Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier: XKaqfaFoHZcfJ5t5H6hmQGbcKdBiuaM5wRau9J5wbEY=
Subject key identifier: 52:25:39:63:BD:A8:72:5A:7B:78:4F:B6:D6:C3:C0:40:4E:B3:B3:17
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 01A0D8DE919A4C1533651672D954032991CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number: 1164
Signing time: Fri 25 Sep 2026 14:00:59 +0000
Manifest this update: Fri 25 Sep 2026 14:00:59 +0000
Manifest next update: Sat 26 Sep 2026 14:00:59 +0000
Files and hashes: 1: K3q7rDAAcTkhLcTgXHyQCl5GQuI.roa (hash: XY2CV23nGfpFfkmgGkboOd40b6zMjm8v5H58JjAU0/Y=)
2: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: Z/UQSv4GAEnxotaqCPGKWqVUimAix8W4vgLIA7b/2j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:91:9a:4c:15:33:65:16:72:d9:54:03:29:91:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Sep 25 14:00:59 2026 GMT
Not After : Sep 26 14:00:59 2026 GMT
Subject: CN=52253963bda8725a7b784fb6d6c3c0404eb3b317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:16:14:87:70:03:c9:5e:64:66:ac:6b:21:
70:07:56:41:3a:c8:b3:13:02:c9:58:10:ea:f4:8b:
e4:b8:b4:ae:f1:b5:73:d2:9d:93:b7:16:e5:09:55:
9f:c2:a3:99:e5:05:db:85:9e:09:18:fc:10:f0:16:
0e:84:47:a0:17:35:02:c9:95:ab:cf:3c:87:99:8c:
57:dc:51:b0:23:75:37:d1:07:f1:79:8d:3c:de:ed:
9c:5c:94:62:2a:6a:57:70:48:da:56:12:f3:da:52:
a2:c6:a2:70:5d:57:a3:d9:37:3b:27:d5:78:20:46:
3a:99:3d:30:fe:64:ba:e1:30:1e:30:63:c0:6c:9b:
aa:a5:80:97:ac:a0:3d:4c:3a:a4:0e:3f:ca:3d:e0:
7e:17:a5:64:b3:3a:e5:42:14:e5:50:78:ed:4b:3e:
3f:32:07:0b:f0:0c:85:2d:e8:ff:ef:18:df:c6:9e:
d5:d1:fe:72:c1:3f:6f:71:05:a1:65:f7:e7:8e:b9:
60:aa:2c:d7:6e:46:ab:54:5c:40:50:5f:01:eb:5a:
ee:bc:54:43:55:33:36:92:bd:2a:4b:3e:69:64:b8:
03:09:5e:3f:f7:2b:d2:38:da:4c:f2:13:6d:85:10:
d5:fd:6b:a0:75:e1:08:d5:88:0b:1d:c8:a6:24:d9:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:25:39:63:BD:A8:72:5A:7B:78:4F:B6:D6:C3:C0:40:4E:B3:B3:17
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:99:94:21:2e:4a:f1:28:e6:4f:b5:1e:2e:b4:57:a8:ac:71:
65:a9:45:ff:4d:68:19:41:99:af:71:99:0c:08:f8:34:c3:d2:
96:7f:fa:c7:2a:dd:c9:fd:2f:46:15:f2:e6:a8:0a:22:95:4b:
4a:f6:b0:24:63:70:a8:3e:17:16:97:c7:75:48:93:67:e8:e2:
90:49:ec:a3:5e:3b:f3:47:1b:df:0f:1a:c8:c2:6b:47:0f:eb:
66:b4:0f:f1:dd:2e:50:07:4c:7c:25:47:00:c4:3e:f9:49:3f:
f5:71:84:77:c3:be:07:b0:f8:02:2d:42:5d:bd:0b:a9:c1:10:
51:40:fe:68:cd:62:c3:3f:db:f7:ec:c4:60:bc:b4:05:15:c8:
a4:a3:82:bd:d8:09:99:7d:00:2d:5b:a3:93:8a:b9:47:73:cb:
e8:9c:80:29:2d:ab:00:d8:f4:ab:f3:77:df:f8:93:e4:16:e7:
15:70:2d:b1:a5:90:d8:e7:d2:33:ef:84:f2:d8:53:20:cd:18:
07:f3:45:f4:0a:f3:25:8b:8c:7e:60:d0:ad:ca:fc:f5:af:0d:
82:a6:b1:7c:fe:e2:d2:d7:ea:9d:39:55:54:8d:91:d2:d6:e2:
0e:28:a0:ee:f9:3a:a2:1c:17:bd:8b:00:52:b8:0c:ee:bd:19:
4e:b1:e7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:01:50 2026 by rpki-client