Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
File: h7kq03MXwzCg61kKFw0U9Rm3UrM.mft (raw, json)
Hash identifier: GtKCWVIVDT6r1rJnvuNZioc3Dh3f+bZgrWHtdu/2RdE=
Subject key identifier: 9D:16:30:34:FC:C6:32:72:5B:3F:88:E5:6B:30:2B:CD:42:7F:8B:DD
Authority key identifier: 87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
Certificate issuer: /CN=87b92ad37317c330a0eb590a170d14f519b752b3
Certificate serial: 01A16C8022E7E14639A95B799D1E29F0E8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
Manifest number: 0136
Signing time: Sat 24 Oct 2026 06:01:38 +0000
Manifest this update: Sat 24 Oct 2026 06:01:38 +0000
Manifest next update: Sun 25 Oct 2026 06:01:38 +0000
Files and hashes: 1: h7kq03MXwzCg61kKFw0U9Rm3UrM.crl (hash: eXDYGX6XH6mvz1HsupZ1X+R5pIDac7qKXTMpgj5ORjw=)
2: l6h8cEy3vy8eHGUMk9ccO_E31gg.roa (hash: /rkHav/nq0FmDVvv83fpzsLSholUDtzomJfCggVqF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:80:22:e7:e1:46:39:a9:5b:79:9d:1e:29:f0:e8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b92ad37317c330a0eb590a170d14f519b752b3
Validity
Not Before: Oct 24 06:01:38 2026 GMT
Not After : Oct 25 06:01:38 2026 GMT
Subject: CN=9d163034fcc632725b3f88e56b302bcd427f8bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:bc:a5:ff:20:3d:bd:c4:a2:50:66:1d:11:
77:af:dd:cb:7c:12:33:f2:6e:cf:44:14:04:a6:14:
0c:ab:1c:5f:da:3b:e3:7f:16:8a:d7:18:68:4a:6c:
a0:d6:f3:35:f2:c7:b4:20:4b:bf:38:2f:75:4b:20:
80:fa:9a:f6:7d:df:a6:33:9b:a9:c3:aa:de:3d:5e:
f0:6c:09:23:86:80:01:d4:df:06:48:5e:c5:d5:ab:
57:f4:bc:47:77:88:e8:03:df:b6:16:83:5f:df:3a:
59:20:83:a9:ac:42:7b:57:b3:6a:2f:4e:43:15:2d:
60:7f:c5:13:3f:70:0c:43:ce:40:48:3e:76:83:af:
32:60:c9:53:f4:26:2e:d6:09:ba:b3:a0:cd:0f:aa:
e6:8b:98:8b:b9:ed:c1:77:76:cb:a6:02:fb:ce:f6:
a5:e3:d7:b7:a7:bd:3f:d4:b5:9b:3a:c4:0e:27:3d:
23:3a:0d:6b:57:3b:c1:1d:d5:d9:19:e7:39:99:8b:
ad:2d:35:4e:b1:eb:83:4a:0a:00:94:57:3e:68:44:
08:9c:f9:69:4e:17:92:89:92:f8:4c:9f:ed:9a:b0:
5e:9e:51:76:a9:e5:f4:ba:95:6a:f9:b9:c5:f1:d5:
59:80:32:3d:c2:15:e1:ad:bd:e0:b5:bd:0e:f2:91:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:16:30:34:FC:C6:32:72:5B:3F:88:E5:6B:30:2B:CD:42:7F:8B:DD
X509v3 Authority Key Identifier:
keyid:87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:66:00:41:09:a5:99:0a:e4:12:52:52:3d:8f:28:fb:b5:ab:
c2:ca:38:a0:50:ea:77:e9:f9:aa:c8:98:9e:f6:44:4d:f4:b6:
7b:fc:98:6c:98:3d:2a:f2:37:b9:93:23:b1:ea:87:20:30:70:
71:2b:1d:f6:9a:d9:7c:e2:12:80:74:b3:53:d3:04:66:38:d6:
7f:65:be:4b:ab:e5:f9:75:36:12:3e:e8:30:a1:50:72:f5:60:
42:dc:42:e1:64:9b:64:66:f8:3b:d0:71:d0:43:99:af:93:b2:
39:e9:9f:9e:de:65:e4:de:ad:18:a3:ba:4b:b6:68:19:37:d1:
1c:a3:3f:2b:d9:0e:43:14:42:8a:15:f9:8a:af:28:7f:9f:d1:
17:0b:77:ed:0d:c8:06:11:a4:e7:4c:d5:bd:93:00:f4:3b:09:
ef:4d:ee:55:4a:71:63:ff:5c:15:d3:92:ae:39:da:ee:30:c6:
e8:ea:5d:09:51:64:3e:53:aa:d8:be:3a:09:ed:9e:29:60:49:
15:ca:d7:e2:ed:89:b1:ee:71:47:fc:43:7f:16:01:e2:4a:d5:
d3:35:3f:f8:14:e6:2e:da:f4:53:c3:4a:16:ec:1f:cb:ae:33:
20:b6:ca:44:30:2d:79:ec:cf:81:05:a0:7a:3a:1e:4b:6e:99:
b2:2a:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:02:20 2026 by rpki-client