Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: CK92dX+kqfF6IDkLAh+CmRji4IYtACRfjvmO0uYnMLk=
Subject key identifier: 18:A1:93:77:51:BB:DF:7A:BE:3E:98:26:DF:58:B1:6F:BB:D1:46:1E
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 019D28BBBEB844855DE37FE473ED14737C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 15F0
Signing time: Thu 26 Mar 2026 06:01:25 +0000
Manifest this update: Thu 26 Mar 2026 06:01:25 +0000
Manifest next update: Fri 27 Mar 2026 06:01:25 +0000
Files and hashes: 1: 4cy1aqEYp9F7V13taLUgvqJl6bk.roa (hash: y4AZgnc6ll/dTvazfgvRlzMdkBW1msJHbGpj1pvELdM=)
2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: NYFxZwj4sQdcL85eZa8OFSXltvcOrGMQkWXEvVkh/ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:be:b8:44:85:5d:e3:7f:e4:73:ed:14:73:7c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Mar 26 06:01:25 2026 GMT
Not After : Mar 27 06:01:25 2026 GMT
Subject: CN=18a1937751bbdf7abe3e9826df58b16fbbd1461e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:bf:46:e4:50:d4:bd:0f:dc:66:df:fd:20:
8e:66:d5:da:40:9a:03:f9:b9:41:ec:4c:26:e9:4b:
b0:5a:d4:71:f5:2e:f6:4f:67:8d:99:26:b7:0b:60:
07:33:76:c5:89:bf:ad:c8:d5:ef:16:3f:d8:2f:c1:
2e:76:19:4a:2d:c5:fe:f4:9c:3d:d8:31:28:b7:47:
74:0a:2b:81:36:9b:24:f5:25:07:51:34:4f:47:c5:
9e:3c:06:a8:c7:f6:ec:6d:24:5a:75:10:31:7d:fb:
ea:61:d6:08:59:10:7d:52:f9:ba:46:ee:a6:c9:b9:
76:b9:a4:b2:ba:dc:a8:e3:f3:4e:d8:20:21:8d:8f:
bd:fe:12:37:b4:5f:dc:a4:5f:12:05:5b:e6:b3:08:
24:63:c2:89:0f:25:3b:ab:9b:96:16:da:ee:b0:ab:
fe:bc:9d:13:7e:0c:fb:36:ec:93:1a:e8:60:b5:34:
59:d0:2d:75:a8:6c:32:ea:fa:f2:3a:69:69:94:85:
ee:f9:1d:db:d7:53:7b:b3:07:80:b4:c2:99:35:eb:
ae:79:70:38:9e:7f:bc:3f:b8:33:60:77:22:95:77:
2d:53:d1:a9:b0:1b:2c:70:2d:70:8e:88:fe:4b:26:
3a:b7:be:67:4c:34:f2:4f:ab:06:16:78:ad:f8:db:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A1:93:77:51:BB:DF:7A:BE:3E:98:26:DF:58:B1:6F:BB:D1:46:1E
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:08:04:1a:cb:e1:db:80:8b:ae:42:96:84:fe:56:a1:63:41:
62:d4:08:8d:12:ea:04:40:4f:7d:e5:77:6c:b2:fa:60:4a:04:
bf:b9:f8:9c:ea:c6:6f:d7:d2:d0:49:58:c9:06:61:71:8b:d8:
fe:58:97:c0:6b:f1:bc:dd:87:d9:33:39:f1:47:11:ee:cf:37:
fc:d0:43:f9:93:c3:dc:d6:e2:c9:18:ef:a6:b1:b4:79:3a:32:
be:3d:c6:af:33:be:37:8c:45:5d:5c:92:0b:8e:b0:7b:11:9d:
17:17:33:03:4e:ce:d0:9d:6a:27:05:7a:e6:fc:27:93:84:c9:
20:d8:4a:a5:ad:d1:d2:ec:56:96:4d:e8:ba:c5:3b:a8:17:d5:
06:bc:20:af:d3:9c:eb:39:2d:02:45:9e:55:10:5e:84:92:47:
c1:86:4b:3e:07:93:52:71:35:a5:c3:e0:f7:6a:8f:72:1e:5e:
8a:fb:80:34:7b:24:02:76:49:2e:2d:2b:15:2d:d7:fe:a8:08:
a4:a2:8f:e5:84:05:ab:22:0a:8e:63:2a:fe:99:ce:f7:3d:c9:
e4:d1:6c:26:69:e9:fd:01:86:43:78:a8:80:34:1f:81:69:f0:
0c:e3:87:49:d1:f6:db:2c:3d:b6:e2:2e:f5:c0:62:40:88:62:
0c:54:dc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:16 2026 by rpki-client