
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
File: h2mm8aRv5rEvfl8cASyKTMvve58.mft (raw, json)
Hash identifier: mao9gCIdBou5R040Xu2m8qQjxzfvJCz4hRtc5sixcnk=
Subject key identifier: 37:F3:52:40:C1:59:1D:59:50:B6:25:B9:46:E7:6E:0D:F2:A9:7F:1C
Authority key identifier: 87:69:A6:F1:A4:6F:E6:B1:2F:7E:5F:1C:01:2C:8A:4C:CB:EF:7B:9F
Certificate issuer: /CN=8769a6f1a46fe6b12f7e5f1c012c8a4ccbef7b9f
Certificate serial: 019EB922001179438F9DBFBF37AA899E7E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
Manifest number: 8A
Signing time: Fri 12 Jun 2026 00:01:13 +0000
Manifest this update: Fri 12 Jun 2026 00:01:13 +0000
Manifest next update: Sat 13 Jun 2026 00:01:13 +0000
Files and hashes: 1: Pwqn4oY0KPuWxFDB-Ztc1zWrVwI.roa (hash: j9WbrXVSr2U86ODDAeyZl+rZySS1lzxdLUlG17Tpq0c=)
2: h2mm8aRv5rEvfl8cASyKTMvve58.crl (hash: oDMxChg1d8nf7AoGeceKCsDiUcRgPl5YLWih+9QN5H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:00:11:79:43:8f:9d:bf:bf:37:aa:89:9e:7e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8769a6f1a46fe6b12f7e5f1c012c8a4ccbef7b9f
Validity
Not Before: Jun 12 00:01:13 2026 GMT
Not After : Jun 13 00:01:13 2026 GMT
Subject: CN=37f35240c1591d5950b625b946e76e0df2a97f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:0e:43:bb:d2:69:65:7f:b9:31:fb:46:c4:
5b:06:5c:6e:f2:84:38:cb:6b:67:b3:5d:39:5e:37:
9e:28:1e:70:2d:fb:a9:1f:ae:36:6d:27:0d:7b:f9:
aa:4b:16:2f:25:a6:cd:68:4e:d2:4e:41:40:a1:d5:
c0:3a:f6:59:f0:a9:53:4b:c5:c6:d6:9a:f2:5e:9a:
f3:9f:c1:67:fc:6a:c1:db:83:6d:e3:cc:ee:80:a9:
be:03:18:d0:92:87:b7:21:7c:f9:93:d0:76:68:3a:
e6:47:02:b8:c3:6a:f5:5f:b3:b2:74:ea:db:58:33:
81:a5:2a:66:fa:1a:0c:77:3b:35:25:9d:73:8d:63:
78:26:be:27:82:06:6b:08:f2:d9:87:1c:34:11:31:
43:9f:cd:d9:8d:b1:d6:bf:8a:2a:d3:9c:49:5d:bf:
f9:a7:67:1d:c7:9b:22:63:61:5c:22:0c:1b:40:75:
0d:45:1c:d1:0f:c9:7a:fe:9a:12:72:b6:9c:13:ad:
da:d7:a7:8a:1b:61:90:4b:58:5f:85:34:07:56:34:
e5:5c:88:be:8e:dd:f0:9d:8d:1d:45:75:7c:20:fa:
c3:00:be:1e:f4:75:7f:14:aa:bf:da:cd:44:40:ff:
01:cb:c2:54:4f:5e:f3:95:73:81:5b:43:b1:2d:5b:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:52:40:C1:59:1D:59:50:B6:25:B9:46:E7:6E:0D:F2:A9:7F:1C
X509v3 Authority Key Identifier:
keyid:87:69:A6:F1:A4:6F:E6:B1:2F:7E:5F:1C:01:2C:8A:4C:CB:EF:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h2mm8aRv5rEvfl8cASyKTMvve58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/dc4b45-d948-4b6a-a3d9-730541a06f80/1/h2mm8aRv5rEvfl8cASyKTMvve58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ca:2a:6a:4f:a1:36:2b:66:e4:37:e7:63:f4:fd:4b:5e:69:
