Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
File: h9qWV60f35jec4uxmnPv0NsLOio.mft (raw, json)
Hash identifier: JrDtrhWgl39o2fa2jTcvSho/HNAGe4yV68pZNNcJTo8=
Subject key identifier: 63:18:BF:A4:FA:F3:3B:53:81:73:08:0D:B2:9A:0E:80:F0:3D:F9:BD
Authority key identifier: 87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
Certificate issuer: /CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Certificate serial: 019EC36E41370AA118B7C576BB3D80C85C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
Manifest number: 0402
Signing time: Sun 14 Jun 2026 00:00:43 +0000
Manifest this update: Sun 14 Jun 2026 00:00:43 +0000
Manifest next update: Mon 15 Jun 2026 00:00:43 +0000
Files and hashes: 1: GfYfpyN5jeyVGMtR1H-p-7019jc.roa (hash: hDtfxcTWErCdzm61MCC3VwTe2487YmqIRLbxpndSgYk=)
2: eHMuNXANl1YlZG7VoFbYe8kGvQU.roa (hash: 0S394nr4mqSN2oEz6TpDcjQlD/IHIemle0MDvIWsbyU=)
3: h9qWV60f35jec4uxmnPv0NsLOio.crl (hash: 2M7zmffe+dlpi+3yF6JY6nPIemIgqmy0XNl32CmtOSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:41:37:0a:a1:18:b7:c5:76:bb:3d:80:c8:5c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87da9657ad1fdf98de738bb19a73efd0db0b3a2a
Validity
Not Before: Jun 14 00:00:43 2026 GMT
Not After : Jun 15 00:00:43 2026 GMT
Subject: CN=6318bfa4faf33b538173080db29a0e80f03df9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:d7:16:97:14:e7:3e:c3:43:8b:7a:3a:fb:
32:3f:6a:c3:00:c8:4a:9a:80:71:45:6b:19:3f:39:
2b:ff:6a:b3:57:35:25:0c:7d:6e:c5:f6:bd:c3:33:
65:a9:64:bd:aa:f6:21:76:01:40:bb:42:27:d7:e5:
c6:18:17:cc:88:a6:b1:a4:79:26:a4:60:bd:19:87:
54:02:73:2e:77:73:f0:60:19:b2:43:cf:a7:e0:98:
fe:85:3d:81:61:0d:40:89:87:42:50:74:63:aa:7e:
36:c6:ab:52:89:ab:a1:3e:bc:71:50:76:ec:24:7a:
89:c3:f5:b4:bb:91:60:a4:80:56:ef:f9:25:03:15:
be:db:ba:3a:e1:d4:83:05:27:15:d5:3e:7c:d9:4e:
0c:ad:85:7c:3e:f8:83:41:97:65:ac:a8:0d:f6:13:
31:90:ab:92:d0:ed:fa:cb:5c:37:33:37:72:7e:87:
f0:7d:2b:db:ce:8a:c8:df:5c:6a:1d:29:ac:79:9b:
4f:bc:4a:89:0f:55:d9:15:f9:4b:11:ea:5e:2a:75:
9d:6e:ad:22:78:aa:d7:c7:ba:49:fb:18:a0:2b:6e:
de:78:b1:1f:e8:65:83:dc:7c:1c:c8:e8:2d:79:be:
c4:9d:1c:67:a0:a1:60:c5:fd:77:6f:a2:63:e1:b9:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:BF:A4:FA:F3:3B:53:81:73:08:0D:B2:9A:0E:80:F0:3D:F9:BD
X509v3 Authority Key Identifier:
keyid:87:DA:96:57:AD:1F:DF:98:DE:73:8B:B1:9A:73:EF:D0:DB:0B:3A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9qWV60f35jec4uxmnPv0NsLOio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/h9qWV60f35jec4uxmnPv0NsLOio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7e:d9:04:4f:19:27:74:87:c7:2e:40:be:63:5f:f8:3b:bb:
ae:3a:e9:bc:3e:06:4a:cc:28:0b:63:52:a8:fd:c3:ba:44:e0:
77:f5:e5:ed:3b:d6:f9:ec:d5:b7:8b:58:61:46:11:a8:21:33:
bd:1a:7a:7a:93:11:fa:f1:fb:6f:1a:d8:bb:56:03:9a:83:e8:
d3:d9:d3:73:fe:96:40:c6:be:97:d7:28:41:a0:bf:d2:8d:a2:
e2:de:98:66:a6:53:a8:fa:32:81:8d:56:d1:87:68:fd:f4:1b:
81:a9:8c:60:d6:63:0f:e3:7d:50:ed:95:0e:41:a3:27:06:8c:
73:dc:0b:8c:b7:ea:80:5f:e5:db:0c:10:06:10:d0:04:69:73:
2f:c5:f3:22:a2:87:5b:2a:52:9a:4d:55:43:41:dc:67:f8:2a:
98:5b:50:83:a8:b5:8f:19:f1:2a:11:6b:66:ce:8a:48:ae:4b:
93:16:bf:ad:f3:2c:fa:25:3f:49:05:0e:d0:64:3c:a3:bb:c0:
b6:06:e7:f0:dd:a6:cd:77:bc:c9:b0:50:6c:53:c9:95:a8:64:
e8:a1:ec:a3:f1:95:e4:c7:0c:50:f8:78:38:61:c8:1b:2c:4e:
5b:27:01:c9:b1:aa:67:2e:4a:e8:16:f4:d9:dd:c2:81:a7:7f:
26:15:11:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:07 2026 by rpki-client