Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: VCEmOpavYcvJePiRxfBGbLoM7PVWNc45icxVdZJczHw=
Subject key identifier: C7:9E:5B:45:67:0C:5B:15:6E:9A:DC:64:37:44:CC:CA:9D:43:41:8A
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 019CAAFD68E52656D9E3542347DE9D05C14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: E0
Signing time: Sun 01 Mar 2026 20:00:59 +0000
Manifest this update: Sun 01 Mar 2026 20:00:59 +0000
Manifest next update: Mon 02 Mar 2026 20:00:59 +0000
Files and hashes: 1: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: 8HbmRVdH31d/mdrSrT/tQEZiBI0CkwixbaQh4ofpDvs=)
2: pii4EjiWYU4Zm1fPwrFZx1lHAcc.roa (hash: uCsxcjM67iyaXfmTKhSaCnWCgdV8f42if+uMcnOjC+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:68:e5:26:56:d9:e3:54:23:47:de:9d:05:c1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Mar 1 20:00:59 2026 GMT
Not After : Mar 2 20:00:59 2026 GMT
Subject: CN=c79e5b45670c5b156e9adc643744ccca9d43418a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:55:4f:52:2c:50:62:03:f1:48:ba:5b:bf:
49:6d:7f:d6:82:d5:06:69:2c:30:f1:00:c6:4a:bf:
87:08:4c:43:33:88:f1:1d:2f:32:19:21:b7:e6:1b:
3b:7b:86:39:5c:74:e3:32:1e:2b:83:ff:d3:04:ed:
6e:24:3d:cd:78:de:fd:1c:cc:fb:52:cc:21:e0:34:
01:7c:31:ab:12:14:b3:03:4e:62:c1:b8:2c:75:1e:
90:04:f4:17:bf:6b:46:b3:a6:52:12:d3:02:54:3e:
20:67:79:9b:46:39:e5:bc:04:69:56:13:69:e7:82:
f0:43:1e:cb:45:85:c1:04:f4:32:ab:b9:85:03:35:
2b:bd:dd:be:d5:a4:0b:c3:47:d0:2b:42:43:08:1d:
ce:ee:4c:84:99:61:08:81:02:99:73:04:d8:f7:ea:
d4:91:8e:24:2c:ac:31:38:b9:b2:f6:fd:9e:da:b1:
71:e7:f8:c0:bd:e1:b7:42:96:34:0e:e2:db:90:9a:
ca:60:d1:f8:a2:2c:ab:42:b0:4a:26:59:50:99:19:
99:af:f1:eb:a3:f8:a3:1a:3a:20:7b:fe:77:4c:0c:
87:3b:32:62:81:52:0c:36:50:b2:bb:95:80:f4:3b:
41:05:82:31:3f:24:30:13:fc:ca:99:0d:d3:6f:48:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9E:5B:45:67:0C:5B:15:6E:9A:DC:64:37:44:CC:CA:9D:43:41:8A
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:61:d6:ed:0b:6c:b5:29:fc:d0:f0:0d:5e:50:1c:23:05:60:
28:b4:d4:d5:ed:e7:1e:97:f5:72:dc:39:59:68:f0:87:2d:05:
6f:7d:ff:73:cf:4c:5b:16:69:19:1f:00:a1:7f:0c:c7:66:e5:
15:9f:35:2e:af:f9:6e:72:17:88:5d:3b:7c:c4:c4:8c:0d:09:
4b:73:72:ee:7b:20:24:30:47:f1:89:27:7d:fb:59:74:40:72:
dc:37:9c:9d:a4:d2:3f:0d:09:62:2a:5a:ef:6f:d3:4a:2c:dd:
ad:18:bf:c7:24:a9:8d:db:71:bf:da:81:df:c4:a9:58:2f:d9:
26:91:dc:52:9e:86:d4:72:15:7e:7a:b3:36:4f:97:23:5b:d6:
87:7c:9e:64:9f:96:c2:5f:57:f4:08:1a:92:de:d9:56:a5:51:
f0:f5:1f:33:5f:80:e1:e0:05:d9:87:71:ec:e4:6d:b9:4a:34:
c7:1b:81:15:5a:95:fe:1b:2d:f2:96:e4:18:2d:e3:1c:99:92:
b2:6e:73:b2:09:bc:c5:c3:72:6c:9b:2c:a3:4f:3a:33:c1:71:
64:72:24:83:19:64:f2:b7:f4:3d:22:da:12:1e:f1:bf:da:a7:
d7:38:24:fa:b3:6b:ae:29:1d:1e:1b:0d:eb:df:09:02:ee:2c:
79:71:7a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:34 2026 by rpki-client