9a:ae:30:e2:27:be:78:ab:ef:66:9d:b7:d5:ab:18:e1:b6:c2:
21:96:ac:3d:fc:69:b0:e9:2e:c2:8d:f4:11:9e:e2:8b:22:e0:
67:e4:15:4d:58:b7:0b:74:60:9b:58:f0:da:4f:43:f6:2f:4e:
ae:67:74:46:39:68:55:1e:c0:b2:c9:df:39:78:e2:5c:01:e2:
1a:60:69:dc:74:c7:32:60:7a:3e:0c:b0:ab:19:2d:af:98:37:
9c:a3:04:e2:a9:25:9c:b5:32:ad:df:50:46:d6:c6:8c:61:3a:
a5:b4:eb:9d:27:6c:35:e9:d3:41:5a:d0:87:a4:50:8e:ec:7f:
96:0e:ca:f8:d4:69:25:56:6a:9f:dc:29:de:0d:ba:5d:7f:a4:
1b:6b:79:6c:0c:36:8b:51:86:f4:fe:71:04:b1:dd:53:8b:81:
37:93:17:2d:31:5f:6e:4c:27:73:7a:08:00:81:af:1f:c9:18:
bf:af:b5:e7:c5:d9:29:6f:3a:96:b0:95:59:8e:b0:c4:be:ee:
22:21:47:38:c4:f5:0d:a4:76:81:0c:cc:7d:96:a3:8b:7d:b1:
15:aa:1f:b5:de:63:e2:47:6b:ef:10:d6:f8:0a:ba:e6:66:0a:
14:32:b0:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IgAReUOPnb+/N6qJnn5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NjlhNmYxYTQ2ZmU2YjEyZjdlNWYxYzAxMmM4YTRjY2Jl
ZjdiOWYwHhcNMjYwNjEyMDAwMTEzWhcNMjYwNjEzMDAwMTEzWjAzMTEwLwYDVQQD
EygzN2YzNTI0MGMxNTkxZDU5NTBiNjI1Yjk0NmU3NmUwZGYyYTk3ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAoOQ7vSaWV/uTH7RsRbBlxu8oQ4
y2tns105XjeeKB5wLfupH642bScNe/mqSxYvJabNaE7STkFAodXAOvZZ8KlTS8XG
1pryXprzn8Fn/GrB24Nt48zugKm+AxjQkoe3IXz5k9B2aDrmRwK4w2r1X7OydOrb
WDOBpSpm+hoMdzs1JZ1zjWN4Jr4nggZrCPLZhxw0ETFDn83ZjbHWv4oq05xJXb/5
p2cdx5siY2FcIgwbQHUNRRzRD8l6/poScracE63a16eKG2GQS1hfhTQHVjTlXIi+
jt3wnY0dRXV8IPrDAL4e9HV/FKq/2s1EQP8By8JUT17zlXOBW0OxLVu/CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfzUkDBWR1ZULYluUbnbg3yqX8cMB8GA1UdIwQY
MBaAFIdppvGkb+axL35fHAEsikzL73ufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDJtbThhUnY1ckV2Zmw4Y0FTeUtUTXZ2ZTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kYzRiNDUtZDk0OC00YjZhLWEzZDkt
NzMwNTQxYTA2ZjgwLzEvaDJtbThhUnY1ckV2Zmw4Y0FTeUtUTXZ2ZTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kYzRiNDUtZDk0OC00YjZhLWEzZDktNzMwNTQxYTA2Zjgw
LzEvaDJtbThhUnY1ckV2Zmw4Y0FTeUtUTXZ2ZTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcoqak+h
Nitm5DfnY/T9S15pmq4w4ie+eKvvZp231asY4bbCIZasPfxpsOkuwo30EZ7iiyLg
Z+QVTVi3C3Rgm1jw2k9D9i9Ormd0RjloVR7AssnfOXjiXAHiGmBp3HTHMmB6Pgyw
qxktr5g3nKME4qklnLUyrd9QRtbGjGE6pbTrnSdsNenTQVrQh6RQjux/lg7K+NRp
JVZqn9wp3g26XX+kG2t5bAw2i1GG9P5xBLHdU4uBN5MXLTFfbkwnc3oIAIGvH8kY
v6+158XZKW86lrCVWY6wxL7uIiFHOMT1DaR2gQzMfZaji32xFaoftd5j4kdr7xDW
+Aq65mYKFDKwCA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:48:55 2026 by rpki-client