Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: wlPJfmuxmDZ8GButd+rondkanLU2S0SvrjMITn7aoBU=
Subject key identifier: BC:7F:12:AB:74:C7:54:65:4F:6A:EC:EE:5D:AD:D7:A8:6E:18:78:07
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 01A0C557A47ECDEABF92470EE1B1B62B9476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 1A7A
Signing time: Mon 21 Sep 2026 19:00:50 +0000
Manifest this update: Mon 21 Sep 2026 19:00:50 +0000
Manifest next update: Tue 22 Sep 2026 19:00:50 +0000
Files and hashes: 1: 4L2HrkOMp5Px3ZdgqOBGMnz6oXw.roa (hash: qjbkKzm11wnXRFJIt4quryujdmBS5m5m8Id3/w9vHFw=)
2: 78tSQmB_UZC_rIGDHLnxnqOm3fI.roa (hash: 3kNkwMTWy/XYCkJODFF1IVosQpGtDfhW2/dwVf0UwBQ=)
3: JIk4GJqmgSwzYSk0JGPNI21QRnM.roa (hash: 45ZLZSPO108JAO0yb1j8MEBiHT4QdE4zU9XBhQbVqtg=)
4: PY323kbvCRFsNrwGFI26gXv0gpE.roa (hash: U0ksXLpw7uH4vwqe/cNwV58+FVim6JoHjXiFGt1giNE=)
5: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: hQ6wLbE16rp9/x3Tc6sMdteEmwB4NqVpbw2a5Zpmueg=)
6: oLb_BG6B2irYYvpJ_Dg1uPHKCq8.roa (hash: iEVASa2ks9RBbT4CSfXOVtY8JacDD8nYL36EtVLSvLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:a4:7e:cd:ea:bf:92:47:0e:e1:b1:b6:2b:94:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Sep 21 19:00:50 2026 GMT
Not After : Sep 22 19:00:50 2026 GMT
Subject: CN=bc7f12ab74c754654f6aecee5dadd7a86e187807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:88:33:55:dc:0c:a8:22:06:b3:38:4c:a9:
89:7a:ac:53:f3:43:50:26:18:70:fe:bd:e6:77:93:
5b:ee:c6:8e:b4:aa:fe:4e:21:f8:03:94:93:57:c7:
47:d2:33:24:c9:16:19:47:cf:31:13:11:eb:78:e2:
fd:8a:fd:d7:59:e7:7d:d6:83:19:f4:85:d9:48:e6:
6a:b6:02:fb:da:db:c1:5d:96:1a:83:f0:dd:dc:98:
20:67:43:3a:49:06:09:75:3f:f8:81:f4:29:3f:1f:
be:80:32:75:3c:82:99:b4:b8:be:39:2c:04:26:b0:
07:8a:56:60:bf:66:57:2d:43:2b:db:69:2e:82:72:
47:40:bb:10:cd:73:5a:b5:2a:86:79:80:5f:fb:cb:
be:92:df:22:e8:29:0e:20:f3:b3:db:fa:50:fc:99:
11:49:52:f7:3c:a5:64:89:0d:8f:08:8c:6e:aa:0a:
b0:c2:b8:2e:65:31:69:0f:35:0e:f3:cd:b6:f7:19:
56:4e:e8:8b:c1:c2:f5:99:0c:35:53:39:ba:8d:e5:
22:e0:97:70:82:73:c2:61:fc:22:66:74:b5:15:fd:
d0:24:45:72:e4:29:ee:fd:d5:df:78:66:6f:d1:26:
c2:dc:d1:35:84:00:d4:74:70:c1:87:ab:94:08:da:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7F:12:AB:74:C7:54:65:4F:6A:EC:EE:5D:AD:D7:A8:6E:18:78:07
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:eb:ee:3c:f9:96:7a:1d:d3:5c:98:57:bf:f0:29:ba:46:e9:
0f:b1:ac:cd:4a:07:2e:e6:a5:dd:ef:8a:a0:e6:1d:74:04:b2:
dc:af:93:29:ba:72:2f:5f:2e:08:a8:38:1a:78:30:4b:00:23:
95:9b:0e:8d:2f:ad:dc:86:9f:7c:e0:1a:a4:6b:18:86:ca:45:
35:64:ad:3a:85:44:b1:65:2a:8d:4f:87:9e:79:65:e7:d6:50:
29:dd:33:18:5b:99:37:2b:85:70:70:e5:81:9b:fd:bb:5c:7a:
c7:e0:04:0f:07:85:bc:c9:96:4c:d7:37:01:d6:aa:e2:bf:98:
7d:e1:fc:72:34:23:91:7e:04:f5:74:38:28:54:2a:bf:e1:e0:
1e:69:44:90:86:d7:bb:26:56:8a:d9:20:a2:db:94:70:63:85:
be:d5:a0:69:44:53:9c:52:01:20:fc:e3:53:c9:c3:9d:c2:0f:
9f:40:3e:b3:0a:49:ab:50:13:04:55:79:9d:2c:c3:85:6e:f5:
67:f6:60:d5:bb:3a:7c:b8:37:19:1c:a8:5a:1e:31:7b:ef:6b:
c7:fb:b8:3d:16:ed:dd:63:73:73:de:69:c6:33:e9:a5:3a:42:
c9:55:f9:a5:7f:8f:9e:ce:42:27:24:9f:66:60:74:82:f5:c5:
83:51:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:24:25 2026 by rpki-client