Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: A9bpDTyoXO4uN621afy0QBKHCllnbgfJBdqo9f7XdVU=
Subject key identifier: DA:F7:40:6D:5E:8B:77:2D:75:0D:58:9B:77:99:02:B0:C7:2A:BC:E4
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 01A14B73EA58384CE468A808E273E7BCE94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0F5F
Signing time: Sat 17 Oct 2026 20:00:50 +0000
Manifest this update: Sat 17 Oct 2026 20:00:50 +0000
Manifest next update: Sun 18 Oct 2026 20:00:50 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: yIvLEwEOhJH05PFLPX03Rn3WnFbPg2Ikeb5ZOWvAO+0=)
2: ptikDTRhjTNxZI8dkI54eJbGFTA.roa (hash: 3SdSmJMo+FOvr1IMdnku5tDe7K6GsQTnPIBl17tgA08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:73:ea:58:38:4c:e4:68:a8:08:e2:73:e7:bc:e9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Oct 17 20:00:50 2026 GMT
Not After : Oct 18 20:00:50 2026 GMT
Subject: CN=daf7406d5e8b772d750d589b779902b0c72abce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:d1:74:26:13:f6:28:ae:5c:dc:9a:e8:33:
91:ca:6e:37:14:1f:4e:88:e9:89:a9:42:2a:ca:d5:
b4:5c:14:01:dd:15:de:08:c5:ea:3a:a2:8f:d6:15:
ad:38:7c:49:c5:02:8c:72:bf:da:31:6f:84:05:f6:
51:87:17:2a:66:37:2a:7c:06:8b:53:54:68:43:6f:
0e:e5:b6:cc:b8:45:74:1c:1f:a3:66:7c:87:5f:76:
98:a6:be:08:b5:46:0d:8d:9f:0d:08:d4:af:c7:84:
90:e0:79:62:fd:92:d9:bc:b2:91:31:3c:ae:cd:d8:
29:f7:8e:82:14:4d:42:56:19:45:a1:17:46:06:e9:
a7:a1:29:79:63:f5:26:1e:2a:41:da:e5:07:cb:d1:
01:7b:de:dd:76:ad:0a:61:0c:7a:24:e9:93:d2:04:
4c:92:a7:c4:06:68:17:d6:b4:5a:d3:dd:98:2b:cc:
53:15:0e:75:ac:7d:b2:e5:73:da:f1:2f:ac:5d:dd:
d3:55:ad:6a:21:ae:44:e3:c4:60:4f:b7:65:5f:b8:
ad:bb:20:07:da:07:26:d7:5c:c2:db:79:b7:56:5e:
ba:ef:9e:f0:9d:fb:99:12:0e:b7:12:89:20:b1:9a:
be:e7:1f:5b:e7:6c:1a:55:1f:05:2d:13:7b:50:29:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:40:6D:5E:8B:77:2D:75:0D:58:9B:77:99:02:B0:C7:2A:BC:E4
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6f:e2:a1:04:fb:10:73:a7:57:ac:ac:1d:6f:64:33:8d:f7:
19:dd:2e:38:b7:13:b0:57:f5:92:49:24:49:f0:ef:2a:38:ba:
87:1c:53:82:45:5c:91:a3:0d:8a:6d:f8:c4:d0:87:e9:86:34:
4c:56:4b:e2:ed:95:95:48:6e:1a:59:ef:08:e5:c8:1b:83:e5:
4f:15:4e:66:55:f0:6c:8b:55:3b:6f:cb:40:d0:24:93:43:19:
9d:6a:ac:2b:e8:23:8c:e4:d4:a5:db:e2:c1:fe:66:98:82:67:
84:7d:61:d2:97:0d:57:4c:6b:c9:ef:96:30:cb:42:db:fe:6b:
b9:5a:c3:af:f6:2d:8a:eb:36:cd:e6:56:6b:0e:29:01:69:d3:
6b:d4:39:f7:cb:ef:71:4c:4f:4c:ba:9a:29:11:f7:da:02:8b:
e7:f1:3e:7e:96:f8:35:1a:35:07:28:68:ec:9a:98:aa:90:56:
80:14:bc:ea:6e:d4:44:57:69:e5:f9:a7:74:f7:89:db:eb:f0:
97:1e:f0:01:60:6c:56:96:17:d7:e9:45:07:54:f5:57:a2:85:
ba:e7:9a:32:ac:bc:1c:44:60:0d:39:76:60:f0:98:c3:9b:fb:
48:ec:91:1d:a1:d5:94:d9:52:9e:59:50:bd:0d:82:d8:6f:a0:
4d:4d:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:10:12 2026 by rpki-client