Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: YR8ECcJUZN+6qCsSaqzVdUQGer3zmilgid7nCrK5uS4=
Subject key identifier: 87:BB:43:25:42:EF:52:8E:F2:08:AB:E4:FD:65:D4:85:A4:A3:A3:5E
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 019EBE7F33A95EDCF1FFC0FEE4E865E695A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 1506
Signing time: Sat 13 Jun 2026 01:01:07 +0000
Manifest this update: Sat 13 Jun 2026 01:01:07 +0000
Manifest next update: Sun 14 Jun 2026 01:01:07 +0000
Files and hashes: 1: aMxhZsLMDx304AXjnZldJIQi_VU.roa (hash: nX4KFrnvKm65Zf0OrETssJJWMj+/5dAoLpEa4nDLRE4=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: czDuHX4F94arwxSW68Lk4u57C3qiIgkeC/FVCVC59RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:33:a9:5e:dc:f1:ff:c0:fe:e4:e8:65:e6:95:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Jun 13 01:01:07 2026 GMT
Not After : Jun 14 01:01:07 2026 GMT
Subject: CN=87bb432542ef528ef208abe4fd65d485a4a3a35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:8e:d0:17:24:8f:61:c5:0b:28:73:59:91:
bc:3d:4d:8e:ff:60:d9:dd:ea:45:17:c0:3e:fe:8d:
b4:bb:3b:b3:a4:38:5d:ff:99:15:40:81:c5:0c:f1:
eb:40:27:62:80:5b:79:2d:fd:2d:1a:d3:9a:0d:f1:
6f:d7:6d:41:33:f2:25:ef:9e:0a:7d:bc:7f:b5:09:
4c:2a:cc:3d:05:4f:35:fb:d0:61:79:d5:36:3c:10:
a9:f5:47:2c:dc:7b:1a:73:bb:25:85:6b:e6:b1:ed:
2f:77:08:19:94:db:f9:6a:96:4d:60:da:04:68:7b:
7c:4c:d8:35:8b:b5:bf:85:48:6c:48:87:ac:1b:95:
79:02:57:f5:2d:aa:f2:68:98:f1:98:47:e5:eb:2c:
ad:6c:86:10:89:38:85:b6:ab:1c:0b:b1:8a:1a:85:
34:88:9d:72:3e:02:50:f8:c2:a3:5e:06:99:60:0d:
f7:2a:58:fc:17:48:39:37:d5:db:99:86:34:f1:94:
8c:7c:0b:3d:8c:62:8d:d0:90:59:84:1d:ea:60:1a:
f5:27:12:97:88:82:4b:22:36:5b:85:b2:5d:fc:42:
9f:7d:9c:74:79:5c:b9:b8:af:c3:0b:d4:77:f3:c5:
37:24:07:7c:c0:94:69:cf:78:3e:88:8b:4e:d1:99:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BB:43:25:42:EF:52:8E:F2:08:AB:E4:FD:65:D4:85:A4:A3:A3:5E
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:eb:0e:fb:14:bc:fe:a9:ed:b3:ac:b6:cd:59:82:15:25:8c:
63:48:eb:bd:c9:4c:5e:7f:3a:b1:3b:71:7d:0f:24:3e:67:35:
9b:c4:c2:e3:9e:6a:1c:d2:7a:1f:5d:6c:6d:86:04:d5:53:a3:
38:0f:0e:a0:eb:85:07:95:30:7e:3b:fd:03:e7:31:b7:5b:57:
42:5f:5e:18:c3:b6:d7:cb:94:b9:93:5e:1b:20:3a:06:c1:0d:
c8:91:94:e6:4e:e9:bf:c7:4d:b0:58:a4:f7:85:28:12:76:e7:
07:e2:b2:05:70:c9:36:32:84:b6:21:86:5b:92:45:0c:11:2c:
68:b0:90:96:5d:b7:70:23:76:f7:5c:c4:83:25:fd:2f:83:4d:
91:10:70:22:c7:72:10:f5:49:99:74:e9:bd:db:01:2a:ad:e6:
64:10:0e:65:c2:f0:5f:3c:00:5d:0e:16:53:94:f7:e6:45:eb:
5e:6d:02:9d:1a:6c:dd:fe:ec:fa:82:d2:c8:19:46:a7:8b:0f:
ee:c7:12:32:7e:1f:05:0a:fe:9f:bf:8d:40:88:dd:30:a6:a7:
e5:09:3e:fe:86:3a:74:d7:3c:2d:71:c6:f1:54:c0:b9:f1:3a:
e6:eb:2a:5f:dc:57:c6:2b:8f:90:21:b0:ae:d2:44:39:55:55:
5c:8e:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:21:40 2026 by rpki-client