Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
File: h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft (raw, json)
Hash identifier: esN9OYc+P/t2cUwgTKioRk1yBvynmehjgGS80/sg+RA=
Subject key identifier: CD:40:3A:47:01:FD:32:82:04:CA:EF:38:D1:A9:89:CB:D5:A3:B1:CF
Authority key identifier: 87:EB:B7:59:6D:95:83:9A:49:26:67:3B:CD:7B:FF:D3:3B:F8:53:BD
Certificate issuer: /CN=87ebb7596d95839a4926673bcd7bffd33bf853bd
Certificate serial: 01A125B03CEDF13268AD7E86531837E6DA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
Manifest number: 01CA
Signing time: Sat 10 Oct 2026 12:01:09 +0000
Manifest this update: Sat 10 Oct 2026 12:01:09 +0000
Manifest next update: Sun 11 Oct 2026 12:01:09 +0000
Files and hashes: 1: 4VnSoaJFq21OFcZvDPsAEryTDSk.roa (hash: CEZUEzkTNlI42r5UTq7wcvBj5hp5tyvou0Tezlvu5lg=)
2: h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl (hash: FA43gld7YAea3RxyHu4GpuZha3vYp8mid2q6btHrzUU=)
3: zFKSffrPsjxLp1Rn4HVvoFmQLKc.roa (hash: XkXnvMZ9f35IfpEaF5/d3kcQ6c6OZwO+xjVlqj6fwEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:3c:ed:f1:32:68:ad:7e:86:53:18:37:e6:da:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ebb7596d95839a4926673bcd7bffd33bf853bd
Validity
Not Before: Oct 10 12:01:09 2026 GMT
Not After : Oct 11 12:01:09 2026 GMT
Subject: CN=cd403a4701fd328204caef38d1a989cbd5a3b1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:a7:0d:b4:ff:cd:21:78:ab:88:82:09:7e:
74:72:95:c9:4c:f2:d3:12:46:93:6a:aa:23:61:2b:
58:1f:94:a7:c4:b0:c1:dc:32:91:c9:83:4e:cb:a9:
e4:b3:98:02:c7:ae:c8:ed:7c:a2:6a:e7:43:2b:0a:
ba:08:e3:cc:42:b8:99:1e:ee:39:7f:4b:f7:22:b6:
c1:6a:70:3f:7a:ce:85:24:75:0c:93:af:50:1e:b6:
ca:c2:b7:9e:40:e6:e2:20:a9:99:f1:6d:fb:e6:35:
98:eb:01:67:bc:5d:ae:4b:1b:b0:87:c6:fc:40:a0:
40:1a:cc:0f:40:a2:ff:f3:9b:21:68:9f:27:72:50:
c5:5c:37:14:cb:3a:67:73:56:15:49:ae:fc:78:a1:
b3:60:97:7b:aa:7b:e4:21:4a:de:1b:d2:28:e3:aa:
e7:cd:bd:62:97:da:aa:4c:de:eb:77:f8:01:50:54:
a5:73:5c:83:0c:8b:d7:e5:bd:9f:8d:ef:b5:6f:5f:
13:43:62:b8:8e:2b:2d:f8:46:07:d2:6f:65:5c:3c:
f9:6e:4c:7c:15:59:c9:fc:51:e3:76:87:ad:6f:82:
1a:25:e3:30:98:01:2a:58:66:4f:5b:61:cd:d5:4b:
a1:25:af:a2:02:32:8f:98:fa:ee:6d:3b:08:db:d8:
43:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:40:3A:47:01:FD:32:82:04:CA:EF:38:D1:A9:89:CB:D5:A3:B1:CF
X509v3 Authority Key Identifier:
keyid:87:EB:B7:59:6D:95:83:9A:49:26:67:3B:CD:7B:FF:D3:3B:F8:53:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:66:7d:2c:23:4a:b8:65:64:1b:1f:3a:63:5c:ae:cb:46:cc:
31:49:2e:5c:3b:48:2f:e1:2f:36:69:f2:d0:37:1d:95:51:f8:
b2:db:f7:dc:e4:91:9e:43:54:de:aa:a4:4c:22:12:e4:91:8f:
a7:47:7b:d8:3d:7c:83:b4:03:a3:48:0e:de:cd:8a:23:c3:7f:
7a:75:9d:b1:5a:57:0e:a5:74:02:88:2c:27:05:3a:f6:70:43:
0d:59:67:85:72:e7:b5:98:29:83:a8:cc:93:93:d5:c2:06:69:
b8:fe:67:28:89:c4:36:11:5f:3a:08:23:63:79:59:5f:1d:f3:
a0:0e:22:38:58:29:61:22:d9:31:3e:21:57:04:d8:92:af:7a:
ee:de:a5:d3:67:4a:58:da:d4:21:2b:c6:58:ea:d6:ca:df:57:
a7:79:42:ba:5c:3b:10:0a:3c:de:f6:a9:f4:16:4a:0c:07:03:
27:e6:be:6d:3f:d6:2e:04:b1:01:bf:62:14:10:96:95:7a:e4:
32:e4:55:73:a5:6c:46:d7:81:8e:85:4d:c8:77:c7:6b:cc:95:
49:25:2a:01:6b:5d:9b:95:00:9c:e8:b6:b3:14:34:78:ab:1c:
5d:25:8e:d5:9c:cc:ff:c1:b7:94:32:af:39:c2:02:f1:ab:db:
5e:c7:5c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:09:42 2026 by rpki-client