Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: Xk3iwJg/Apste4y9BAmhIzbEW7N9etIXuYvlaY4icKE=
Subject key identifier: 10:54:8E:89:7F:CE:F7:79:05:9B:BA:D0:27:E9:66:1E:31:95:D1:5C
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 019CA9EAD8D05FA7C769BB5B36E64745FC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 076E
Signing time: Sun 01 Mar 2026 15:01:06 +0000
Manifest this update: Sun 01 Mar 2026 15:01:06 +0000
Manifest next update: Mon 02 Mar 2026 15:01:06 +0000
Files and hashes: 1: FdbE8gLBJPaXpYaXJBSvvCFsnb4.roa (hash: dTLvAdXPyt6Wu2rqAm637RJ0hAUBe/Pvjzn8bfwfdaw=)
2: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: mlcqPNJagvu97NtQnvikmcoba21rJMpDebPOm2gnkuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:d8:d0:5f:a7:c7:69:bb:5b:36:e6:47:45:fc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Mar 1 15:01:06 2026 GMT
Not After : Mar 2 15:01:06 2026 GMT
Subject: CN=10548e897fcef779059bbad027e9661e3195d15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:ea:49:c5:6e:a1:50:85:bb:3a:b8:59:a6:
98:6a:ee:40:29:78:95:d8:7a:54:11:04:f5:43:5c:
35:9c:a5:be:5a:53:26:53:e0:f5:fb:f3:fb:6c:ed:
d1:6d:a7:41:6b:b3:54:24:90:c6:d0:63:b4:81:42:
ad:7e:47:43:37:80:d7:5a:47:18:fa:46:08:4a:c2:
01:7e:e8:d8:27:e9:aa:b1:c7:05:39:11:29:2f:b8:
a3:48:3c:1c:99:44:98:95:6c:c8:1c:c5:ef:3f:67:
77:00:19:1f:8c:98:18:63:26:b9:be:4c:6f:11:2b:
b6:31:17:a4:4c:27:25:67:21:a4:98:69:b6:c6:2f:
42:51:f4:73:ea:94:86:00:2d:11:3d:97:1b:eb:1e:
c6:82:15:3f:4a:a4:89:ee:f1:7a:46:cd:45:26:65:
85:26:0d:42:47:60:23:8e:4f:b0:02:ea:f4:19:b6:
6c:14:f8:8c:3d:cf:7e:ca:48:d4:4a:5a:f4:50:ec:
9e:f8:64:c0:2c:3c:91:04:57:00:cf:1a:43:74:37:
12:15:c6:86:b0:e6:5b:bd:b5:c2:0d:fe:bb:88:f8:
76:22:a6:2b:2a:1e:07:7e:6d:23:31:fd:47:0f:be:
52:12:bb:15:e3:15:ec:96:2e:65:da:f1:40:19:b9:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:54:8E:89:7F:CE:F7:79:05:9B:BA:D0:27:E9:66:1E:31:95:D1:5C
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a5:9a:f1:fb:80:42:f8:12:4b:f2:21:f1:3a:af:af:40:ee:
95:55:39:f0:50:5d:c7:e4:d7:44:a8:53:57:16:50:8f:b3:78:
a3:ad:1e:c6:21:80:6e:87:e0:df:90:7f:9e:f7:f1:6a:c0:03:
1b:70:fd:52:90:27:d8:67:f9:13:9d:14:17:0e:d2:f1:62:cb:
23:83:ca:b3:31:bc:10:75:70:67:b6:c3:b7:09:2f:db:5e:ae:
22:fb:63:83:d3:0e:bd:24:6f:0c:a8:7d:d0:e3:8e:da:42:0e:
77:05:86:3a:23:94:0c:3c:1e:82:e1:96:a8:42:ac:07:7d:01:
ac:1b:a8:59:e3:86:0a:58:0f:7d:94:87:71:63:11:d8:00:70:
b7:4a:d8:0d:18:8e:63:9d:56:72:95:80:dd:40:53:89:74:f1:
39:d2:51:33:7f:cc:e9:db:0a:db:4e:c5:5b:8b:a1:56:12:c7:
3a:42:7a:a4:a9:0d:f2:3f:fd:11:32:2f:6b:da:d9:8a:31:c5:
58:13:98:e6:cb:8e:33:72:ef:dd:40:c9:84:e8:4c:b6:d8:9a:
4d:c9:30:16:74:41:f1:26:c6:4a:8b:3a:74:ed:66:39:25:f4:
73:23:ac:d2:32:86:6a:fc:16:1c:15:27:15:84:b2:b1:e2:27:
ff:50:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:30 2026 by rpki-client