Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
File: h2mm8aRv5rEvfl8cASyKTMvve58.mft (raw, json)
Hash identifier: 8QsZZXBbn5KH2f2ztf6LLtprRize/uAus7FWlbLMfv0=
Subject key identifier: E1:C3:D4:48:75:62:0E:5B:CF:21:C0:D0:0A:A3:CD:9D:FD:F2:3D:AF
Authority key identifier: 87:69:A6:F1:A4:6F:E6:B1:2F:7E:5F:1C:01:2C:8A:4C:CB:EF:7B:9F
Certificate issuer: /CN=8769a6f1a46fe6b12f7e5f1c012c8a4ccbef7b9f
Certificate serial: 01A08A8C2D0297614987C3908D32ABAF35DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
Manifest number: 017B
Signing time: Thu 10 Sep 2026 09:00:37 +0000
Manifest this update: Thu 10 Sep 2026 09:00:37 +0000
Manifest next update: Fri 11 Sep 2026 09:00:37 +0000
Files and hashes: 1: Pwqn4oY0KPuWxFDB-Ztc1zWrVwI.roa (hash: j9WbrXVSr2U86ODDAeyZl+rZySS1lzxdLUlG17Tpq0c=)
2: h2mm8aRv5rEvfl8cASyKTMvve58.crl (hash: z2pSvn6X8wO20aycUugMDN/rnWnCRT+ieiwFuXwa+QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:2d:02:97:61:49:87:c3:90:8d:32:ab:af:35:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8769a6f1a46fe6b12f7e5f1c012c8a4ccbef7b9f
Validity
Not Before: Sep 10 09:00:37 2026 GMT
Not After : Sep 11 09:00:37 2026 GMT
Subject: CN=e1c3d44875620e5bcf21c0d00aa3cd9dfdf23daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:95:95:4e:7d:f3:a8:15:88:a6:df:59:ea:
90:c6:7c:b8:00:8e:6e:23:00:29:13:7d:7b:6c:e5:
89:d1:8d:42:ea:15:f5:eb:9e:ce:31:13:c7:d2:af:
ab:ae:e0:1c:db:c4:4f:f8:2b:13:10:82:38:d9:b0:
d1:de:ad:ca:0f:3e:04:84:63:42:d3:0a:63:a0:99:
f5:a7:2a:e1:f5:20:7f:c5:3d:37:7d:dd:0a:e7:49:
a2:f8:d7:b7:63:36:a9:12:a0:66:7f:2b:bf:b6:07:
88:58:d3:0c:e4:c4:b4:b4:db:28:61:be:c0:8e:15:
81:7b:d9:f8:c2:ef:92:c8:55:cc:87:c5:2f:df:44:
0f:58:77:32:34:2c:59:5e:28:3d:e2:e1:d4:12:5d:
a1:83:eb:5e:3e:17:7c:81:b9:38:eb:43:5e:0b:9e:
34:c0:00:4e:7f:82:36:e0:2f:61:d3:c4:6f:f1:66:
05:ba:f6:0b:60:29:7f:78:ec:6b:dd:d0:c2:ba:c9:
db:ec:76:14:d6:f6:87:29:13:af:6f:6c:32:5f:c4:
ca:92:71:65:80:6f:94:2b:ee:8a:4d:95:e3:b5:db:
6d:67:c1:70:89:34:a1:85:99:b6:e1:e1:22:17:58:
1b:2d:9a:d6:0a:f9:7a:63:5c:f0:1f:f0:49:bf:55:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C3:D4:48:75:62:0E:5B:CF:21:C0:D0:0A:A3:CD:9D:FD:F2:3D:AF
X509v3 Authority Key Identifier:
keyid:87:69:A6:F1:A4:6F:E6:B1:2F:7E:5F:1C:01:2C:8A:4C:CB:EF:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e8:87:f7:32:4d:51:82:75:ed:0f:29:e9:b4:2c:06:e7:56:
fb:7e:60:ff:6c:c0:6c:91:53:c1:97:fc:56:ae:63:fd:77:12:
20:6a:ef:9d:71:a7:9d:70:b3:d3:7d:cf:0e:05:4b:29:18:3d:
f7:d4:9e:e5:da:84:63:1c:f5:2c:78:f8:79:13:60:39:1a:48:
48:cf:33:f6:c8:d4:ad:35:17:38:ef:50:e0:74:35:24:42:0d:
5b:9c:34:25:4d:00:91:ba:de:f3:7e:cb:2e:d4:5d:0e:bd:ec:
1b:13:f2:84:39:01:0f:8a:97:c2:4f:f9:6d:64:60:53:9f:78:
e5:8c:5b:f5:67:38:1f:b4:f1:49:44:14:dd:9c:0d:db:50:7d:
e5:a3:fc:dd:d9:93:99:99:08:bc:7b:a7:60:65:34:b4:5d:de:
22:52:25:f0:5a:9a:a1:94:e2:9f:4e:f2:6f:da:94:45:85:4c:
7d:1a:ff:77:1c:61:52:cb:21:82:78:8b:c2:b3:05:79:92:66:
8d:0e:46:76:66:5b:0a:5a:a0:22:c4:5e:cf:56:94:ff:a4:3e:
7a:7b:3d:b4:75:4b:12:b0:5f:cb:48:dc:bb:15:79:50:8c:2d:
11:87:8b:2d:1d:c1:03:d5:8b:37:04:8a:83:c8:71:e5:b3:69:
49:83:83:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:44 2026 by rpki-client