Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json)
Hash identifier: 5UMkxObKi0fVnKOCPJGyXGO24yJ+a7A+/YSpMTbG/60=
Subject key identifier: C5:EA:BF:E6:1B:A8:23:AC:97:23:36:49:75:A2:EA:F5:53:A4:AB:D1
Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Certificate serial: 01A0DFF3F941D93F43D4FC8E80305485E9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
Manifest number: 040C
Signing time: Sat 26 Sep 2026 23:01:43 +0000
Manifest this update: Sat 26 Sep 2026 23:01:43 +0000
Manifest next update: Sun 27 Sep 2026 23:01:43 +0000
Files and hashes: 1: H6uqUGEMkw_GDxczJD1M696P_zE.roa (hash: nWnw8H8sn82+YCkD2O0kI6uMQ5WeKNqhPpnI/ZrVopY=)
2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: Ya2I0OBiUlW3yC+4Qe3F07qQ/sr1FOrd7KFUpgmxVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:f9:41:d9:3f:43:d4:fc:8e:80:30:54:85:e9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Validity
Not Before: Sep 26 23:01:43 2026 GMT
Not After : Sep 27 23:01:43 2026 GMT
Subject: CN=c5eabfe61ba823ac9723364975a2eaf553a4abd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:0f:53:e5:08:84:7b:5f:34:10:88:7d:6f:
a7:b4:a9:b2:3b:6b:99:ef:7a:ed:2f:1b:8a:b0:e9:
92:70:c5:be:c6:7e:d8:72:9f:8d:7f:7e:b9:e3:40:
b1:cc:cc:6f:1e:56:0d:fb:ef:6d:88:70:50:81:39:
c8:f4:bc:90:40:7a:7e:50:e1:f3:3b:a8:fd:50:ec:
81:bf:97:14:e8:0e:d1:dd:81:67:ed:be:46:1c:49:
db:a2:be:2d:4f:34:6f:b6:e3:d0:bc:76:b5:93:f5:
24:85:2d:78:35:32:a1:7d:72:07:61:d2:ef:44:74:
02:08:02:78:e6:30:ea:d4:82:e4:2e:f2:fa:cc:a8:
d8:41:ad:bd:78:38:56:c6:e9:a3:b8:3d:47:01:a8:
54:de:85:19:04:55:e0:6a:ad:a2:11:f2:ff:28:d6:
ce:cd:1a:f8:4d:4b:3d:5f:10:33:d1:fd:7a:ee:e1:
40:4b:a7:dc:08:d0:c4:0c:c8:86:a1:b5:e0:c0:26:
fa:02:c4:d8:a7:76:a0:57:8b:46:c7:00:99:7d:05:
fa:bf:96:ad:7a:4c:a2:c4:d8:da:df:00:55:e8:f8:
3c:91:04:1b:e0:30:cd:fa:6e:5f:bf:36:c9:b0:03:
a4:9f:35:73:00:79:ac:09:55:fc:9d:2d:83:a5:a9:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:BF:E6:1B:A8:23:AC:97:23:36:49:75:A2:EA:F5:53:A4:AB:D1
X509v3 Authority Key Identifier:
keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a6:9d:88:85:9c:71:6f:cc:ef:ad:e1:28:63:cd:e3:b1:09:
84:42:e0:cb:19:5a:68:bf:58:b0:99:67:85:e7:6d:4f:7c:b3:
5f:38:33:54:b2:62:6a:c1:7d:14:6e:75:b3:34:a2:e3:30:d1:
f6:3b:5f:25:2e:e4:25:23:12:33:ad:34:0d:d1:8d:95:30:65:
4f:9b:8d:7b:35:4b:be:d7:30:c3:ae:0f:04:93:3e:6e:32:1b:
2a:1c:bb:e9:6d:67:72:06:32:cd:93:5e:17:d9:4c:70:0c:c4:
77:94:63:f6:81:6c:b8:d2:09:12:5e:1e:02:d6:b0:31:9b:e1:
4a:0e:6d:97:52:e7:34:f4:b1:2b:8c:83:7c:62:72:7a:dd:18:
2d:55:7f:61:1c:72:62:e5:e7:13:d7:3a:74:6c:29:3c:de:43:
47:00:bd:b0:40:88:b9:6e:25:02:bd:c9:ef:32:97:38:ff:31:
a5:ef:6d:4a:55:39:a1:2a:70:37:6e:cb:4c:bc:75:d6:1f:a3:
bb:78:5d:a2:53:88:1d:ec:c5:a4:2b:9a:36:8b:89:07:92:96:
1d:a3:54:a3:44:ec:00:27:b2:0b:42:30:56:26:d3:b4:89:75:
e1:0b:1d:a9:14:fa:0b:0d:a6:f1:50:25:8e:75:3c:34:01:6d:
e4:68:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:51:54 2026 by rpki-client