Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: ayLrpTUKogg94C8SbbRSy5DtJ+fUixK8CcVuiUxU4ns=
Subject key identifier: 2F:47:9F:28:9D:0B:83:AB:7A:34:0E:D2:AA:D2:AA:E1:2E:85:D2:36
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 01A00326749A96737DC58E239EA9050363C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0EB5
Signing time: Sat 15 Aug 2026 02:00:46 +0000
Manifest this update: Sat 15 Aug 2026 02:00:46 +0000
Manifest next update: Sun 16 Aug 2026 02:00:46 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: EO6ETO3AwX6aoq/6i/dmFP73GpprkLJRHJdDBAIh5PM=)
2: ptikDTRhjTNxZI8dkI54eJbGFTA.roa (hash: 3SdSmJMo+FOvr1IMdnku5tDe7K6GsQTnPIBl17tgA08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:74:9a:96:73:7d:c5:8e:23:9e:a9:05:03:63:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Aug 15 02:00:46 2026 GMT
Not After : Aug 16 02:00:46 2026 GMT
Subject: CN=2f479f289d0b83ab7a340ed2aad2aae12e85d236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:05:15:85:3e:6d:02:82:1a:86:af:08:16:a1:
f9:fe:49:49:b0:4c:3b:55:c1:79:23:ac:74:99:65:
09:6f:96:b3:38:8f:1b:ee:5b:c9:4a:eb:0b:8c:bb:
d3:03:8f:d5:f1:45:ca:44:20:ec:b7:a7:5b:a3:b0:
9a:57:8d:cd:ec:64:ab:2a:83:47:ba:c2:b5:11:c3:
dc:e2:f1:79:59:f5:45:8c:2d:9f:9f:3f:1c:32:34:
55:c4:da:d4:ad:c0:75:04:ea:b5:93:a1:74:91:76:
ee:23:dd:20:8c:87:f9:9d:1c:f2:21:16:5e:ba:2a:
92:3a:c3:33:c0:3d:35:f1:52:9e:6f:ef:1b:e9:26:
e0:c6:b7:4e:f8:b5:eb:da:fb:32:f5:f5:0a:2e:b1:
93:33:cd:83:3a:bc:3e:be:2e:02:4b:9b:a0:3d:bc:
7f:2c:de:ad:9d:b6:2e:c8:49:7c:bb:31:38:30:5e:
1b:7e:05:48:3c:fe:08:fb:ef:22:7d:c9:fc:54:fa:
4e:b3:7f:46:49:8f:db:46:89:4f:87:fa:be:b6:48:
5f:e4:2b:42:4d:61:2e:9b:9e:33:ec:09:d5:20:58:
75:2f:65:60:9a:08:98:ac:a4:6c:d0:bb:89:19:1c:
4d:45:ed:5a:90:9d:9d:da:6f:ad:4e:ec:31:53:0e:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:47:9F:28:9D:0B:83:AB:7A:34:0E:D2:AA:D2:AA:E1:2E:85:D2:36
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:83:09:71:9c:12:e0:d5:f6:e9:44:bc:63:d6:92:3e:41:dc:
14:cb:6a:2c:8a:b5:b2:02:db:f3:7b:03:1c:db:ed:26:58:a4:
4c:76:ad:64:b3:97:1c:58:fc:bb:4f:e3:b2:83:9e:09:15:0c:
de:22:79:18:51:d3:96:02:ac:4a:06:f2:9d:e3:ab:99:c5:48:
55:1f:76:04:14:89:37:4b:37:e3:7e:79:56:70:07:d1:06:42:
84:1a:c7:5c:ee:12:f1:92:a7:91:0d:63:2c:0b:cd:67:3f:74:
6b:cf:6e:61:11:1b:aa:21:77:01:87:f1:b3:7c:c1:79:f2:88:
d6:12:c9:25:a2:61:8a:4e:bf:a3:88:9e:f0:91:4f:40:51:1b:
f9:0c:08:38:c9:61:1c:d7:20:e9:94:10:d5:39:a9:75:a8:13:
12:9d:d9:7b:5e:b4:fe:ec:bd:6f:3c:ba:48:5c:30:08:82:09:
80:76:50:33:eb:60:35:e2:66:c9:4a:f4:45:45:65:e0:d1:6e:
83:97:d8:7e:25:50:07:bf:7d:32:78:46:5d:d3:9b:83:42:bc:
ef:f1:d5:e3:a6:6a:ac:6f:0e:60:c1:d5:e3:9e:e0:00:c1:7e:
e7:11:49:d5:a3:75:15:be:3e:9b:6c:69:b3:04:8a:29:3c:a2:
9e:9b:0a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:51 2026 by rpki-client