Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: j5e9g2Is6mYmN2BrmpGjEDaEpvaG5QuPZrMp9XJvQko=
Subject key identifier: E3:03:7D:08:30:FD:60:6D:2D:8C:3E:55:DD:C9:6F:19:73:34:44:FC
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 01A0D1C97015EF905D207E11CF6C10775D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0F20
Signing time: Thu 24 Sep 2026 05:00:34 +0000
Manifest this update: Thu 24 Sep 2026 05:00:34 +0000
Manifest next update: Fri 25 Sep 2026 05:00:34 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: C3uXOWw7Xf8xj3XfH0qIwD525MLzhZMeH10o21SkxiY=)
2: ptikDTRhjTNxZI8dkI54eJbGFTA.roa (hash: 3SdSmJMo+FOvr1IMdnku5tDe7K6GsQTnPIBl17tgA08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:70:15:ef:90:5d:20:7e:11:cf:6c:10:77:5d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Sep 24 05:00:34 2026 GMT
Not After : Sep 25 05:00:34 2026 GMT
Subject: CN=e3037d0830fd606d2d8c3e55ddc96f19733444fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6f:4f:6f:fd:1b:44:d3:de:da:c4:ac:4b:fc:
ab:ae:ea:0c:f2:1c:e9:9d:34:1c:99:a2:df:97:61:
56:56:cf:84:36:c3:9f:58:97:f5:27:59:ab:0a:f8:
60:f7:57:c7:49:e2:96:4e:ca:70:f4:ec:39:40:82:
d9:86:d9:04:16:71:b4:7e:cf:7c:e5:94:07:b3:72:
a6:44:ac:90:ab:02:67:ec:45:5b:a3:d5:b4:2f:45:
97:39:0b:d1:ad:30:8c:fd:1b:b7:48:01:af:61:36:
6e:85:1f:05:b3:76:d2:8b:af:32:a6:c7:78:f4:a5:
a5:69:52:06:a7:6b:12:35:35:7d:4a:b7:07:0d:54:
4f:f5:96:12:2b:9c:84:49:6f:87:7c:03:eb:6d:0c:
26:8e:28:3f:2f:a5:7c:33:70:33:42:aa:db:92:91:
a4:b4:b2:f9:0a:c3:46:c5:40:b7:ff:ea:fb:f4:c4:
0a:50:5c:46:7f:c7:c3:9b:70:95:4b:7f:d6:43:23:
33:c8:23:3d:4a:2e:fe:db:ed:0a:67:2a:08:f3:64:
60:60:a5:d6:7f:4f:98:16:9e:93:4a:bd:88:7a:ad:
15:b2:04:d8:fa:4f:84:41:fc:3b:02:1d:5e:25:b1:
db:3b:48:a0:80:ff:c8:e4:c6:5a:9d:a4:c6:25:9e:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:03:7D:08:30:FD:60:6D:2D:8C:3E:55:DD:C9:6F:19:73:34:44:FC
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e8:38:f3:38:ce:91:ef:48:0d:b0:0f:44:8e:13:49:aa:90:
5e:80:0e:e5:5c:14:91:dd:78:e7:89:27:13:f7:5c:97:6c:f3:
b8:a0:7a:c1:f6:c6:c8:5b:6f:ae:24:94:8c:68:2b:73:b6:7a:
11:00:ab:0d:5a:45:79:7a:8a:ce:4c:7c:ad:0f:e0:0e:bf:ab:
c0:54:59:01:2c:47:29:3b:f6:19:b9:a1:11:75:8a:33:db:2f:
81:63:68:4f:68:93:21:54:14:1e:97:b8:3d:b3:42:0e:b9:69:
1b:5f:41:66:81:28:67:22:d9:e3:fc:64:76:2d:78:f2:6c:d8:
5a:f9:07:c9:78:7d:df:ab:8f:31:5b:c0:f3:30:6a:66:4e:ce:
dc:b6:bf:a2:54:45:62:5e:a9:53:11:a1:70:63:f4:ab:67:f9:
3b:b6:45:74:ec:d6:ed:42:c6:7a:de:78:b5:ff:3c:59:fc:4b:
95:28:61:b8:80:e2:83:3e:96:20:dd:62:54:ac:ca:e3:7c:90:
dc:05:83:98:f2:2e:02:88:84:70:83:ab:c2:a5:17:29:b5:e1:
63:56:78:42:ec:00:44:e1:2e:62:17:a7:e7:63:be:57:81:89:
53:47:f5:f6:a5:f1:1a:39:f9:1c:5e:90:de:dd:4a:9d:b9:bf:
3d:90:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:46:19 2026 by rpki-client