Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
File: h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft (raw, json)
Hash identifier: IbJzbzyDC5A91B4Ve0OKriYZDSsDFQ2zAHepzUa26tc=
Subject key identifier: 05:84:C4:42:B2:0B:89:EB:55:4A:0E:91:D1:64:73:EC:03:BE:A1:10
Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
Certificate issuer: /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Certificate serial: 019CAD59A4FB2E45EDC375E15C9B7850131C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
Manifest number: 0A67
Signing time: Mon 02 Mar 2026 07:00:59 +0000
Manifest this update: Mon 02 Mar 2026 07:00:59 +0000
Manifest next update: Tue 03 Mar 2026 07:00:59 +0000
Files and hashes: 1: HDdJrGAOCORFyVgyxrNaNeF2t8Q.roa (hash: rD8uKvcs46K8PbUVJgx0QG2NecMmJWf53Xg6anGyvsM=)
2: h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl (hash: lcw5Q0/mthKUAbgTv1uKIYn+C5ePs9/0jsU6IG0I0fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a4:fb:2e:45:ed:c3:75:e1:5c:9b:78:50:13:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Validity
Not Before: Mar 2 07:00:59 2026 GMT
Not After : Mar 3 07:00:59 2026 GMT
Subject: CN=0584c442b20b89eb554a0e91d16473ec03bea110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:e1:89:80:c1:fe:ae:53:69:46:73:5d:f4:
06:d2:0a:56:8e:ab:1b:9e:88:ea:a9:ef:75:01:ee:
dd:f7:8b:48:fc:26:6b:17:b4:c3:c7:3d:b7:97:c1:
55:74:68:05:73:0c:f4:f6:64:a8:ad:b2:d6:bb:21:
a1:3a:d6:2c:d1:e7:3d:55:0c:99:0a:a1:50:d0:e2:
a8:c9:01:ed:28:50:e8:0f:fb:6c:0f:54:c3:ed:7b:
e4:fd:30:f8:09:e1:77:2a:8d:3d:46:6f:b8:c1:d2:
a4:3a:f4:5a:ba:9c:c3:42:5b:42:18:40:b3:c4:75:
b9:b0:f0:c4:d1:ca:f6:e2:bb:19:8c:e1:f2:b3:43:
76:87:30:df:5a:23:10:fe:b6:ce:b6:09:7b:53:45:
75:6c:eb:36:0a:d1:54:a6:06:34:d3:9e:c1:a5:b1:
43:e9:3f:3c:fa:92:57:36:6a:e3:b1:33:ee:8d:d6:
1a:18:0e:70:9b:2f:5d:76:73:60:f9:09:c7:38:6b:
19:8e:45:24:f6:f8:0a:b3:94:43:1e:4d:c4:6c:80:
61:cf:c1:dd:c8:99:0e:b5:a7:d9:21:a6:79:c5:52:
b4:b4:f3:37:67:f6:42:cd:48:7e:d4:a0:22:60:24:
ad:6d:6b:48:73:78:06:f4:43:45:ee:80:1a:4a:b0:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:C4:42:B2:0B:89:EB:55:4A:0E:91:D1:64:73:EC:03:BE:A1:10
X509v3 Authority Key Identifier:
keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b6:2b:21:f7:7a:9e:38:de:08:d1:77:a8:ee:d9:f9:45:a6:
de:2f:f3:ae:49:a2:eb:53:b5:7e:68:0c:26:3a:44:83:88:4e:
3f:01:d9:cd:b5:ee:02:51:d4:3a:15:f9:3f:d2:f2:1b:ff:e7:
f8:13:04:c2:aa:6d:94:47:bd:ce:27:7c:82:d7:16:6c:6d:9a:
98:ed:d5:16:bb:03:96:c0:49:c7:3a:b8:e0:8a:4c:fa:c9:06:
61:4f:fe:9d:36:92:03:c3:d0:c1:15:2c:79:4b:d6:03:2d:cd:
c6:dd:9f:a7:15:e8:ae:47:3d:51:ae:49:88:17:33:36:43:7d:
ea:b4:a0:27:c4:c7:02:7a:d5:9b:cf:ca:11:6b:74:7a:a0:54:
30:39:03:8d:13:a5:32:d7:d5:fd:a0:d0:62:ad:ca:20:49:c7:
21:bb:2d:62:42:64:15:db:b1:fd:1e:58:89:17:9c:97:88:bc:
74:6f:5c:d7:24:67:3a:ba:89:ab:76:11:a0:ae:45:43:c6:bd:
81:79:40:70:28:fa:73:d3:f0:4a:3a:61:8a:3c:e2:49:ca:7d:
bd:27:1e:03:cb:47:ce:66:da:43:09:8b:0c:c5:b2:42:db:13:
00:44:1e:f9:57:a1:a4:ae:93:0c:f1:55:08:fc:5d:2c:51:4c:
f0:7e:14:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWaT7LkXtw3XhXJt4UBMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YzNiODVhN2JlZmJiNDQ5MGQ3YWM4NTJlYjhiZTg0YmY5
MzhiNGQwHhcNMjYwMzAyMDcwMDU5WhcNMjYwMzAzMDcwMDU5WjAzMTEwLwYDVQQD
EygwNTg0YzQ0MmIyMGI4OWViNTU0YTBlOTFkMTY0NzNlYzAzYmVhMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ePhiYDB/q5TaUZzXfQG0gpWjqsb
nojqqe91Ae7d94tI/CZrF7TDxz23l8FVdGgFcwz09mSorbLWuyGhOtYs0ec9VQyZ
CqFQ0OKoyQHtKFDoD/tsD1TD7Xvk/TD4CeF3Ko09Rm+4wdKkOvRaupzDQltCGECz
xHW5sPDE0cr24rsZjOHys0N2hzDfWiMQ/rbOtgl7U0V1bOs2CtFUpgY0057BpbFD
6T88+pJXNmrjsTPujdYaGA5wmy9ddnNg+QnHOGsZjkUk9vgKs5RDHk3EbIBhz8Hd
yJkOtafZIaZ5xVK0tPM3Z/ZCzUh+1KAiYCStbWtIc3gG9ENF7oAaSrASfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWExEKyC4nrVUoOkdFkc+wDvqEQMB8GA1UdIwQY
MBaAFIfDuFp777tEkNeshS64voS/k4tNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzVjYzgtYjNlZi00MGZjLWFlNDAt
NzhlYzgwMjMwNjhmLzEvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzVjYzgtYjNlZi00MGZjLWFlNDAtNzhlYzgwMjMwNjhm
LzEvaDhPNFdudnZ1MFNRMTZ5RkxyaS1oTC1UaTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrYrIfd6
njjeCNF3qO7Z+UWm3i/zrkmi61O1fmgMJjpEg4hOPwHZzbXuAlHUOhX5P9LyG//n
+BMEwqptlEe9zid8gtcWbG2amO3VFrsDlsBJxzq44IpM+skGYU/+nTaSA8PQwRUs
eUvWAy3Nxt2fpxXorkc9Ua5JiBczNkN96rSgJ8THAnrVm8/KEWt0eqBUMDkDjROl
MtfV/aDQYq3KIEnHIbstYkJkFdux/R5YiRecl4i8dG9c1yRnOrqJq3YRoK5FQ8a9
gXlAcCj6c9PwSjphijziScp9vSceA8tHzmbaQwmLDMWyQtsTAEQe+VehpK6TDPFV
CPxdLFFM8H4UNQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:01 2026 by rpki-client