Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: 9cr1sYKPQvVhGYNr54+VQU8FBlSQSlmWWxBRZ8nCoBg=
Subject key identifier: 30:98:B9:31:0F:11:87:26:CD:84:48:44:30:0F:EF:D2:2B:60:F0:57
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 019D996211DB74C44D873C9A26A91737415F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 07EA
Signing time: Fri 17 Apr 2026 03:00:34 +0000
Manifest this update: Fri 17 Apr 2026 03:00:34 +0000
Manifest next update: Sat 18 Apr 2026 03:00:34 +0000
Files and hashes: 1: FdbE8gLBJPaXpYaXJBSvvCFsnb4.roa (hash: dTLvAdXPyt6Wu2rqAm637RJ0hAUBe/Pvjzn8bfwfdaw=)
2: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: 29kmfMwWPQMk2UcC+vosPnosgakbHUthOPEPHrsQAio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:11:db:74:c4:4d:87:3c:9a:26:a9:17:37:41:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Apr 17 03:00:34 2026 GMT
Not After : Apr 18 03:00:34 2026 GMT
Subject: CN=3098b9310f118726cd844844300fefd22b60f057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:96:26:91:c8:a7:97:6b:95:ab:fa:d0:1d:34:
4e:9d:f4:61:4b:b8:b2:09:53:54:e6:2d:47:df:4b:
48:89:70:06:15:2a:b1:0e:6b:1a:e9:d3:38:fd:46:
84:ab:90:59:1a:00:cc:c2:1b:9b:14:66:41:6f:c5:
7a:52:90:e9:87:0f:52:cc:45:62:c9:d4:70:c9:66:
d6:07:33:41:61:f5:9e:fa:38:c7:7e:ce:34:2a:71:
48:bc:a8:d5:dc:4e:a3:5d:8d:ec:89:48:36:7e:88:
55:14:01:4e:8e:f5:ad:91:68:2c:03:1a:40:0f:42:
69:16:e8:c5:fe:67:16:cb:fc:fb:d9:a9:43:2f:4e:
78:90:f5:11:5f:54:ce:f2:77:2c:a4:9d:b7:fb:d9:
86:d0:c6:fd:92:4c:2a:9c:04:e4:29:95:bb:1f:b4:
c6:05:40:40:06:ef:2d:a5:83:f2:e3:25:2d:10:9e:
f3:21:6e:67:83:30:f2:da:af:73:17:8d:5b:f7:6b:
cd:3d:64:9f:ef:07:f4:0b:48:2e:04:78:12:34:cc:
9e:fa:31:45:c4:f7:66:c3:d2:d5:16:71:60:a4:42:
63:6e:1a:52:4f:4f:70:b0:0e:b7:89:60:cf:80:19:
58:32:b8:67:71:c5:a7:c7:b9:9f:7e:c7:de:94:65:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:98:B9:31:0F:11:87:26:CD:84:48:44:30:0F:EF:D2:2B:60:F0:57
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f2:22:46:0b:a1:52:3f:45:a0:75:49:ee:5a:e2:0f:fd:3d:
38:29:09:2b:89:5d:c6:a1:61:55:2d:df:b9:ca:a4:66:59:91:
9d:f3:38:f3:ac:eb:75:66:1c:55:1f:00:b8:da:3d:f7:ea:2f:
0f:48:74:2b:62:b4:eb:2a:06:d3:4d:e6:24:6f:c4:bb:13:e1:
ac:d7:99:3d:00:f0:2a:b4:ba:bb:c6:e3:0d:19:5a:8f:a2:02:
eb:c6:66:9a:df:33:51:aa:d0:cc:9b:e7:91:f6:af:ec:5a:e3:
b7:d8:af:61:13:42:b0:b2:10:ba:32:c4:73:91:80:f0:e9:a3:
f3:15:78:25:84:c8:a4:f8:35:66:8c:11:b9:31:20:9b:e7:7b:
b8:3b:c5:c8:42:33:9f:2c:a3:e4:82:b7:ae:b3:75:ce:ad:1b:
0f:ee:f1:ee:cc:7c:53:56:1d:54:25:9f:0b:2f:dd:6c:d0:d7:
13:8f:44:32:b8:5f:3e:13:d2:1c:95:c7:e2:4a:e9:fe:89:ad:
92:5e:e7:b1:94:53:97:48:ee:20:af:c3:00:bc:77:43:42:69:
9a:7a:86:2b:11:42:ca:31:80:f3:6a:b5:cb:38:a6:59:58:2b:
98:4b:ad:cd:ae:98:00:42:4e:07:a1:6f:69:ce:8b:9a:05:25:
73:f4:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:34 2026 by rpki-client