Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: iQrRyTFAtlS/ZFKxuzWptBG+/vt9Qi+ET3goqPiE59c=
Subject key identifier: 10:BE:6F:D8:64:FD:CB:24:85:97:60:22:DC:48:45:3F:D8:2F:AE:8F
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019CABD8E7880A9C6B9EF19272C1736E5723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 12D0
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: RQUhcllxYI8m/Hyde0GTlaI9bQaTyfOEncUefDhJ9xs=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e7:88:0a:9c:6b:9e:f1:92:72:c1:73:6e:57:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=10be6fd864fdcb2485976022dc48453fd82fae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:f5:78:71:29:1e:a2:2d:70:9d:e2:dc:f3:
cd:0f:3b:e2:f3:f9:a1:b3:07:e3:13:0d:61:b4:91:
53:2f:7d:a0:35:44:e1:e3:0d:62:ad:dd:ed:14:10:
2f:3b:42:a9:3e:81:3e:f5:bd:7e:d4:c1:da:a6:1b:
75:82:5e:3a:86:1b:82:36:46:9d:1b:1b:b7:f4:b0:
fc:61:b3:84:56:cb:74:f1:e4:2d:54:01:05:17:75:
e3:f4:22:02:0a:33:b7:66:a5:7b:4b:30:49:0d:54:
f3:20:01:aa:8b:32:77:fc:a8:6e:a6:53:20:47:96:
41:d9:d1:78:4a:31:ba:b3:70:ce:16:41:e7:1d:2b:
7e:32:61:4e:9f:9e:c2:2c:e2:82:8b:09:c9:90:97:
3d:51:3c:97:24:e3:52:72:cf:35:bd:3c:34:40:d8:
57:5c:60:87:c3:22:c2:68:cb:3a:d9:f6:63:bf:8b:
d0:30:35:ea:a8:36:02:e5:5b:40:82:65:13:07:36:
75:8a:74:cd:ee:13:24:fe:8f:a3:37:48:1d:29:7e:
dd:d1:cd:61:31:17:50:f5:9a:50:4c:46:d5:82:8d:
46:36:9f:83:b9:7d:86:8a:01:63:ac:c7:9e:0d:e6:
d0:f1:08:f4:e9:d7:30:77:80:87:e4:92:a1:fc:cb:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:6F:D8:64:FD:CB:24:85:97:60:22:DC:48:45:3F:D8:2F:AE:8F
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4e:f7:6d:5f:c3:f0:db:1a:bb:d9:c4:04:0b:dc:4b:21:d5:
cd:f6:8e:cb:54:d0:28:9f:1c:07:89:b3:b0:62:04:f2:67:8c:
c8:78:df:82:73:8a:66:5c:db:41:2a:bb:bb:35:00:9b:39:92:
67:8b:7a:62:15:f2:1c:b1:dc:d1:97:71:f8:c2:97:19:4c:35:
81:09:66:04:8a:21:f6:26:30:ba:03:77:fa:5a:ba:df:27:39:
02:8c:2f:8f:5f:e0:8a:b3:6d:55:fb:f1:4f:d1:71:c8:81:e8:
b0:8d:cb:97:94:e0:85:05:84:ba:70:8f:91:de:ad:fc:fd:97:
5e:26:69:b2:ca:ca:5e:da:7d:d8:35:8d:ea:22:4b:75:36:46:
98:b7:a9:0d:fd:c5:d0:83:67:4b:68:47:6e:77:41:10:e7:2d:
28:22:e3:c5:f7:68:88:64:0f:5f:1a:57:25:18:a4:8a:ba:bb:
06:fd:bd:b2:61:94:64:9b:34:ac:da:52:38:78:4c:0c:24:b3:
6f:f6:0e:25:f9:b3:f5:a2:3d:70:6c:73:4b:59:58:80:61:67:
75:c6:1a:dc:ee:c1:73:f0:b3:53:0d:70:ba:ca:31:1a:e2:d8:
ec:5e:28:a0:f5:a5:ec:25:64:c9:47:e6:2a:4e:02:da:d5:9c:
bc:da:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:31 2026 by rpki-client