
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: s3sVG2Soa13MMB1YVja37c6nsN00CUlrI/WvhNn06WQ=
Subject key identifier: C9:E7:C6:A5:94:FC:8E:2C:51:1A:00:4D:3B:C7:77:88:27:BB:0F:85
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 019FA82BB39E664633FD7C1F2093DBD7F9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 10:01:03 +0000
Manifest this update: Tue 28 Jul 2026 10:01:03 +0000
Manifest next update: Wed 29 Jul 2026 10:01:03 +0000
Files and hashes: 1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: SzTSMBKprOejGpJGQ2U4SBn7ey9Kg/kbW56BI4X/mXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:b3:9e:66:46:33:fd:7c:1f:20:93:db:d7:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Jul 28 10:01:03 2026 GMT
Not After : Jul 29 10:01:03 2026 GMT
Subject: CN=c9e7c6a594fc8e2c511a004d3bc7778827bb0f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:8b:31:7c:3b:1a:ac:f5:bf:a1:e6:ae:21:67:
8e:d6:2b:b4:15:8d:64:13:b5:64:57:01:07:26:51:
3c:e4:bb:f5:dd:d6:bb:3d:4e:f6:07:25:2f:47:63:
26:83:56:4d:f1:54:37:55:a0:01:7a:7b:7b:af:2a:
97:06:c6:a0:99:73:44:7a:f4:5e:08:00:79:31:5f:
2f:6c:80:f2:ba:17:7d:81:f7:01:10:42:77:41:da:
37:44:cd:73:cb:02:45:d7:3a:a4:0e:c6:ee:d8:06:
39:bd:e5:e6:21:54:7b:02:57:a4:be:bc:d8:27:f6:
99:c4:6d:ab:48:b8:df:25:0c:f4:5d:6e:88:a5:dc:
9b:6b:21:1b:9b:fe:c5:b5:d5:6f:73:fe:0b:86:d1:
fc:b7:60:87:35:9f:ef:21:8a:05:9b:b6:da:9e:ce:
ae:97:6b:30:2b:10:2c:9d:98:31:9e:ae:dd:a5:e1:
02:71:d3:f1:96:4c:4c:30:53:7d:16:89:b7:0c:c5:
4e:f2:d8:5b:25:c1:a7:0d:95:4a:f7:9c:d4:ec:c5:
e4:5f:cb:97:0e:7c:d3:39:ea:39:74:b2:59:ae:3b:
1a:14:48:e8:24:b7:9c:ab:c0:5e:00:dc:69:83:9a:
3d:f7:93:bc:6a:07:67:c8:eb:b0:43:00:56:a5:03:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E7:C6:A5:94:FC:8E:2C:51:1A:00:4D:3B:C7:77:88:27:BB:0F:85
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:55:3d:a2:b7:8d:dc:d5:41:00:07:77:a8:d0:0f:ed:fe:a4:
18:e1:b1:dc:27:cd:ea:1f:c0:e1:fc:89:cb:c4:bc:ec:ce:21:
fa:40:63:03:12:ae:3c:59:4b:3e:96:aa:8e:51:3c:c4:b2:c3:
e0:24:bb:70:18:92:90:55:36:79:b4:28:2b:08:5b:73:b2:60:
19:6e:3b:81:73:62:fd:95:3d:81:63:5d:99:58:bd:73:e7:9f:
f3:88:76:af:5b:3d:21:f7:f4:c3:d6:94:75:c5:63:40:8e:53:
0c:cb:0b:94:1d:56:ff:51:4d:4b:5a:e9:bb:2b:3b:52:9a:53:
09:d4:84:50:e7:5c:e4:d5:1f:95:8a:9c:9d:83:38:cb:f9:b0:
61:9d:e5:e9:1f:f6:95:82:e7:94:98:e0:ea:32:2a:86:43:3e:
fc:8c:87:aa:f4:20:54:9e:9c:8b:51:3e:76:f2:17:59:f5:dc:
1e:1d:57:23:74:14:ba:a8:9b:1b:c0:8a:c4:ff:3a:4d:d5:8c:
32:85:41:39:99:f0:40:9d:3a:fe:e1:b5:e3:eb:c3:2c:40:83:
11:c4:dc:d8:b4:01:d0:e4:d6:a5:21:d4:8a:20:7e:55:0c:79:
d8:e2:fc:d2:7f:54:5f:3e:a6:16:4b:46:86:80:59:b6:34:c3:
dd:e3:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:06:08 2026 by rpki-client