Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json)
Hash identifier: OU1WGY3K0PWv7U8Z7457Qy8AR620iMtrv0pEMpMbU3c=
Subject key identifier: E5:F9:BA:E6:F4:4C:CF:62:2E:66:86:FE:C2:8F:47:8D:0A:11:52:3D
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 01A12B4484AE066CE72B520C4878CC73BD5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 14:01:13 +0000
Manifest this update: Sun 11 Oct 2026 14:01:13 +0000
Manifest next update: Mon 12 Oct 2026 14:01:13 +0000
Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: EGxdqTEg9W21tucH0gzesrb/x135ZHTLtO8wnFQMB0g=)
2: uOT6tJlrkH7uNore0SwrHv6B2q8.roa (hash: sj7kmuH/7FdqL+TtQaRY1OsxURdzt9SlOSUYNlEq6iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:84:ae:06:6c:e7:2b:52:0c:48:78:cc:73:bd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: Oct 11 14:01:13 2026 GMT
Not After : Oct 12 14:01:13 2026 GMT
Subject: CN=e5f9bae6f44ccf622e6686fec28f478d0a11523d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:46:02:05:11:0c:16:e4:2f:a6:18:b8:c9:
4d:53:ab:86:19:a5:63:49:fc:82:f7:56:51:a7:fe:
09:bf:c5:10:f0:f4:a6:88:cf:4b:35:2e:c4:18:ac:
1a:15:08:85:ca:16:bd:c2:e9:b0:e4:c0:16:f3:b2:
d5:a0:09:3e:84:91:cf:ad:70:f3:9c:5f:3e:c5:25:
c0:41:5e:9e:f6:16:24:4c:ba:34:f8:c4:6f:99:d5:
80:82:81:16:65:11:37:c6:57:81:f9:ef:56:b3:5c:
c7:1e:92:cc:a4:98:32:e0:0f:29:61:2d:56:82:86:
07:b5:b5:cf:45:a6:6f:a6:78:e6:df:66:95:b6:2d:
eb:36:2d:ca:33:e0:50:b0:e7:a7:26:74:24:f7:3d:
6a:0b:45:aa:f6:f2:32:11:c7:06:f5:c9:87:df:3b:
57:0a:1e:32:a4:88:b7:06:e9:25:aa:c6:0b:19:b0:
f7:e9:40:c8:7c:8c:da:bf:4b:dc:d2:02:04:ad:3f:
66:13:52:45:53:ed:c8:15:e0:02:8b:32:07:ed:0c:
a8:e1:39:f7:38:7d:0b:b4:a8:c3:46:9a:62:04:b8:
ce:1b:38:e3:b6:e1:52:0f:c4:34:54:1a:5b:ef:28:
63:a9:7b:e2:e3:fa:9b:1d:02:85:0f:99:fa:e6:c0:
69:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F9:BA:E6:F4:4C:CF:62:2E:66:86:FE:C2:8F:47:8D:0A:11:52:3D
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cb:59:a3:e9:a3:be:07:f3:8d:45:27:65:a9:4b:11:82:aa:
e2:45:2a:3b:99:a9:77:10:27:ff:d4:91:6b:51:fb:dd:55:30:
ab:fb:13:29:6c:a7:a7:5b:98:ac:49:c2:8b:5d:2c:93:67:37:
5e:9b:41:97:b3:0e:71:0a:1a:eb:5e:16:11:0b:51:96:3f:cd:
7a:93:82:a9:9f:a5:23:89:bf:d3:d1:c3:08:4f:e8:71:52:7a:
3f:ae:b5:c4:d4:ea:47:e6:d4:d4:e0:31:80:65:83:38:d7:5b:
a8:6e:aa:d9:e4:d2:71:94:f2:dc:df:a3:45:f3:1e:26:00:e5:
ef:a4:60:76:2a:97:61:2e:d3:64:d2:9a:32:5e:fd:76:da:fa:
8f:94:49:c2:33:14:cd:27:f5:3c:3d:75:70:11:1c:04:f2:a9:
0d:cd:d8:6d:b2:f7:1f:f2:ab:7a:1e:36:5e:07:49:94:46:c0:
c5:f7:ee:bb:e4:d0:4d:ba:50:a9:71:05:6c:70:66:79:7c:33:
d5:8b:65:bf:60:43:38:fe:31:02:a7:9f:98:b9:0a:88:28:b6:
3b:a8:05:0f:79:35:54:e3:7d:dc:b5:e6:ea:7f:ed:e1:37:cd:
ea:29:5c:b6:2d:74:07:6e:22:5a:e2:16:f9:6c:26:d1:26:59:
26:85:c7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:55:14 2026 by rpki-client