Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: uzaFFQz6FE4usPbP3+LlHnyOTJh++cIOf9KnhGzE+fo=
Subject key identifier: 2D:52:31:9A:1F:3B:CC:2A:C1:52:7A:E6:C0:CF:3F:6B:B9:F0:85:D2
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 019D3865DB9D1730E75D3899746790CCB3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 07:01:32 +0000
Manifest this update: Sun 29 Mar 2026 07:01:32 +0000
Manifest next update: Mon 30 Mar 2026 07:01:32 +0000
Files and hashes: 1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: K5YHf5g3tD7nUadnN+DDUu3Hi5b7YJ6ECOtXfcGOdLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:db:9d:17:30:e7:5d:38:99:74:67:90:cc:b3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Mar 29 07:01:32 2026 GMT
Not After : Mar 30 07:01:32 2026 GMT
Subject: CN=2d52319a1f3bcc2ac1527ae6c0cf3f6bb9f085d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:01:8d:93:fb:1f:53:76:38:d1:bb:38:56:
5f:72:24:b6:5e:6c:55:29:d8:95:14:03:bd:4d:f0:
9e:3a:4c:dd:58:ea:27:9e:1f:52:37:30:cf:18:25:
bf:54:26:ac:de:51:2c:58:21:34:07:ae:c4:1b:fd:
5d:fb:c0:11:9f:83:5d:d6:87:0f:04:6e:e1:86:e3:
b9:a6:ed:ba:e6:99:43:2d:66:fa:81:6b:6a:4d:67:
e4:7f:56:cc:3a:3c:91:3a:13:dd:4c:32:53:88:ce:
a6:53:d0:a5:09:24:7d:57:cd:08:a3:12:ad:02:e6:
55:c6:bc:85:d9:09:d3:dd:ee:1c:45:cb:2d:ae:d8:
c1:58:bd:92:03:e3:29:ee:f4:99:f4:b3:5e:b1:09:
7a:8b:a7:57:44:13:ae:6e:da:59:af:ee:64:1e:f9:
8e:65:9d:58:ee:c9:5e:2d:ba:b2:8c:f7:98:f6:0b:
87:5e:9e:51:50:ae:0e:b8:50:81:70:90:4f:84:5b:
2b:49:64:5a:c1:53:70:47:d8:d7:1f:86:ba:74:07:
e7:ca:a0:f5:93:ad:c5:58:66:98:3e:1a:ae:27:2b:
5f:b0:25:39:6e:98:d6:00:21:6d:41:23:93:83:6a:
e6:36:2b:a2:12:59:49:a2:73:10:73:26:78:46:72:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:52:31:9A:1F:3B:CC:2A:C1:52:7A:E6:C0:CF:3F:6B:B9:F0:85:D2
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:33:63:5e:54:72:82:a4:9d:8d:53:3e:2d:df:0e:49:03:7c:
48:39:a7:f3:43:f9:a9:7b:9d:63:d9:e7:aa:aa:b6:2f:47:6f:
7a:3c:e6:6a:ad:f4:8e:45:7e:3b:22:12:b9:f0:56:16:26:1c:
f3:c4:6d:8b:91:2d:fa:9f:c2:0d:fe:9f:1c:16:4e:24:78:a7:
95:de:a0:f4:ea:d8:39:c9:d4:86:3e:63:24:9a:fa:a3:ff:cc:
24:71:8b:b9:7b:9b:d7:dc:80:70:3c:9c:a4:6d:85:a7:a1:79:
0a:ef:39:2f:33:85:46:8f:a8:11:78:12:79:b2:93:b8:63:35:
99:08:b2:9e:30:84:ff:e3:b9:d3:8e:d8:90:ac:6e:41:44:96:
c5:04:b0:3b:b5:ed:00:18:76:aa:ec:00:12:01:73:10:d0:86:
ed:2e:7f:c9:6e:38:de:1c:cf:29:02:87:08:3a:a6:c9:12:91:
69:0c:4e:17:ce:3d:a4:94:ae:46:46:64:db:e6:85:05:a4:48:
6d:0a:38:7a:e4:fe:f6:60:6c:74:e9:4f:6b:6d:63:e7:f5:64:
c6:18:c4:16:eb:c5:a0:ac:b2:25:2a:92:fc:ff:27:3d:49:e7:
f6:97:37:d8:98:1a:76:9f:4c:53:42:56:cf:0a:2c:1d:bf:fa:
48:74:3a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:09 2026 by rpki-client