Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: q5HYMuXDs/CW+jFr6BF5Pmw6BRfwRew/aDxXD+HlyRU=
Subject key identifier: DB:86:5B:C5:89:2B:C1:71:0E:1C:91:0A:5C:4A:BB:99:A2:D1:E4:BF
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 019CA97CFFE8D0DE17D145DEB7FED55D9F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 13:01:07 +0000
Manifest this update: Sun 01 Mar 2026 13:01:07 +0000
Manifest next update: Mon 02 Mar 2026 13:01:07 +0000
Files and hashes: 1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: j14saNT0chSstJuAz1jopVAdJMBJry3KeKXMHT+RQg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:ff:e8:d0:de:17:d1:45:de:b7:fe:d5:5d:9f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Mar 1 13:01:07 2026 GMT
Not After : Mar 2 13:01:07 2026 GMT
Subject: CN=db865bc5892bc1710e1c910a5c4abb99a2d1e4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:18:01:60:59:bb:14:7c:67:77:66:27:fd:
d9:16:df:d6:54:80:8e:ca:94:f8:f4:90:6a:6e:a1:
e1:94:61:72:f2:55:3a:72:04:2d:0e:b5:aa:b2:c6:
5b:9a:f4:bd:bf:e9:22:d7:15:ed:a9:17:78:78:12:
5c:ed:65:89:19:59:e8:1b:85:dc:e3:91:3b:80:8e:
b7:e7:86:a7:e3:f9:5c:a5:cf:8f:d7:76:24:73:d7:
f0:f6:dc:46:24:9c:a0:b2:3f:e6:d8:92:fa:ed:2f:
45:b5:b6:48:2f:98:e7:49:69:20:76:a4:32:02:dd:
99:2f:3f:cc:3c:9f:b7:c4:a1:df:b8:51:f1:8e:4c:
34:61:b7:c4:5a:d3:e9:79:71:cc:fe:ba:a5:cb:be:
76:fa:ba:fa:a9:1e:33:58:1f:2d:09:4c:d8:1d:10:
9f:79:56:eb:2f:3b:c8:6a:8f:58:91:bf:91:d1:a7:
1a:e1:a9:93:b1:39:49:68:7f:10:62:00:14:2a:94:
bb:4d:52:76:6c:aa:f5:c7:38:a2:36:3b:db:17:68:
8c:32:41:90:4e:0c:6d:ca:89:49:29:2f:aa:bd:1e:
6b:a3:2c:f6:8d:6a:1c:e1:b8:65:16:6d:9d:f7:66:
33:80:e8:60:65:d9:c4:cc:f9:44:e2:b3:44:2d:9f:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:86:5B:C5:89:2B:C1:71:0E:1C:91:0A:5C:4A:BB:99:A2:D1:E4:BF
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:35:b0:04:11:52:7e:a4:20:4c:a1:6d:32:e0:04:07:0b:ae:
54:d5:e3:a8:d8:f8:51:3e:2a:7d:99:0b:4e:47:a8:2c:66:9c:
73:91:54:5c:13:e4:1a:d8:38:05:5a:86:9f:22:bf:20:9f:73:
2c:6c:35:b2:06:00:c7:ae:12:0a:ad:40:e9:e9:fa:83:e7:6c:
fc:94:da:02:8d:30:cc:4b:b7:02:72:32:78:1b:61:c8:f4:b6:
1c:8e:7a:d8:97:51:91:37:1e:98:44:81:38:a4:d5:9a:11:9a:
7d:f2:f4:e5:58:ae:51:41:17:c4:2f:c8:fa:1f:6f:da:51:4e:
31:df:19:57:9b:97:a2:3f:b2:85:72:18:8f:ad:4c:e2:02:2d:
e5:43:21:12:91:1c:18:1d:01:1e:26:bd:2d:85:a9:9e:a3:c3:
0e:b7:99:0b:af:b8:4b:30:d7:8e:aa:87:df:8c:c5:98:7f:34:
de:58:d0:b5:be:98:23:93:ef:dd:3e:24:67:be:ae:f2:42:ef:
26:c5:e7:a6:a9:7b:2a:8a:7b:8a:53:69:b6:d5:ed:44:fa:2b:
c0:7d:0c:55:c0:fe:05:a4:ea:c2:17:c9:4a:64:03:58:32:33:
be:5c:c4:76:8a:e1:55:5d:a7:14:dd:2b:1d:6e:69:94:ae:b0:
c5:73:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:30:18 2026 by rpki-client