Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: MjY3cCGPdYbgGifiyxKo6SThI5CEwt3mXF2mxPzxhX4=
Subject key identifier: F1:28:FD:1A:38:06:EE:E0:24:B0:6A:8B:34:0F:29:67:BD:E6:50:2F
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 019D9A74EDE5F9AE0D68B5FF1539B6AF6775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 015C
Signing time: Fri 17 Apr 2026 08:00:47 +0000
Manifest this update: Fri 17 Apr 2026 08:00:47 +0000
Manifest next update: Sat 18 Apr 2026 08:00:47 +0000
Files and hashes: 1: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: zRRTfuxEAE1TBDLaNi4iSa0zcv8zzsBILj71+jCBFLk=)
2: pii4EjiWYU4Zm1fPwrFZx1lHAcc.roa (hash: uCsxcjM67iyaXfmTKhSaCnWCgdV8f42if+uMcnOjC+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ed:e5:f9:ae:0d:68:b5:ff:15:39:b6:af:67:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Apr 17 08:00:47 2026 GMT
Not After : Apr 18 08:00:47 2026 GMT
Subject: CN=f128fd1a3806eee024b06a8b340f2967bde6502f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8a:b4:67:6c:7c:a8:f2:bb:69:28:cb:ca:dd:
36:2c:76:a9:d2:1d:70:25:76:47:00:5e:51:0a:21:
e2:a5:d0:0c:11:d9:5c:52:d6:fc:e1:99:9d:f0:bb:
0a:7a:47:4b:86:2f:07:0e:d2:62:9b:42:dd:18:7c:
30:e1:66:26:ce:f3:d8:31:ed:5c:c7:31:93:a7:b9:
b6:3f:fa:ac:79:e1:d5:01:aa:4f:c9:30:5d:5f:f3:
bf:ff:20:8c:d4:28:62:70:98:c7:e0:5c:f8:67:87:
24:36:06:58:cb:ec:00:25:82:53:3b:22:8b:d7:1b:
b0:78:3f:cc:eb:3c:44:c8:35:7b:12:67:66:03:32:
39:17:f9:1b:b4:71:cc:38:ee:d6:5b:27:a7:1a:16:
22:ca:fe:bf:95:97:69:3c:cc:66:30:79:2b:d2:bb:
18:15:eb:82:6f:56:6c:d6:71:2e:4a:37:0c:13:8f:
36:e7:c1:7f:a0:41:37:3a:99:ac:4e:6b:ad:df:42:
bc:ea:d8:0e:10:d0:3f:7d:56:f5:09:c1:68:d4:2f:
36:f1:e8:88:d9:50:80:cc:f9:99:49:58:e4:68:ed:
b6:30:de:4e:db:4b:92:67:57:9a:b8:42:67:e1:50:
a2:7c:44:7e:2f:9d:17:30:e9:7c:d8:85:63:0e:8f:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:FD:1A:38:06:EE:E0:24:B0:6A:8B:34:0F:29:67:BD:E6:50:2F
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f9:c4:49:6d:72:ea:f9:e9:d9:0e:8a:ff:6c:46:3d:0e:62:
a6:23:3e:9c:15:72:4c:db:1a:a2:db:b9:4f:d9:39:01:91:48:
0c:7e:58:75:e2:97:80:79:9e:b4:49:b5:0e:03:a7:10:85:cd:
57:8e:0d:0e:94:74:21:bc:01:14:6b:ef:14:2d:3d:59:61:68:
70:e9:ba:c2:84:65:f6:17:41:c7:a7:2b:b8:4f:1a:0b:48:1c:
da:b5:e1:08:02:10:c3:ee:97:43:0e:6a:0a:9c:2f:3a:d9:34:
7e:39:69:3a:6b:2b:ea:fc:dd:00:10:e2:ff:b6:57:86:13:5a:
75:92:cf:c2:e8:9f:3f:83:7b:e8:98:e2:73:ff:7b:e0:4c:40:
34:8e:22:5c:a6:6f:c7:0f:6b:0d:b3:d2:58:69:07:1a:6a:b3:
16:d6:4d:3c:6e:61:fc:c4:f0:c8:8e:e6:10:38:4d:cf:6d:4f:
f9:ca:f0:7d:21:45:e4:28:8d:d0:dc:bc:c0:4b:e5:e4:44:2e:
19:a0:04:9c:5e:6a:99:e6:67:f4:e4:16:f1:24:c8:c4:8a:69:
9e:d8:7c:18:13:93:12:eb:eb:c8:08:49:72:75:97:e1:67:cf:
d9:49:8e:f4:d2:a0:06:66:11:73:5e:9f:f6:1f:65:8e:f0:0a:
c4:93:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:58:30 2026 by rpki-client