Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: 6o95Ts1C5kq96lJBkwEeyWoBf14yH+aYAcoHAm0yjus=
Subject key identifier: 8E:2B:C4:18:21:6D:8E:A2:E4:7A:55:46:BA:A0:CB:59:FA:95:78:DC
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019CAB33D82AF2E540E718293F2543A0B3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: C9
Signing time: Sun 01 Mar 2026 21:00:27 +0000
Manifest this update: Sun 01 Mar 2026 21:00:27 +0000
Manifest next update: Mon 02 Mar 2026 21:00:27 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: cRnEXdD2jX5cczhstm3NwXcns6rQknRDkR4o2Jw4hZM=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:d8:2a:f2:e5:40:e7:18:29:3f:25:43:a0:b3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Mar 1 21:00:27 2026 GMT
Not After : Mar 2 21:00:27 2026 GMT
Subject: CN=8e2bc418216d8ea2e47a5546baa0cb59fa9578dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:55:0f:ec:8a:9c:dc:6e:9d:53:ee:85:24:
fb:0f:6a:b9:65:04:5d:c2:07:80:d7:29:c4:01:fd:
e3:a9:b5:f1:8a:74:c4:f4:50:ce:c6:06:61:f0:3b:
c8:3a:90:ae:12:53:ef:62:fe:c0:be:50:e6:05:4d:
31:e7:21:18:5f:81:25:67:9c:a2:83:ca:86:11:57:
a8:c2:85:de:32:4d:8c:b4:f9:29:0c:56:cb:11:fc:
0f:65:7c:ae:21:db:44:8b:b3:31:d5:4f:c3:2d:22:
10:18:e7:11:c3:f5:70:8f:c7:77:3a:b1:02:01:49:
6a:f9:41:fb:c6:a1:af:f5:5a:ad:8f:d2:3f:f0:2d:
5b:54:fa:02:4c:b5:19:4d:82:26:ca:46:fc:99:d9:
34:94:56:60:73:61:c1:b4:8f:3b:c5:30:06:d5:25:
a1:38:72:be:10:24:7f:1a:a4:27:41:7a:38:30:27:
6a:ee:5b:f9:f2:a8:e9:47:73:3b:d1:69:3c:b7:ea:
6f:f3:5a:c6:c2:b4:7a:4c:bc:5d:63:bf:d2:0e:dc:
20:a5:bd:38:44:52:c1:99:c1:74:ca:ad:88:d2:75:
bc:11:6f:4a:cc:27:47:05:70:cb:e9:4c:21:de:8e:
82:5f:fa:38:76:fb:fb:28:bd:4c:cd:8a:db:96:6a:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2B:C4:18:21:6D:8E:A2:E4:7A:55:46:BA:A0:CB:59:FA:95:78:DC
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:5d:b6:a0:0c:a4:b4:f9:16:36:c4:cb:1c:c1:59:6e:58:a1:
e5:93:6f:f7:ed:62:83:01:1f:70:25:03:17:fd:9f:4b:4a:11:
cd:37:be:8a:d0:76:eb:57:e9:9f:46:f9:1d:fe:f9:b1:d2:dd:
9e:9c:c4:66:78:f4:5a:f3:32:50:7d:40:cd:68:21:43:ac:12:
ef:17:ab:38:b8:85:10:4e:10:a4:98:48:f3:8e:15:92:32:46:
29:fd:37:7b:47:e8:b9:4d:b5:52:3c:2b:f8:22:0e:80:57:8b:
97:24:8c:31:9c:d0:08:48:e1:9d:55:91:00:4c:91:03:7a:d3:
32:fd:bb:a9:4f:a4:07:66:e7:10:92:0a:36:4d:3c:bf:21:c2:
9f:84:71:28:4f:f4:4d:f4:24:ae:13:bc:39:dc:3b:15:5e:92:
23:d8:87:5e:f6:a3:d6:7b:69:c1:34:f4:33:eb:f3:4c:1e:38:
e9:ae:89:3a:f7:6d:db:9b:0e:67:78:ef:fe:e8:36:0e:0a:8b:
22:24:33:ac:00:e0:21:1b:d8:24:4c:f7:b3:81:e3:e9:08:40:
d7:83:51:9b:2e:d7:10:da:43:b1:cc:41:2d:32:50:ce:a4:09:
e2:94:2f:3d:88:5f:91:c1:d9:7c:62:e6:0e:2a:b6:87:8d:26:
41:e1:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:00 2026 by rpki-client