Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
File: h94IWXXeZYjgf-0TVROqOKztt2M.mft (raw, json)
Hash identifier: Vs0KGlKTJ7W3oowBuEZN9s18mI0iBarRETt6nhiPU+E=
Subject key identifier: 02:16:1B:07:3A:EA:2E:59:45:A4:22:AF:47:52:C8:AE:6D:53:81:42
Authority key identifier: 87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
Certificate issuer: /CN=87de085975de6588e07fed135513aa38acedb763
Certificate serial: 019EC148CEF6DBAA475BB6AE4BFB5C920795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
Manifest number: 0D43
Signing time: Sat 13 Jun 2026 14:00:34 +0000
Manifest this update: Sat 13 Jun 2026 14:00:34 +0000
Manifest next update: Sun 14 Jun 2026 14:00:34 +0000
Files and hashes: 1: h94IWXXeZYjgf-0TVROqOKztt2M.crl (hash: Dwa25eiFxXoCTzitiursm4acxoxuaG5KUre0aB0zHes=)
2: kGQeneiJZNT_BjB_XoReSyXguQ8.roa (hash: yt9dzzQfHrZsnLkuZ9r3U4v8elv0IkIyoER8sIW2HPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:ce:f6:db:aa:47:5b:b6:ae:4b:fb:5c:92:07:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87de085975de6588e07fed135513aa38acedb763
Validity
Not Before: Jun 13 14:00:34 2026 GMT
Not After : Jun 14 14:00:34 2026 GMT
Subject: CN=02161b073aea2e5945a422af4752c8ae6d538142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:bf:c1:ad:ff:25:e4:ed:26:f7:35:34:c7:
a7:cf:b3:84:2e:70:14:48:fb:08:53:7e:22:01:e4:
a6:10:ec:76:4c:46:e8:7f:a2:91:db:07:73:99:7a:
72:a5:04:25:39:8b:da:86:f1:85:00:ab:2f:d2:ed:
d0:ee:36:c5:34:b1:15:d0:8d:ca:69:b7:b8:11:a2:
f6:c1:0d:17:c4:75:4d:43:96:84:c5:b0:9d:a2:1c:
88:57:aa:4b:b9:88:f6:54:dd:a6:7f:08:b8:75:a9:
66:ca:22:a9:b8:a7:45:ec:b5:02:d4:32:26:aa:52:
34:bf:e6:bb:11:f5:8f:21:b1:6b:14:f3:88:b2:5b:
45:6a:39:35:43:48:fa:43:4f:19:c7:81:85:02:45:
b9:79:18:c4:a3:6d:0e:39:71:b1:05:7a:ea:d2:82:
ce:d6:98:c8:b7:ba:86:77:99:31:5c:f5:ef:35:ac:
e5:1c:9a:73:30:1c:22:b4:32:7f:3c:a2:7e:de:a5:
b4:07:5b:1f:ab:e6:a7:3f:ad:86:ab:5b:54:ee:6d:
69:55:af:15:07:a5:38:fb:2a:b9:a4:f4:16:95:45:
b3:90:93:3f:bf:3b:a5:e4:eb:aa:d5:c4:7a:cc:42:
88:93:15:ea:2d:34:da:9e:da:4c:3b:15:c2:dd:88:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:16:1B:07:3A:EA:2E:59:45:A4:22:AF:47:52:C8:AE:6D:53:81:42
X509v3 Authority Key Identifier:
keyid:87:DE:08:59:75:DE:65:88:E0:7F:ED:13:55:13:AA:38:AC:ED:B7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h94IWXXeZYjgf-0TVROqOKztt2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/h94IWXXeZYjgf-0TVROqOKztt2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:78:59:7f:70:a9:b9:d9:7a:76:44:73:68:3a:15:54:4f:5e:
2b:11:fd:59:ab:73:8d:17:49:5d:82:55:be:1a:81:38:d5:e7:
ee:03:c8:f2:45:c6:78:ae:e7:cf:26:30:2e:f0:08:fd:b6:b7:
63:af:96:06:91:a7:a1:08:65:51:39:9d:23:9b:cb:61:67:49:
75:06:64:29:01:70:0b:5b:c8:a0:c6:c3:a5:90:8c:f1:79:b4:
72:90:32:8f:19:b3:20:85:26:9a:db:ff:94:8c:96:17:7e:7d:
db:61:28:a9:52:6c:1c:59:ed:c9:05:77:8e:0d:cd:c1:45:3b:
44:3e:ff:59:2d:c0:d1:b5:6b:ae:1c:81:52:ed:5a:fd:7a:86:
33:d4:1e:90:b1:5d:ee:7b:77:c7:48:f8:25:3f:fe:3a:f4:94:
6e:af:e3:52:95:1e:9d:93:e8:8c:99:d3:8b:e4:58:85:b3:95:
98:ab:89:81:2f:8a:1d:43:1c:f9:35:be:2f:4b:c8:b1:9e:05:
a3:3d:aa:14:56:21:48:25:08:e8:7b:d4:d8:65:c5:1d:9f:5b:
39:c0:0a:76:ef:8f:a5:8d:a6:a9:5b:0c:9d:40:db:35:54:27:
5a:60:8c:89:78:e1:9e:5d:f8:bc:25:bf:38:7a:8b:a1:c6:5b:
85:7c:fb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:34:51 2026 by rpki-client