Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier: JnVLuwy3vcB5NpaBT+tYW6eRdTRmIoIyWuIJ7Ta08pI=
Subject key identifier: 70:95:65:D7:B7:72:A0:0F:B0:15:B8:66:6E:19:AD:6B:EA:8F:C1:E5
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 01A0D45DD3DCFBFEB9D89189F767B00D2FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number: 0DF6
Signing time: Thu 24 Sep 2026 17:01:53 +0000
Manifest this update: Thu 24 Sep 2026 17:01:53 +0000
Manifest next update: Fri 25 Sep 2026 17:01:53 +0000
Files and hashes: 1: 3I57kWj-MwOuWGgEJOOA7NVOnaw.roa (hash: u4MWGRCWmsfLRNP506Vpdbs2aaAzu9zhtPD+IDIYvpU=)
2: CnF9cjlgaGUvfor-A11xEctTpak.roa (hash: lSwL0usE/Gb/GkCss8GSY6ht7fo/KB8MqQdEL3prjBY=)
3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: gp3mRatwtSeSObn26UeFxkK0Sm53ZP0DvXgOzfazzaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:d3:dc:fb:fe:b9:d8:91:89:f7:67:b0:0d:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Sep 24 17:01:53 2026 GMT
Not After : Sep 25 17:01:53 2026 GMT
Subject: CN=709565d7b772a00fb015b8666e19ad6bea8fc1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:51:8c:c4:92:4b:0d:84:8e:83:ea:14:7b:
d6:0b:9a:ed:32:cf:5d:6f:71:03:5b:80:31:37:d6:
2a:81:c9:ce:af:96:f2:6f:df:6c:35:ab:48:d8:9a:
85:a2:b1:2e:50:0d:f8:3f:c0:a2:ad:26:05:f9:14:
ff:e8:ad:04:4e:d3:38:40:6e:91:c9:75:52:98:bb:
d4:0d:80:0d:49:e4:ad:36:2b:1f:b8:23:7b:0c:a6:
78:f4:57:38:9f:bd:49:c2:e9:c3:22:c3:ab:4a:ff:
eb:18:3a:78:e3:70:75:c1:50:20:3f:3c:69:72:e0:
37:b3:fd:6d:e1:7b:8b:c1:78:08:de:71:63:c5:8e:
77:87:a2:32:f1:a1:f5:59:e9:48:df:a7:13:79:ed:
68:bd:d6:bf:48:23:a8:ec:24:93:59:b2:89:38:6c:
cc:ad:68:d1:70:4c:72:99:db:21:7f:c8:32:00:0d:
36:a7:12:0d:91:ed:93:37:3b:10:4c:cb:df:93:bc:
ff:d0:a4:05:24:9b:54:cc:9d:2d:8a:5b:18:4c:f9:
ec:53:c0:37:9b:32:eb:dc:11:9b:20:04:f8:78:85:
21:58:8e:34:88:8a:90:97:a7:cf:21:e6:c4:96:4c:
b1:47:65:d9:c6:11:24:d4:34:1a:a6:3e:c6:de:af:
02:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:95:65:D7:B7:72:A0:0F:B0:15:B8:66:6E:19:AD:6B:EA:8F:C1:E5
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4b:50:d4:6f:30:9c:23:17:2c:56:06:62:57:03:7b:8e:ea:
33:eb:96:c9:7c:1a:4e:11:df:76:97:3a:14:34:ec:c8:01:c9:
01:a7:90:23:9a:69:26:49:83:0e:25:4b:ff:f8:27:2e:bc:5b:
79:2b:8c:f5:83:62:ac:70:bb:40:10:c4:d8:6a:73:9f:99:05:
d4:df:6a:12:a9:f0:e0:e4:e7:4b:e6:5d:fe:5e:93:84:89:22:
26:c4:17:d7:14:f0:40:8d:17:31:f1:dc:d6:71:79:20:24:e2:
ee:d6:44:42:a2:1f:2f:9e:3a:42:77:e0:f9:64:95:75:44:3b:
db:e6:06:64:ee:a1:ed:0e:d1:e5:f0:22:86:1c:d1:9b:d9:20:
29:b9:79:39:db:89:cb:ef:36:6e:a4:10:83:48:71:63:b8:5f:
1e:8b:6b:3a:dd:c7:06:ac:9e:47:b2:e2:c9:61:ec:ad:72:ed:
75:74:61:5a:34:60:59:91:98:e3:aa:f6:87:84:81:e3:91:b8:
7c:91:52:4e:e3:ac:50:d1:e2:c2:b0:6e:93:7b:64:ae:f6:6e:
34:5e:44:87:57:0a:b4:d8:d3:8f:12:2d:b6:44:57:3e:9b:e0:
6d:00:44:f4:b4:c2:49:9b:c5:11:dc:b7:e3:19:96:f3:d2:9f:
b3:62:57:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXdPc+/652JGJ92ewDS/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWY0Y2U5MTM5NjIxODFjZjdjOTM3NmRmYWI1YTIyNWQ2
ZTVhZWEwHhcNMjYwOTI0MTcwMTUzWhcNMjYwOTI1MTcwMTUzWjAzMTEwLwYDVQQD
Eyg3MDk1NjVkN2I3NzJhMDBmYjAxNWI4NjY2ZTE5YWQ2YmVhOGZjMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwtRjMSSSw2EjoPqFHvWC5rtMs9d
b3EDW4AxN9YqgcnOr5byb99sNatI2JqForEuUA34P8CirSYF+RT/6K0ETtM4QG6R
yXVSmLvUDYANSeStNisfuCN7DKZ49Fc4n71JwunDIsOrSv/rGDp443B1wVAgPzxp
cuA3s/1t4XuLwXgI3nFjxY53h6Iy8aH1WelI36cTee1ovda/SCOo7CSTWbKJOGzM
rWjRcExymdshf8gyAA02pxINke2TNzsQTMvfk7z/0KQFJJtUzJ0tilsYTPnsU8A3
mzLr3BGbIAT4eIUhWI40iIqQl6fPIebElkyxR2XZxhEk1DQapj7G3q8CwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCVZde3cqAPsBW4Zm4ZrWvqj8HlMB8GA1UdIwQY
MBaAFIdfTOkTliGBz3yTdt+rWiJdblrqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NzYwN2UtNWM5YS00M2E2LThkOGEt
MzhkZmVhZjJiNzEwLzEvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84NzYwN2UtNWM5YS00M2E2LThkOGEtMzhkZmVhZjJiNzEw
LzEvaDE5TTZST1dJWUhQZkpOMjM2dGFJbDF1V3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUtQ1G8w
nCMXLFYGYlcDe47qM+uWyXwaThHfdpc6FDTsyAHJAaeQI5ppJkmDDiVL//gnLrxb
eSuM9YNirHC7QBDE2Gpzn5kF1N9qEqnw4OTnS+Zd/l6ThIkiJsQX1xTwQI0XMfHc
1nF5ICTi7tZEQqIfL546Qnfg+WSVdUQ72+YGZO6h7Q7R5fAihhzRm9kgKbl5OduJ
y+82bqQQg0hxY7hfHotrOt3HBqyeR7LiyWHsrXLtdXRhWjRgWZGY46r2h4SB45G4
fJFSTuOsUNHiwrBuk3tkrvZuNF5Eh1cKtNjTjxIttkRXPpvgbQBE9LTCSZvFEdy3
4xmW89Kfs2JXNA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:58:57 2026 by rpki-client