Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: wBPjq8zU+U+ZK0tBjtZwnJ71kLRxuc+zllvwJuptI5o=
Subject key identifier: 68:1B:95:24:44:F2:4D:B0:8B:99:9A:22:D3:D1:1D:8B:EA:B1:9A:D8
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 019CF8739BF0E9A3410B57EFF9386B131A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 0786
Signing time: Mon 16 Mar 2026 21:00:51 +0000
Manifest this update: Mon 16 Mar 2026 21:00:51 +0000
Manifest next update: Tue 17 Mar 2026 21:00:51 +0000
Files and hashes: 1: c1HdnsaldKTIKaEky6ateQiz5kY.roa (hash: C5p2Kdt/yLKTGq1QeYyJYKudSwTzAauf7jP1eJuSAr8=)
2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: 9SEE1EB46XKFLWfdtsnE3ZawT/I7W2gB7SAHzgGK7m0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f8:73:9b:f0:e9:a3:41:0b:57:ef:f9:38:6b:13:1a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Mar 16 21:00:51 2026 GMT
Not After : Mar 17 21:00:51 2026 GMT
Subject: CN=681b952444f24db08b999a22d3d11d8beab19ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:d6:31:41:f9:ca:97:39:b9:95:75:3a:a6:
59:db:ea:a2:20:61:8a:b0:01:99:93:ca:2a:de:af:
e0:22:6e:c5:10:fc:04:3b:f0:03:ba:1f:54:55:a6:
7b:26:ae:ae:32:ba:68:13:3a:cd:13:4c:14:d1:05:
22:96:7b:37:54:ee:7f:f0:15:11:19:d3:19:5b:ab:
6b:72:2b:b9:b2:a2:d4:94:18:21:72:ed:1b:b6:ac:
c9:03:83:05:e2:9d:eb:7d:80:5e:fc:67:cb:6a:cd:
4d:d9:67:9b:dc:e2:11:70:8d:ef:cf:f8:ae:c3:25:
02:91:17:aa:89:0a:6b:18:06:35:1e:74:b1:fd:3c:
59:61:47:a0:2a:1d:eb:ba:d8:3a:fb:d0:77:4d:e8:
5f:7d:a4:c7:4a:53:ee:1b:2f:b3:f6:bf:9e:bd:5d:
54:6f:6b:cd:a7:97:cc:73:36:ef:73:d0:72:88:48:
a8:a8:db:7f:be:1e:28:a1:68:a4:61:e0:c9:28:2b:
5c:54:53:45:e2:66:39:29:07:22:43:70:e6:03:4a:
5a:50:f3:dd:c4:d0:72:74:51:d0:7d:19:4f:90:b9:
3e:ec:82:2f:65:9e:eb:f5:5d:01:25:39:8f:01:f9:
9d:54:c2:6e:14:3a:36:2c:88:75:11:2d:1a:94:62:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1B:95:24:44:F2:4D:B0:8B:99:9A:22:D3:D1:1D:8B:EA:B1:9A:D8
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:be:69:db:51:2a:ef:85:47:bb:db:7b:b9:b9:d2:3d:1e:cb:
7a:bd:41:1b:bb:89:75:bb:1f:1c:9b:85:94:ab:16:2c:d9:a1:
bd:6c:ed:a5:eb:37:47:e7:11:e9:0f:9f:89:a5:eb:78:92:b2:
13:24:b1:cc:72:51:3b:0b:cf:70:ce:55:ad:a8:95:5c:e4:25:
bd:65:05:3c:fd:dc:fc:80:ff:7b:54:3e:9e:15:06:ea:ae:f0:
55:0a:f5:37:e7:9c:c0:ad:f2:fe:a9:70:a0:6b:59:04:7e:3d:
8d:4c:b2:6c:d8:3d:af:96:bd:2d:a2:7b:14:9c:98:04:f5:71:
38:ac:d2:98:1c:36:c0:f2:28:96:44:72:5d:fd:d0:7a:52:7f:
c4:68:6b:b4:c9:56:e6:83:82:26:d3:e8:45:90:c5:eb:d9:9d:
22:03:62:43:91:c1:72:4d:39:e5:9c:7c:c8:f9:5c:81:4d:61:
18:08:4d:72:a4:47:2b:7b:65:b1:6f:66:53:11:f5:f6:a7:30:
36:06:9d:d3:99:67:22:2a:e3:2c:9a:74:a1:a1:e1:e5:9d:cd:
c1:82:74:02:68:ee:1b:79:e5:a0:ad:9d:c7:52:6f:22:b5:37:
b0:71:55:c1:a8:bf:c6:cf:52:e2:e5:e4:46:48:b4:73:fa:b8:
47:51:e4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 06:15:17 2026 by rpki-client