Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: HBCwfPpgO++BvPkKj1Q8dsP+Ah3WbGASzj9hntMSecg=
Subject key identifier: D9:03:6E:BA:F3:B5:33:64:BB:E3:54:52:79:16:A7:FB:61:72:DB:EB
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 01A0C6A16507AF24D4E87C4EA427A33C10C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 1614
Signing time: Tue 22 Sep 2026 01:01:00 +0000
Manifest this update: Tue 22 Sep 2026 01:01:00 +0000
Manifest next update: Wed 23 Sep 2026 01:01:00 +0000
Files and hashes: 1: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: +F2qoKQMGvg2sPBeoXvl5n/SlKUChl1qO37zgUwy7pc=)
2: kWlk3w0dN2KpYIrrv87aaZ0vPSQ.roa (hash: 20/xm08kASZgABKR47mCBPYmafSiuXBV+p4gqeriUSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:65:07:af:24:d4:e8:7c:4e:a4:27:a3:3c:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Sep 22 01:01:00 2026 GMT
Not After : Sep 23 01:01:00 2026 GMT
Subject: CN=d9036ebaf3b53364bbe354527916a7fb6172dbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:d7:90:26:37:14:64:16:0b:74:d1:39:e7:
af:a6:4c:2e:41:5f:56:c0:0c:b6:ac:24:89:22:14:
c4:3d:21:a9:49:0d:a0:3c:f2:fa:b6:ea:3c:f8:42:
96:5d:24:98:4a:4d:21:9a:ee:de:2c:a7:74:dc:c9:
b2:e1:e4:e7:46:8e:ac:17:e5:3a:fc:65:44:ab:3f:
4e:e3:a4:c7:4d:ed:fd:e2:9a:8a:21:dd:21:cc:90:
77:f0:d8:98:58:44:f1:e1:81:a4:51:46:26:be:62:
f6:70:43:6e:3b:cf:57:38:0c:3e:0a:de:f3:33:b0:
cd:2e:31:9c:8b:5a:07:48:c3:9f:87:07:eb:7c:0f:
9a:1c:01:36:5b:0a:29:3d:04:d8:09:d8:07:a3:33:
21:02:14:4c:d6:d9:67:f1:83:51:7c:8d:e1:60:c3:
7d:0d:af:56:d9:11:e8:f4:7f:c5:a0:70:8e:42:24:
ca:62:09:ce:0e:a6:fc:20:01:6a:80:cb:98:6f:90:
5c:93:d5:9a:15:7c:c1:64:2c:ad:72:51:33:ad:e7:
11:cd:ca:51:b6:f7:19:b1:9e:97:04:d2:6a:61:6d:
ba:41:23:12:e3:ba:e2:9a:68:ba:e4:61:0c:63:10:
87:57:b3:22:94:9b:33:3a:fb:3a:0d:f5:ad:8a:8f:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:03:6E:BA:F3:B5:33:64:BB:E3:54:52:79:16:A7:FB:61:72:DB:EB
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fe:ca:97:c2:cf:48:b7:62:ec:e8:2d:72:2d:60:5d:d2:08:
37:c7:e1:b7:1b:7b:21:56:4a:3d:6d:ea:44:7c:2d:7a:f0:a6:
f2:bd:37:f1:b6:71:3d:7a:e2:69:2c:c7:cc:85:63:a0:b8:3c:
60:0c:63:6f:b1:a4:d7:c8:14:9e:28:ea:8b:fa:a4:88:89:43:
69:28:05:fb:a0:13:d7:2b:63:8a:7e:48:85:21:07:1d:1b:7a:
6d:9e:ad:09:43:a7:57:b3:ca:99:13:af:de:b2:7d:0d:3c:4a:
32:39:46:c0:c5:38:49:7e:8d:9b:9b:12:a9:70:37:bd:45:97:
d0:f9:01:61:d7:a0:a7:c5:aa:8a:bf:fd:82:85:58:24:95:40:
fb:11:49:4a:70:0a:2c:94:59:27:7a:36:5d:67:23:a6:bf:31:
7a:29:de:bd:e4:e7:7c:bc:80:46:c3:62:49:c7:df:c9:ab:2f:
f0:c1:99:5d:21:c1:74:5f:ca:2f:a2:53:d4:ed:eb:30:7a:d1:
fb:72:26:7d:2a:57:fe:ed:83:4a:a4:0c:3f:71:13:7d:70:99:
57:d3:59:f1:15:aa:40:3a:93:f0:cc:39:2d:f0:c7:8b:ac:20:
e5:98:5e:29:bf:d7:e5:0f:c8:10:9a:bb:d0:13:8b:17:13:3e:
a7:a4:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:47:48 2026 by rpki-client