Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
File: h-2cuDQKwglaTLBSjl6i9zjOpnI.mft (raw, json)
Hash identifier: hXisCHmDfRDEKCcm1Rc8DE/XPO8b9C3nR+4hzTGXuow=
Subject key identifier: 8B:25:A7:E9:DA:51:32:44:77:76:47:0D:E5:87:1B:7D:EE:0A:BB:84
Authority key identifier: 87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
Certificate issuer: /CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Certificate serial: 01A0C5FC7BA7B4CA5B589177CD75E420193A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
Manifest number: 0832
Signing time: Mon 21 Sep 2026 22:00:53 +0000
Manifest this update: Mon 21 Sep 2026 22:00:53 +0000
Manifest next update: Tue 22 Sep 2026 22:00:53 +0000
Files and hashes: 1: ClXL4dT4GSld8lEfAWyCYr5cI3Y.roa (hash: gOfRKf6V+xV3ZsFtbBW86oarsiPBo5VFvmb0v2OnPU0=)
2: h-2cuDQKwglaTLBSjl6i9zjOpnI.crl (hash: E3MfaTcWW84k23b1vyxpG3Jvf1NptJV6iobmfBrQTi4=)
3: vT00UMTKIHLp4hINXZvd81w31H4.roa (hash: QI91nZrYvdKW6PkjSidpqTabE42DmbX4YNbp5QsN850=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:7b:a7:b4:ca:5b:58:91:77:cd:75:e4:20:19:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Validity
Not Before: Sep 21 22:00:53 2026 GMT
Not After : Sep 22 22:00:53 2026 GMT
Subject: CN=8b25a7e9da5132447776470de5871b7dee0abb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:45:a0:9b:00:45:6a:96:7d:7c:45:29:ef:
0a:d1:7a:2e:6c:f8:00:0a:3e:90:b4:8c:f6:08:20:
bd:14:82:dc:a0:fc:33:4f:6d:ab:d2:98:d7:2a:5c:
20:d4:06:1b:81:43:b5:a5:56:ae:c2:25:9a:e0:90:
c1:e5:d4:0b:79:a6:24:66:ab:63:9f:81:6f:14:df:
77:ff:9c:34:04:10:eb:4b:31:a9:e5:de:9d:80:0a:
e8:2e:6b:89:a4:26:32:0b:ee:03:38:15:b5:d9:eb:
8f:20:22:f8:f9:ff:ca:63:34:d1:f7:d8:f6:f3:8f:
63:b1:fe:23:10:8a:73:83:d0:8d:36:dc:e2:3c:4a:
52:8d:5c:5b:0f:ad:42:11:23:36:36:00:08:51:26:
62:46:fe:27:a3:4d:3c:6a:c5:b0:22:f4:8f:d7:94:
4b:ab:1d:9f:cd:0b:41:97:90:12:3c:49:25:9d:b6:
4a:0d:98:3d:70:42:54:b9:80:c6:27:0f:e3:8e:42:
21:9b:0d:db:0d:f1:c6:11:90:6a:fa:0b:15:c4:0a:
cc:a0:b2:df:a4:e3:16:db:c3:d5:12:f8:63:c3:80:
7a:6c:c6:c1:6d:32:05:eb:b7:03:36:39:68:95:93:
a5:d1:8d:b0:94:09:12:0f:7f:a8:44:90:e8:30:28:
73:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:25:A7:E9:DA:51:32:44:77:76:47:0D:E5:87:1B:7D:EE:0A:BB:84
X509v3 Authority Key Identifier:
keyid:87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c0:9d:51:e6:85:c8:3f:4a:93:6d:6d:56:d7:10:a9:be:0c:
