Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
File: h7kq03MXwzCg61kKFw0U9Rm3UrM.mft (raw, json)
Hash identifier: FGN6a6T/e8++JNfO+RjPx2ZMVyaRRPjZekdwSkIM1xc=
Subject key identifier: 41:EB:58:3A:09:D4:4F:63:DA:1C:99:5E:6A:25:9D:73:F1:2D:29:E9
Authority key identifier: 87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
Certificate issuer: /CN=87b92ad37317c330a0eb590a170d14f519b752b3
Certificate serial: 01A0C85988ED56B3D123A2D190E588953632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:45 +0000
Manifest this update: Tue 22 Sep 2026 09:01:45 +0000
Manifest next update: Wed 23 Sep 2026 09:01:45 +0000
Files and hashes: 1: h7kq03MXwzCg61kKFw0U9Rm3UrM.crl (hash: H6i/dvMFIJOBxbHKS+j+xTKoW3JliB6l4w3C2QHi9rg=)
2: l6h8cEy3vy8eHGUMk9ccO_E31gg.roa (hash: /rkHav/nq0FmDVvv83fpzsLSholUDtzomJfCggVqF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:88:ed:56:b3:d1:23:a2:d1:90:e5:88:95:36:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b92ad37317c330a0eb590a170d14f519b752b3
Validity
Not Before: Sep 22 09:01:45 2026 GMT
Not After : Sep 23 09:01:45 2026 GMT
Subject: CN=41eb583a09d44f63da1c995e6a259d73f12d29e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:8d:14:bd:82:13:c5:d0:e6:da:41:0d:3e:
68:e8:04:35:a5:2f:51:f4:cd:6b:70:d7:88:60:d8:
18:e9:25:1f:8a:73:ad:df:10:71:da:79:4c:c4:f1:
ba:4b:da:a0:8d:9c:38:81:a4:cc:f7:4c:29:78:d8:
5a:97:34:40:ab:f8:b3:0a:43:52:7b:a3:36:75:76:
23:0e:e1:2f:d1:9a:9f:cd:25:77:11:43:27:f0:b7:
ee:52:bc:18:21:9e:aa:05:0d:63:14:bc:d4:80:33:
a9:ad:55:87:f7:d8:4c:58:82:88:96:90:03:34:97:
70:34:bf:6d:83:b5:4c:c8:11:ec:9d:3f:49:45:d7:
5c:31:bd:e8:2b:b3:69:03:b3:dd:1c:b2:66:7f:ae:
7e:46:57:5e:2f:eb:7b:cc:02:a1:99:1c:8a:56:72:
e7:cd:41:55:cf:dd:5b:0e:f8:7d:21:52:a9:c2:f2:
96:db:ee:d8:24:3d:2b:78:b8:02:5f:49:96:2e:2d:
a7:5b:41:16:59:60:cf:08:ae:6f:bd:79:7f:42:70:
31:c3:d5:57:9f:66:08:82:c0:e1:91:96:cd:57:fe:
1f:77:7b:97:31:05:1b:e0:5c:b5:f7:85:90:e8:91:
a2:c1:7b:26:9a:57:12:90:52:f8:1a:9a:6d:97:9b:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EB:58:3A:09:D4:4F:63:DA:1C:99:5E:6A:25:9D:73:F1:2D:29:E9
X509v3 Authority Key Identifier:
keyid:87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1e:ae:1d:c5:fb:ef:4d:86:5b:fa:f5:09:0c:91:fd:64:8b:
da:e4:11:0c:a1:22:9b:16:fa:5e:b7:19:1a:ec:11:ed:04:2a:
ac:61:15:f4:65:bf:3e:a0:b0:0b:be:04:e1:23:c2:3b:49:46:
95:78:0e:01:43:ef:fd:73:e2:55:d9:2d:55:11:86:0c:b9:f8:
d6:08:88:f1:a7:35:e2:5b:43:bc:b8:b7:dc:4c:52:af:e3:40:
a7:80:b2:cc:19:3b:e5:08:82:96:7c:9a:a4:5b:bf:cc:0d:bb:
f0:45:be:cd:b9:85:3b:48:18:37:b5:3d:dd:6b:2e:bc:f5:51:
db:4f:80:9a:f5:b6:90:a8:9f:f2:30:a9:d3:64:7f:bc:0a:86:
72:fa:53:32:60:3b:f0:34:03:3b:0b:4d:37:f8:c4:9f:d6:e4:
5f:d8:63:68:e9:7a:73:86:95:5e:50:61:d3:cb:4b:5d:10:db:
b8:8e:72:da:e9:9d:6a:7c:cb:66:18:b5:81:86:7c:04:5f:13:
93:ae:e7:16:3e:a3:b5:8b:a4:93:a1:95:4d:fa:31:dd:33:30:
a5:0f:3e:f8:d9:7e:83:81:5f:42:6d:10:6e:dd:30:7c:2b:d9:
fe:4a:17:dd:0c:e1:ea:c5:cd:5d:b1:1d:02:f9:9f:85:74:31:
68:b4:4b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:54:05 2026 by rpki-client