Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: qI9IpEwWBGUCxYxcQgrinzH6Vfb81Z0EPxzSS33ZUZo=
Subject key identifier: FD:6B:70:DF:C9:6F:04:BA:5A:D7:21:0B:41:2F:E8:16:4B:B1:32:4C
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 019CAB345BE49457F51700AA2E1A50EB982C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 075E
Signing time: Sun 01 Mar 2026 21:01:00 +0000
Manifest this update: Sun 01 Mar 2026 21:01:00 +0000
Manifest next update: Mon 02 Mar 2026 21:01:00 +0000
Files and hashes: 1: c1HdnsaldKTIKaEky6ateQiz5kY.roa (hash: C5p2Kdt/yLKTGq1QeYyJYKudSwTzAauf7jP1eJuSAr8=)
2: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: Z2p28fZKOE680T66zCQdC6qn+8lG2Z97me6cxJhjlas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5b:e4:94:57:f5:17:00:aa:2e:1a:50:eb:98:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Mar 1 21:01:00 2026 GMT
Not After : Mar 2 21:01:00 2026 GMT
Subject: CN=fd6b70dfc96f04ba5ad7210b412fe8164bb1324c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:d3:25:b2:9c:25:29:4b:cb:15:9a:8a:88:
8c:34:b6:0a:9d:6a:25:25:30:9b:78:d9:70:6b:ec:
af:26:26:db:e8:e2:a5:12:1d:62:f0:7d:e1:79:7f:
99:96:b4:40:ef:73:29:5c:91:e0:b8:c3:f3:b6:aa:
2a:40:75:fd:b3:8d:19:df:7d:41:4e:0a:37:f9:a3:
e7:ec:2d:1a:85:67:aa:ec:10:b9:19:80:10:5a:47:
5c:df:df:6c:bf:db:42:a7:9b:de:af:fa:8d:35:14:
1e:0e:18:67:86:6e:b1:17:ec:83:a1:f7:f7:47:04:
85:b3:c8:57:a3:9b:aa:f2:77:06:85:04:c5:03:61:
fe:24:0e:78:d4:46:0b:7c:25:06:8f:ff:c9:da:fb:
ad:64:7b:3e:59:56:db:68:aa:0f:48:97:a9:71:52:
ef:3f:a3:89:ad:f6:5b:be:2c:ff:1b:87:0c:01:ce:
21:ee:32:c6:ab:e2:7e:e2:77:b0:71:26:cb:6e:6b:
f7:dc:b1:25:5b:94:b6:c6:ea:36:ed:cc:ac:56:8f:
68:09:02:c3:28:c4:ba:ec:5b:8c:1e:ac:65:eb:2f:
29:54:6a:41:5b:1e:45:d9:b7:d9:ca:96:8c:d1:75:
d9:42:b0:04:0f:8f:ca:11:81:83:bb:55:96:e6:d7:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6B:70:DF:C9:6F:04:BA:5A:D7:21:0B:41:2F:E8:16:4B:B1:32:4C
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3c:0e:8d:b5:97:ce:79:78:d5:3b:82:7e:e4:b3:64:83:f9:
dd:d8:c6:59:9e:9a:b4:b7:06:84:91:01:20:68:24:1a:5a:10:
0f:a4:28:fd:94:7f:69:de:3a:94:e2:7d:10:ec:a1:7f:37:65:
6a:e7:19:e4:fd:c7:60:58:04:cf:da:65:70:58:19:68:d3:e1:
51:8e:96:db:6a:56:8f:55:fb:90:dc:d5:2b:0c:1f:6b:59:38:
2b:f4:1c:e8:42:27:b9:6c:a9:24:46:f9:89:41:b5:2b:26:78:
83:c9:6a:9a:77:47:ec:ad:b0:ef:7f:3d:f8:25:d0:56:55:e3:
c6:99:fd:07:01:c5:54:d1:f0:d2:af:98:45:9b:27:ec:f6:7b:
98:25:4a:ac:64:68:ce:5b:3b:19:d3:ff:69:56:86:8c:fa:b0:
8f:3d:50:0b:c9:47:23:92:c3:32:79:5e:05:95:b3:65:6e:7a:
dd:3e:81:01:14:88:d5:d5:66:43:9e:78:87:b7:72:95:de:11:
0b:26:80:1e:d7:36:9c:d4:f7:da:26:6e:24:16:22:7b:ed:3e:
c2:60:73:5c:dc:33:03:78:60:55:7b:45:57:70:c2:90:1b:ce:
4d:a0:b3:ee:25:74:95:37:41:a0:b3:33:18:b6:6a:72:1d:a2:
78:c6:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:57 2026 by rpki-client