
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: +MNh+rnBaQVO1mVu/bC8grxcGUIVJzkBERc/qZI5jDA=
Subject key identifier: 88:54:9E:21:A2:F8:29:D0:E8:ED:E8:FE:AF:4D:05:66:26:58:12:0D
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 01A06D2754E3DBD7A1DBE8F1AEC47B48DCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 16:01:29 +0000
Manifest this update: Fri 04 Sep 2026 16:01:29 +0000
Manifest next update: Sat 05 Sep 2026 16:01:29 +0000
Files and hashes: 1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: Y0R3GKRhRRTHGjniH8I4rRI2LawXJ9XTr3IcKIWDkAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:54:e3:db:d7:a1:db:e8:f1:ae:c4:7b:48:dc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Sep 4 16:01:29 2026 GMT
Not After : Sep 5 16:01:29 2026 GMT
Subject: CN=88549e21a2f829d0e8ede8feaf4d05662658120d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:1f:6c:9c:1b:e6:3c:c1:87:8e:ee:74:a3:
65:70:8b:77:af:e0:97:c6:38:b5:a3:f8:3c:b6:99:
57:78:9f:52:45:f7:3f:cf:96:e5:81:e7:5a:2a:f9:
12:b5:0d:2c:f8:44:84:0c:de:bf:d3:78:27:be:81:
29:00:20:f4:ad:d5:35:2d:d5:2d:bd:2b:3e:42:50:
19:2f:7e:1d:21:73:b9:44:ad:c1:92:3b:cb:2f:6f:
28:41:72:89:5e:02:7f:75:f7:7a:7a:0b:df:1e:45:
57:c7:be:41:6f:9f:21:d0:e2:0d:d8:3d:01:60:09:
29:0f:66:d6:95:7a:43:95:18:d8:31:3f:c0:52:4c:
97:39:46:45:59:2c:44:79:a4:0f:27:55:7c:05:a2:
43:41:18:32:58:f2:e2:53:86:37:62:b0:c1:f9:ee:
3d:91:2b:f4:07:00:c4:e1:e5:e1:55:8f:7e:1b:20:
c7:f6:16:cd:85:21:bd:bb:b9:62:82:22:d9:c8:97:
8a:85:73:a1:3d:ea:12:c8:c8:bc:b3:3e:97:72:ae:
31:ea:85:b4:65:ff:7f:80:6f:56:d4:01:2b:88:30:
c9:fd:20:34:6a:93:ed:fc:5a:78:1d:84:21:9a:27:
b9:dc:f1:72:c6:14:40:37:b1:98:3e:d4:7c:18:2a:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:9E:21:A2:F8:29:D0:E8:ED:E8:FE:AF:4D:05:66:26:58:12:0D
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:eb:36:53:0d:ab:fa:81:a3:55:e9:a2:ee:79:7a:10:e4:e2:
6a:cf:fa:26:16:ff:fc:a3:44:11:e4:a8:eb:8c:bb:0a:2b:c2:
66:35:c2:bf:0b:89:91:e6:25:79:df:6a:6e:34:eb:f0:d3:18:
67:78:ab:d2:7f:ab:ea:41:79:c7:8b:7b:66:dc:1d:0a:fb:7f:
ad:df:3e:4a:b8:f3:71:29:f3:2a:03:e5:1f:f5:09:78:39:dd:
26:d6:49:65:8e:bc:b6:41:b3:5f:ea:3e:de:d0:c6:d3:35:a4:
cf:fe:fa:81:b5:22:69:6f:ed:e7:9d:b7:10:91:13:e1:cc:a7:
e2:7d:97:90:65:58:23:d5:0d:a8:34:e1:ee:14:01:24:bb:a8:
c1:de:a5:fb:2a:c5:c9:8b:3c:d1:0b:19:4a:6e:8c:f2:cc:2e:
a5:8f:04:c3:f4:37:03:b6:79:e7:63:21:7a:de:48:a8:22:57:
0c:8f:41:18:bd:6b:46:12:73:b5:f9:2e:b2:f0:1f:21:3d:9d:
62:3c:d4:08:11:ca:81:86:a6:e1:e7:04:3a:07:f8:1c:8a:19:
9b:22:1f:c0:2d:01:5c:6f:e6:41:b9:15:f4:a4:03:77:d1:77:
f6:ad:30:32:57:cd:7e:2e:a1:d0:20:a7:7f:de:b6:b9:b0:29:
b4:89:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:01:09 2026 by rpki-client