Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: ISXGua+Bo/9hU/Zm8L6+HlNlbIiE5NW/6kS0tqAwtok=
Subject key identifier: F0:0E:7D:FC:86:4D:19:CC:14:D4:64:87:D5:57:EF:22:DD:8A:B5:62
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 019FA9E278F020341155334F50EDFF98CEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 026E
Signing time: Tue 28 Jul 2026 18:00:19 +0000
Manifest this update: Tue 28 Jul 2026 18:00:19 +0000
Manifest next update: Wed 29 Jul 2026 18:00:19 +0000
Files and hashes: 1: U9tquwjV-Fl1Rt7IVQP5hkEY43I.roa (hash: srgZ/d/1Mf+pXoVfocYHeRG57Srn6yyMLcULuvh4vxE=)
2: X7yocFTQF6cpDm4YRCXee2IMJAg.roa (hash: 47J3ggzuN8K15GJrL+w0gv5iDQyMBjOUoNghcomDNf4=)
3: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: 4rFLAKArO5YvpKKMFFM6BjCm2SEKhRDvWV5LvF17KAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:78:f0:20:34:11:55:33:4f:50:ed:ff:98:ce:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Jul 28 18:00:19 2026 GMT
Not After : Jul 29 18:00:19 2026 GMT
Subject: CN=f00e7dfc864d19cc14d46487d557ef22dd8ab562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:cd:83:fe:81:19:74:4d:73:d4:34:bc:13:
e3:5e:fc:76:7b:c2:fd:cf:1c:41:70:37:9b:f6:ec:
76:6f:d8:1c:19:61:2f:32:e0:60:7a:10:c8:2e:0c:
15:bb:72:74:2f:b8:6b:38:10:c7:8b:76:e6:8e:d0:
d3:2d:30:91:f4:86:e7:6e:9b:c0:2f:03:c8:c0:9c:
f6:3c:18:1e:82:78:3f:36:f6:db:44:94:26:8e:7c:
40:6a:86:9c:2f:bf:2d:6a:bf:2b:39:17:72:e8:23:
af:94:58:86:85:51:29:42:02:aa:39:70:e9:6c:b6:
eb:1c:bb:ca:08:49:7e:f7:e1:53:74:cc:4e:f6:db:
f5:3d:05:5f:29:11:10:f3:62:b1:b8:7e:07:6e:47:
1a:32:2c:66:a5:2e:29:d3:c9:7f:f8:bd:fa:0e:1f:
8c:37:57:82:d1:38:a0:9e:00:ce:bd:85:3d:9e:a6:
49:d3:2b:21:81:f0:51:d2:f5:2f:ba:bc:71:45:fc:
6d:c5:79:54:4d:dd:9f:55:b6:49:dc:3c:ed:ae:42:
23:1f:00:51:3f:3c:d5:cb:33:4d:f8:76:e5:2d:2b:
c6:05:13:75:6f:a8:99:01:f4:97:03:77:a4:89:1d:
4d:e6:1c:b4:7e:41:a0:c6:22:3a:52:ed:e0:4d:cd:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0E:7D:FC:86:4D:19:CC:14:D4:64:87:D5:57:EF:22:DD:8A:B5:62
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c6:14:27:0e:8e:18:ad:d9:71:4e:0f:1f:0a:69:37:23:bd:
48:22:0e:0f:d8:70:20:62:7d:94:27:9e:6c:d2:c7:40:ab:e2:
a1:fa:31:74:eb:1e:0a:87:76:c5:ef:50:54:e6:2d:92:20:9a:
eb:88:ce:03:44:eb:be:93:72:5a:ae:bd:3d:ad:1a:b2:15:ef:
84:86:40:16:01:bd:27:00:fb:68:b3:c0:ad:04:bc:3f:32:69:
24:0b:58:9d:9c:c4:42:0b:f0:9c:97:ad:12:9f:76:66:05:6d:
df:0c:5f:77:ee:cf:1c:9c:37:65:bb:1b:89:28:5b:23:87:d2:
60:dd:ba:ad:b0:57:6c:2f:1f:a1:08:22:72:a3:96:49:8d:94:
e9:ba:92:ef:b6:4b:2c:79:37:bb:c0:e4:70:35:1f:85:3b:9c:
33:08:c3:b6:53:0b:c7:d1:34:f6:28:d2:ea:1c:9a:12:67:11:
79:15:f4:08:49:64:f2:6a:25:bd:a6:3d:d7:46:24:3d:b5:b1:
29:94:ce:f3:b4:45:a1:7e:19:db:c7:7c:e3:35:c3:3d:81:13:
5a:9d:e0:9a:66:ad:db:fb:ed:50:5c:5c:87:60:48:37:04:09:
a9:df:d4:b2:56:d5:e8:81:0d:ee:a6:89:50:e0:6c:72:dd:c1:
a8:c1:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:27 2026 by rpki-client