cb:7f:c9:48:37:36:df:be:3a:d5:08:75:f6:54:5b:f3:2e:44:
c6:0f:ae:08:49:d7:c6:11:95:f9:7e:ae:e3:61:df:b6:c9:fa:
2c:8e:50:83:a0:0b:9f:d6:ea:b9:ff:50:d4:ce:af:47:a2:a9:
86:3f:10:4c:76:1c:14:b3:10:f7:0c:8a:6a:91:65:c1:78:e1:
4a:26:a5:33:37:67:4f:83:aa:69:ea:22:f2:76:79:e3:42:77:
0b:90:e9:a7:21:ee:12:c4:5a:32:43:d9:d1:45:87:10:79:22:
5e:60:82:21:a5:8f:11:5c:8c:9c:35:4b:f8:0b:4a:ab:37:29:
43:c6:25:87:97:fe:8c:48:8d:c3:06:44:11:13:21:1f:41:63:
92:82:ad:66:bb:a6:14:0a:40:c9:79:47:5c:80:45:b5:7d:fa:
de:e2:14:1a:0e:54:ad:2a:90:df:49:06:a0:09:f3:a3:78:28:
aa:8a:08:c6:8c:1b:a2:d3:c8:89:ca:df:bb:4a:a2:e9:6f:a9:
8f:b7:e0:9c:11:87:cd:14:61:3c:87:ff:84:54:87:a7:24:22:
fa:9b:60:a4:ff:62:95:7c:bf:02:f4:8f:be:b0:91:0f:0c:e3:
01:e1:aa:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/HuntMpbWJF3zXXkIBk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZWQ5Y2I4MzQwYWMyMDk1YTRjYjA1MjhlNWVhMmY3Mzhj
ZWE2NzIwHhcNMjYwOTIxMjIwMDUzWhcNMjYwOTIyMjIwMDUzWjAzMTEwLwYDVQQD
Eyg4YjI1YTdlOWRhNTEzMjQ0Nzc3NjQ3MGRlNTg3MWI3ZGVlMGFiYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoFFoJsARWqWfXxFKe8K0XoubPgA
Cj6QtIz2CCC9FILcoPwzT22r0pjXKlwg1AYbgUO1pVauwiWa4JDB5dQLeaYkZqtj
n4FvFN93/5w0BBDrSzGp5d6dgAroLmuJpCYyC+4DOBW12euPICL4+f/KYzTR99j2
849jsf4jEIpzg9CNNtziPEpSjVxbD61CESM2NgAIUSZiRv4no008asWwIvSP15RL
qx2fzQtBl5ASPEklnbZKDZg9cEJUuYDGJw/jjkIhmw3bDfHGEZBq+gsVxArMoLLf
pOMW28PVEvhjw4B6bMbBbTIF67cDNjlolZOl0Y2wlAkSD3+oRJDoMChzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIslp+naUTJEd3ZHDeWHG33uCruEMB8GA1UdIwQY
MBaAFIftnLg0CsIJWkywUo5eovc4zqZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaC0yY3VEUUt3Z2xhVExCU2psNmk5empPcG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82MzgxZDMtNWQwMS00YWJjLWJlZDct
N2IyMWJmMzAzY2NjLzEvaC0yY3VEUUt3Z2xhVExCU2psNmk5empPcG5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi82MzgxZDMtNWQwMS00YWJjLWJlZDctN2IyMWJmMzAzY2Nj
LzEvaC0yY3VEUUt3Z2xhVExCU2psNmk5empPcG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcCdUeaF
yD9Kk21tVtcQqb4My3/JSDc237461Qh19lRb8y5Exg+uCEnXxhGV+X6u42Hftsn6
LI5Qg6ALn9bquf9Q1M6vR6Kphj8QTHYcFLMQ9wyKapFlwXjhSialMzdnT4Oqaeoi
8nZ540J3C5DppyHuEsRaMkPZ0UWHEHkiXmCCIaWPEVyMnDVL+AtKqzcpQ8Ylh5f+
jEiNwwZEERMhH0FjkoKtZrumFApAyXlHXIBFtX363uIUGg5UrSqQ30kGoAnzo3go
qooIxowbotPIicrfu0qi6W+pj7fgnBGHzRRhPIf/hFSHpyQi+ptgpP9ilXy/AvSP
vrCRDwzjAeGqyg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:42:06 2026 by rpki-client