
31:79:60:5e:b0:fb:0c:7a:b6:f3:74:88:20:eb:34:66:73:a0:
60:36:9c:0a:28:ff:a6:2e:17:35:f3:2f:3b:7b:2b:10:21:81:
93:3e:ee:85:b8:ec:59:40:6f:90:38:51:e3:88:77:57:c2:c4:
67:0d:02:7a:15:66:21:a4:d9:14:bc:05:34:8c:0c:83:18:70:
ea:52:01:8c:79:78:1f:f2:54:af:6c:00:04:fb:e1:6c:7c:8c:
13:b0:d4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:48 2026 by rpki-client