Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: bqVgWkY+XBKNGpgjtfbKkKZ4C/X6Ats591WZHQZlTMs=
Subject key identifier: 66:D4:3D:71:F9:AC:56:C0:60:51:A8:6B:3E:FC:0E:8A:67:17:FC:15
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 019E99CD7A1FF074A2E01C5FFCCEEFFDAF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 1949
Signing time: Fri 05 Jun 2026 22:00:40 +0000
Manifest this update: Fri 05 Jun 2026 22:00:40 +0000
Manifest next update: Sat 06 Jun 2026 22:00:40 +0000
Files and hashes: 1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: gEafkjTZh+CMq2UuIlb1QOkBa7afKP9sxBglFwcZVkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:cd:7a:1f:f0:74:a2:e0:1c:5f:fc:ce:ef:fd:af:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Jun 5 22:00:40 2026 GMT
Not After : Jun 6 22:00:40 2026 GMT
Subject: CN=66d43d71f9ac56c06051a86b3efc0e8a6717fc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:a9:b7:7b:0b:2b:fc:d4:6e:23:2b:2e:d4:
2c:2c:75:c3:ab:36:d1:65:d6:35:f9:75:f1:05:85:
95:51:8d:ac:44:8e:93:83:71:99:cc:d9:b1:35:03:
b6:4d:ad:7f:de:c3:d4:56:55:c2:93:01:dd:7d:22:
3a:d4:5f:65:2a:5e:e2:87:c2:0d:56:91:05:88:77:
9d:d2:dc:bc:47:d4:71:ea:81:6e:1d:db:9a:80:65:
8c:35:e9:9b:b6:b2:c1:60:21:fa:63:9b:fe:54:5b:
2d:53:a9:fe:f3:53:81:2c:8c:d5:0f:ff:98:b6:eb:
d4:c2:5e:66:d2:3c:f1:e5:99:40:f7:14:d8:cf:6e:
63:3e:63:41:ec:41:d1:af:1c:3e:d9:ed:97:f6:66:
36:7a:ac:39:76:1d:b3:df:8a:0c:37:df:a4:52:68:
85:f3:6b:f0:4a:6e:ca:10:52:6e:38:10:ad:7c:52:
25:e4:be:66:6b:0b:80:d8:b0:f6:34:d6:51:d2:d5:
e8:49:a1:eb:f7:c5:69:b4:7c:8a:2c:38:18:70:d4:
8b:d3:af:81:9d:6c:6a:a1:d6:56:0f:64:b6:2d:5a:
94:af:51:f2:1a:e2:7a:2e:aa:b1:41:87:67:b1:17:
b9:e3:89:a2:0e:32:59:e9:01:44:39:76:6f:92:00:
17:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:3D:71:F9:AC:56:C0:60:51:A8:6B:3E:FC:0E:8A:67:17:FC:15
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7c:54:5b:75:bb:fc:1e:ac:6e:5a:52:64:f5:ca:21:8f:95:
98:6a:0e:b6:6b:98:54:00:82:72:71:c1:26:25:f4:95:62:97:
fd:51:ea:ec:27:f7:79:8e:f6:b9:af:a0:7f:21:12:7c:8d:70:
50:44:2f:35:a1:7f:4f:4f:4d:e4:8a:73:36:20:a9:a2:b2:0e:
5f:03:12:d2:09:9c:09:47:ec:df:1a:40:6a:11:ca:ee:73:6c:
e0:68:b6:38:4b:36:c2:d5:59:b0:6d:d2:c0:9b:2d:62:ac:98:
f9:8d:8e:58:fa:28:07:69:4f:2a:a7:52:7c:83:49:11:43:c2:
b4:57:14:dd:93:b2:da:9b:75:65:a3:a5:0b:30:f1:ca:a2:18:
06:3e:c7:71:4e:2a:4f:bd:04:be:f0:be:c5:b8:13:81:83:5c:
0a:4d:d0:92:8c:47:58:0b:1c:21:ee:91:8f:6e:5d:0c:7c:2b:
ac:4b:fd:5d:d0:37:99:85:ca:9d:17:15:2f:8c:d4:40:a7:fb:
17:6c:34:4a:fd:bc:81:b7:af:80:9f:c0:5a:44:14:05:23:d3:
8e:16:4c:e1:ec:17:25:6c:e8:6a:6c:71:e2:3a:f3:c6:1d:30:
b4:c2:d0:fe:ea:52:45:8f:75:48:ec:0d:dc:54:93:99:1d:6a:
91:ea:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:20:25 2026 by rpki-client