Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: kE19miLxgyd1TikfEAxx5l11a84A/0mMEddQTx8nQA8=
Subject key identifier: 79:26:00:66:4B:10:61:F0:1F:4F:6A:BB:6B:14:59:26:8B:68:60:96
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 019CABA22DA45D4C6BE89316480897E9AD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0CFA
Signing time: Sun 01 Mar 2026 23:00:58 +0000
Manifest this update: Sun 01 Mar 2026 23:00:58 +0000
Manifest next update: Mon 02 Mar 2026 23:00:58 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: 1v6k6jzALub0sOmqeXEYrLx48wA+BcHvuo1sKbk+zgE=)
2: ptikDTRhjTNxZI8dkI54eJbGFTA.roa (hash: 3SdSmJMo+FOvr1IMdnku5tDe7K6GsQTnPIBl17tgA08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:2d:a4:5d:4c:6b:e8:93:16:48:08:97:e9:ad:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Mar 1 23:00:58 2026 GMT
Not After : Mar 2 23:00:58 2026 GMT
Subject: CN=792600664b1061f01f4f6abb6b1459268b686096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:5a:f8:47:7a:a0:d8:ba:13:9e:42:cf:ad:
eb:d3:d2:d3:2e:63:fd:d2:fd:ff:b2:cd:23:a8:85:
71:21:9e:d2:46:b3:f2:f8:c0:68:41:4d:92:54:74:
26:bf:fb:68:a8:46:19:af:f0:a9:cb:b7:c7:8e:da:
1d:a7:54:1e:64:d5:1c:9c:04:11:ac:66:40:e1:28:
80:52:de:eb:bb:e2:ea:59:59:8f:b4:4a:ac:92:b4:
ee:e3:40:81:a5:7b:eb:5f:0f:12:6c:9a:8c:ea:db:
a9:f4:28:29:c4:74:76:cb:bb:a9:07:f0:f5:25:ae:
77:3e:f3:17:2d:46:f3:9e:54:1e:e5:c1:98:f5:99:
d8:58:1f:c1:1b:f5:15:a9:fc:24:62:f4:c7:1e:26:
89:ad:63:f9:55:71:53:5b:ba:a0:e4:d6:45:80:c5:
9d:20:be:a7:29:e2:04:df:dd:23:58:f9:03:9f:4d:
4e:75:81:6f:b6:a6:28:4a:b0:70:9c:d5:99:1b:c8:
49:c7:39:2e:37:cd:f0:1a:38:b6:df:3a:77:5f:85:
8b:f9:66:80:7b:89:f4:3a:f0:7c:5c:97:d6:a4:6b:
66:14:7e:66:b9:69:51:cc:82:e9:1b:b7:76:18:97:
20:f8:4a:84:06:68:19:1f:b5:50:68:fc:d2:0f:86:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:26:00:66:4B:10:61:F0:1F:4F:6A:BB:6B:14:59:26:8B:68:60:96
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:29:c9:ae:bc:f9:73:5e:95:80:a4:f0:13:ed:e3:9f:68:cd:
49:58:01:32:bb:a8:52:a6:4f:cc:84:7a:06:b1:95:73:b9:da:
51:ed:4f:e5:53:98:c1:6c:fc:28:54:d9:08:a5:a1:65:65:64:
92:17:16:ef:a3:ad:76:8b:46:87:69:c2:e9:1d:8e:7e:e4:de:
ef:4d:9f:81:69:23:8b:0f:33:68:29:90:14:ea:0b:c3:ee:a4:
57:c7:00:fe:f5:ae:02:74:a1:9c:06:c4:74:99:57:f2:1c:23:
74:14:42:7b:6c:3e:71:94:62:b5:73:67:8f:3c:39:2f:d6:64:
05:a4:08:16:87:c8:82:5c:66:41:30:68:d1:59:d2:96:3e:3c:
24:38:14:7e:8a:f8:3a:64:ca:f8:12:e5:45:45:95:e3:c9:6b:
bf:6b:3f:95:a4:50:a3:e7:3b:21:79:e4:8f:0d:3c:2e:9f:78:
4a:65:9b:ad:da:75:0c:6c:56:50:b4:36:4e:34:4b:98:51:a0:
a3:7c:a4:53:99:ef:e0:2a:36:00:f8:b4:08:10:18:46:3e:92:
69:9a:c2:5a:a2:fa:85:03:a1:a1:f8:0c:ec:32:54:db:bb:6d:
7e:67:af:e4:48:6e:79:23:e5:3a:0d:c0:eb:cc:4c:13:15:a5:
c1:59:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:17 2026 by rpki-client