Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: nklwU+qhLTkHHlqkB51xzUOxx4TV2VoOu1R90tvrWV8=
Subject key identifier: 8C:65:83:F4:99:E1:ED:87:22:7B:DF:76:55:EA:32:09:B4:B7:25:23
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019EC0DB06D1BE7667B35BCB1DC695A3CBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 13E4
Signing time: Sat 13 Jun 2026 12:00:39 +0000
Manifest this update: Sat 13 Jun 2026 12:00:39 +0000
Manifest next update: Sun 14 Jun 2026 12:00:39 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: hZ3j9EbOz0TBMgk4eATZHvxACX33kd8m0bBDM2DO1/g=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:06:d1:be:76:67:b3:5b:cb:1d:c6:95:a3:cb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jun 13 12:00:39 2026 GMT
Not After : Jun 14 12:00:39 2026 GMT
Subject: CN=8c6583f499e1ed87227bdf7655ea3209b4b72523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:68:25:23:94:39:5f:e8:cc:cf:20:0f:46:
5b:56:94:2e:fd:e3:66:4a:bf:25:d2:b8:63:c7:69:
99:7e:43:f8:bd:8f:f3:75:b3:28:6d:02:84:38:a2:
4c:12:8c:49:1e:16:01:db:e5:c1:e2:ad:5a:70:a8:
47:2a:7a:26:18:ad:84:ed:d5:1c:22:c2:f8:02:08:
6e:b1:f8:61:09:e0:4f:5f:81:f6:2c:b3:81:bd:ed:
38:b8:b0:57:ae:db:0d:96:64:2c:06:e6:3e:39:f4:
e5:7f:53:49:15:1a:0f:0c:71:59:40:5a:a7:90:9e:
87:b6:ed:d0:14:9d:03:44:07:16:43:84:c8:0e:b2:
59:86:f8:6d:e2:15:8a:2a:25:68:c8:1a:4e:85:c6:
1c:5e:f2:03:63:d4:6e:0d:15:80:53:88:c0:d9:ac:
db:d2:8b:72:1f:58:5c:ce:87:58:f5:7d:85:a8:49:
f6:fa:91:53:0f:3c:04:a9:a2:ed:9b:96:9f:74:c3:
fe:a0:fc:2a:d6:d7:c1:cb:45:5c:63:ba:2f:77:b5:
1a:a2:36:ee:61:97:a4:76:e0:da:96:fc:c1:b5:f7:
45:aa:e5:2e:f3:54:fb:c6:d8:66:3e:cb:58:cd:e4:
17:a1:c8:f1:84:48:59:23:e8:04:92:b3:f9:98:0b:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:83:F4:99:E1:ED:87:22:7B:DF:76:55:EA:32:09:B4:B7:25:23
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c3:4b:2a:eb:20:15:4e:01:13:3c:38:99:5b:83:c8:7e:fa:
5d:9a:4f:ea:2b:23:e5:88:1b:6f:b3:88:42:46:59:9f:96:17:
00:9c:7b:1a:9d:a4:16:a6:52:04:65:fc:c5:b0:d0:29:60:5f:
58:08:f9:2e:da:ce:0e:a6:7f:9f:25:d5:55:e8:31:c8:48:62:
89:7b:0a:5f:b6:32:bc:06:3c:23:ef:b2:17:cb:1c:19:44:1d:
30:20:3e:18:08:d8:3e:85:fb:89:73:6d:c5:41:e6:1e:5e:f4:
12:60:10:d0:0e:42:db:f3:06:3c:85:6b:15:6b:3c:00:70:30:
41:fb:c5:6c:3c:73:ed:8c:77:e1:c2:63:de:99:dc:5d:f7:46:
34:a3:06:ea:4a:a3:4c:6d:7a:f5:c8:34:e6:e6:dd:6f:4f:51:
68:b6:a6:a3:45:24:76:d7:d4:e1:ce:b2:99:cc:7a:32:8a:02:
9d:17:de:6f:cb:c1:0c:6f:46:c5:20:52:c3:d3:58:d2:f5:2c:
39:dc:91:b3:98:bf:6f:a1:d0:9c:84:e7:35:a0:e6:74:4a:1c:
e3:3f:ed:60:26:63:33:e6:a8:b8:f9:c5:92:67:6b:d7:e1:a6:
fc:2e:8b:31:f8:fb:7c:f6:8e:9f:0d:a7:8a:9e:ae:27:85:2e:
d3:38:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:44:20 2026 by rpki-client