Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: TTgsfO8IXaF79L694hqRF4cvvkb/1Qj8ek138mSK/lo=
Subject key identifier: 19:FF:B6:0E:0F:26:68:D6:E2:FA:EA:62:08:13:17:E5:62:9E:5C:67
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 019EC0362BE1761BC510130A544A02C35DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 01F5
Signing time: Sat 13 Jun 2026 09:00:35 +0000
Manifest this update: Sat 13 Jun 2026 09:00:35 +0000
Manifest next update: Sun 14 Jun 2026 09:00:35 +0000
Files and hashes: 1: U9tquwjV-Fl1Rt7IVQP5hkEY43I.roa (hash: srgZ/d/1Mf+pXoVfocYHeRG57Srn6yyMLcULuvh4vxE=)
2: X7yocFTQF6cpDm4YRCXee2IMJAg.roa (hash: 47J3ggzuN8K15GJrL+w0gv5iDQyMBjOUoNghcomDNf4=)
3: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: CgQVhods7G4090UyLhSPuWm5q4dG1njKqwMz9pLvwfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:2b:e1:76:1b:c5:10:13:0a:54:4a:02:c3:5d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Jun 13 09:00:35 2026 GMT
Not After : Jun 14 09:00:35 2026 GMT
Subject: CN=19ffb60e0f2668d6e2faea62081317e5629e5c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:36:e3:95:ae:f0:48:36:ca:43:14:fc:5f:
8c:0a:a4:8c:53:54:10:44:96:6f:5d:cd:ce:53:c4:
48:b0:17:9d:f7:2a:46:f1:c0:82:39:11:9e:34:1b:
3e:a2:91:5d:41:97:62:fa:a1:c8:4f:57:41:f6:ac:
6e:6d:4d:da:31:29:42:9d:14:5a:1b:f4:f0:21:2c:
0c:91:f1:07:61:99:a7:31:e0:17:04:74:19:77:7e:
56:09:76:52:a1:fd:3f:b2:c0:ac:98:b4:bd:75:38:
94:d5:2d:77:66:77:6e:a4:ed:53:b6:25:95:98:1e:
1a:a5:cd:5b:9e:82:d3:4e:e9:f5:2b:74:c3:6a:7a:
b8:82:7b:78:a9:b0:7c:c0:70:1f:07:f5:41:e0:54:
2f:3a:f6:a8:e0:0f:9d:48:bb:fa:4d:1d:04:cd:b5:
1c:7f:0a:c4:78:08:dd:63:e7:68:df:45:64:62:3a:
79:19:ca:84:39:dd:84:8d:d2:43:f6:49:c5:32:dd:
2c:b1:8d:58:57:d0:de:1e:5f:5e:c0:61:84:44:53:
f9:58:99:09:e8:ea:bb:a4:a3:19:5f:7b:0d:07:fb:
05:2f:96:53:d8:ce:ad:0d:56:9d:dc:d0:b9:77:fb:
da:c2:e4:5b:27:64:f2:94:b2:04:9e:7f:dc:8d:9c:
8f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FF:B6:0E:0F:26:68:D6:E2:FA:EA:62:08:13:17:E5:62:9E:5C:67
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0b:5b:ff:30:2a:96:d3:9e:3f:3e:fa:83:f1:e0:71:bb:b9:
8d:14:bd:5f:31:4d:3c:4a:aa:49:21:99:67:9a:f5:6a:3f:91:
77:19:ce:40:ea:14:2d:64:42:be:77:1c:5c:59:1c:79:de:9e:
61:6a:be:52:d1:1b:30:98:da:29:c0:60:a1:1f:29:cc:cd:1e:
2f:94:ef:c6:b2:78:55:2e:87:87:c7:88:6e:5c:ec:6b:09:39:
61:c0:b2:22:9a:69:7a:14:dc:8e:b5:79:98:fd:59:d6:2c:45:
76:b1:4c:51:3a:4d:f8:27:91:6f:11:ba:f0:f9:bb:9f:bc:48:
cf:98:33:63:67:41:f5:f0:03:b3:48:2b:5c:66:54:37:e7:50:
8b:b8:7b:ee:f4:20:a7:6f:d4:54:22:99:73:00:30:d0:39:30:
88:3d:9a:4b:eb:e2:62:b7:9c:22:20:48:f5:30:59:56:7c:7a:
f7:14:f9:b6:6e:17:58:27:37:44:33:58:3e:ae:89:5f:0e:70:
a1:80:32:18:71:7f:e3:91:9f:97:2e:c8:33:a7:48:7b:f6:b4:
bb:ac:6b:b0:87:73:5d:b4:6d:a2:4a:f2:1a:33:4a:18:03:06:
02:4f:21:e2:e5:52:02:34:79:9e:56:43:e9:91:d2:a4:ec:2b:
f0:07:89:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:51:23 2026 by rpki-client