Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: ABj1uDZrCm7EZswjtJMIZGMzAju9vRaHCTfY7dw5pBc=
Subject key identifier: 26:88:7D:D7:0F:8E:71:DF:38:49:6A:67:07:F2:C3:43:6E:8C:39:FB
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 01A158C18FA2934A9A2562B741BEE5D52239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 1AB5
Signing time: Tue 20 Oct 2026 10:00:42 +0000
Manifest this update: Tue 20 Oct 2026 10:00:42 +0000
Manifest next update: Wed 21 Oct 2026 10:00:42 +0000
Files and hashes: 1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: e6wFKw/i/YKVyDAjlDUUOZ5n96iu4zCB3Iel4yhDS+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:c1:8f:a2:93:4a:9a:25:62:b7:41:be:e5:d5:22:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Oct 20 10:00:42 2026 GMT
Not After : Oct 21 10:00:42 2026 GMT
Subject: CN=26887dd70f8e71df38496a6707f2c3436e8c39fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1a:a4:b6:f4:71:f4:2f:33:a9:8d:fe:38:ed:
a2:5e:60:ae:7d:11:e7:9f:bc:85:2a:f1:68:59:c8:
42:aa:c9:0d:3d:75:0d:56:a9:08:b0:1e:6e:d4:54:
c7:f5:63:c5:8a:f8:23:02:e9:8a:4c:7e:45:f6:f4:
f3:19:4b:82:f2:ce:17:cd:b0:a6:e3:f7:51:9a:2a:
63:52:b9:cf:89:97:3d:db:78:b6:f2:51:b1:c3:7f:
92:60:1a:e7:40:2d:08:e0:2a:a5:8b:dc:ba:97:b2:
5e:e4:73:b3:11:cf:a4:f9:4a:39:d3:53:03:88:12:
91:3a:72:e6:c3:f2:e1:98:5c:50:8d:d5:51:5e:16:
04:40:d0:42:41:b6:75:5b:e5:4e:58:f5:6f:48:7a:
99:d7:63:b1:fd:77:15:17:8a:a3:b9:d2:1d:45:6c:
85:06:25:90:32:27:d3:70:5d:1a:65:3b:04:a8:32:
e8:bb:f3:68:89:88:4f:1b:e4:3a:ca:5c:0b:df:a8:
4a:5b:7c:f0:c7:45:f5:be:5d:2a:46:ca:c9:23:cb:
34:3e:31:4b:f9:86:d4:c6:d9:bf:8d:9b:b5:f9:4d:
c3:fe:ba:9b:12:a2:15:fb:f6:de:26:2e:e5:ce:f1:
81:1b:af:20:ee:ba:e6:ea:cf:b7:b5:6e:f8:f8:e4:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:88:7D:D7:0F:8E:71:DF:38:49:6A:67:07:F2:C3:43:6E:8C:39:FB
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:79:bc:ef:7a:49:39:da:5a:f5:8a:6a:d5:1a:51:a6:3b:6f:
5d:a5:cb:8f:4b:da:0c:c3:05:c0:98:3a:7b:60:c1:3f:b6:cd:
52:a2:d2:e3:4f:70:04:25:f4:63:53:93:05:08:61:4e:74:b5:
54:88:7e:9a:2d:ca:6e:a6:95:ef:54:4f:06:c0:ec:71:75:39:
c0:74:38:51:88:62:30:e1:75:60:4b:79:f6:88:93:26:3b:18:
1d:3e:24:31:61:69:b8:c5:ab:ee:dc:c8:34:93:bc:5b:20:46:
8c:f6:57:d8:a8:8e:cf:96:36:33:14:e8:3b:27:1f:a4:fa:88:
30:22:a0:7e:1b:4f:8a:c4:7d:5a:da:94:b5:6b:08:25:0f:87:
eb:8b:0c:89:0e:9a:8e:95:0e:2e:b1:7f:d3:48:9e:33:23:63:
cd:13:72:b6:18:bb:1d:5d:af:75:bc:e6:e0:60:76:28:92:89:
50:2b:31:82:b3:99:44:0b:ca:4c:d3:d6:d9:2f:a4:08:d4:df:
88:a6:3c:ff:44:ae:06:55:3a:98:86:d0:4e:3a:6f:13:eb:93:
15:3b:15:d6:3e:5d:c1:d7:62:75:cd:dd:ca:91:5a:46:bb:89:
25:72:c5:59:31:61:8f:7e:c5:91:59:76:d4:fb:f1:da:c3:2d:
ca:e0:ac:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:21:43 2026 by rpki-client