Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: CxsH3spZKfQR6BqQq5PtZgV6yXmukIAXRJXyR7NVSGk=
Subject key identifier: E3:7A:00:F1:ED:17:E9:C2:82:09:CE:8D:D7:EA:B0:6F:CE:A4:6B:FE
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 019D9AAB8C812A04B109B29E0E2A439E01C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 162B
Signing time: Fri 17 Apr 2026 09:00:26 +0000
Manifest this update: Fri 17 Apr 2026 09:00:26 +0000
Manifest next update: Sat 18 Apr 2026 09:00:26 +0000
Files and hashes: 1: 4cy1aqEYp9F7V13taLUgvqJl6bk.roa (hash: y4AZgnc6ll/dTvazfgvRlzMdkBW1msJHbGpj1pvELdM=)
2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: 3voEfIVMy1uKr+iaHXK2jDSyU8aqKd8l7yNEZr/vpuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:8c:81:2a:04:b1:09:b2:9e:0e:2a:43:9e:01:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Apr 17 09:00:26 2026 GMT
Not After : Apr 18 09:00:26 2026 GMT
Subject: CN=e37a00f1ed17e9c28209ce8dd7eab06fcea46bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:05:30:06:4e:71:fd:71:5c:1c:4b:bd:92:
8d:24:fe:9f:e7:b4:f7:ae:64:44:16:13:60:c9:a1:
9f:14:54:87:cf:b1:b7:c2:ee:df:93:ae:a2:1b:de:
8a:43:88:69:bf:96:c6:e0:16:21:e2:ba:14:3a:a7:
ff:5b:e8:ab:db:89:dd:40:f6:b6:e5:79:88:9b:01:
51:96:47:bb:7d:35:d1:c8:07:77:a2:ce:b0:e4:a1:
a6:72:65:9a:f2:01:03:d5:36:75:d8:bf:31:42:70:
7b:61:ea:54:df:1d:b9:cd:31:85:ec:42:45:fd:c1:
44:7c:5d:18:8b:00:f9:2a:02:14:9e:a9:21:0c:06:
34:37:ca:5f:56:9d:c9:7a:ed:2d:ef:16:94:22:5a:
98:25:73:b8:ae:d1:c3:9f:5e:38:be:24:50:a8:e2:
90:6d:75:4d:c4:4b:5d:1f:55:4f:1e:bd:7a:a3:a9:
0e:c2:33:c3:8a:13:a5:73:44:a6:a3:d9:da:b0:d4:
02:ef:cc:ff:93:8a:e0:ea:87:80:e3:34:f1:85:80:
b1:ea:ab:68:c8:a7:2d:b0:61:4c:a3:73:36:10:25:
4b:35:d4:5c:8c:cb:99:5c:6b:c7:f6:53:42:51:0d:
c3:e9:4d:5d:67:dc:0d:25:f0:b9:33:90:bd:fb:97:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7A:00:F1:ED:17:E9:C2:82:09:CE:8D:D7:EA:B0:6F:CE:A4:6B:FE
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d2:99:c1:10:41:7e:d1:66:82:5c:4d:cc:0a:01:33:a5:1c:
2f:3b:d4:e8:fb:44:1a:61:27:3f:1d:7d:5e:e0:0d:0f:1c:49:
b8:9a:10:2c:47:fd:b4:0c:1d:fc:46:5e:08:5d:da:6a:ad:27:
66:1b:9f:b4:75:29:d5:a3:ef:8d:8e:00:c8:72:79:c3:71:63:
b5:c1:d0:ef:c0:20:3b:79:6e:ae:27:81:f3:66:63:0c:1f:bb:
73:34:3c:8c:3e:d7:68:44:7f:13:58:e3:42:7a:1c:8f:94:a6:
fe:4b:37:40:66:89:c6:fc:cd:a7:2c:f5:c6:29:8a:a6:0d:d4:
9c:dd:a1:68:99:c5:2d:68:71:d9:8a:c2:ef:19:63:e6:c4:22:
00:6f:ec:f6:d0:52:6f:0b:d2:45:a0:3e:f7:70:cd:9d:21:59:
49:bb:34:1e:34:6e:f8:6b:13:e5:85:e0:db:b9:77:4c:17:e6:
34:58:d2:36:30:cc:18:4d:54:67:6b:cc:f8:6f:51:f0:65:78:
8e:6e:14:89:17:bf:bd:78:9c:42:0a:20:b2:b4:45:84:cf:1d:
29:71:3b:02:ab:5f:6c:46:64:0a:28:c6:1f:14:3f:36:5f:c1:
de:68:c7:58:9c:51:eb:03:8c:c2:72:33:cc:0c:23:c9:da:70:
1c:47:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:49 2026 by rpki-client