Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: yK8UvV1sbZ4cLqJXSA9M8awRuIvfKQ9EpYw+itScyXo=
Subject key identifier: 86:A7:1B:19:8C:A9:0F:F2:89:54:D3:33:0F:7A:6C:71:A2:FB:34:86
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 01A1DCB98F8E8E0C9C5E5396B077460830D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 01:01:50 +0000
Manifest this update: Sun 15 Nov 2026 01:01:50 +0000
Manifest next update: Mon 16 Nov 2026 01:01:50 +0000
Files and hashes: 1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: EcuAyc0HUfj5h84wwcLUfMVt69+92MgWfH62ZSGPllk=)
2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:8f:8e:8e:0c:9c:5e:53:96:b0:77:46:08:30:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Nov 15 01:01:50 2026 GMT
Not After : Nov 16 01:01:50 2026 GMT
Subject: CN=86a71b198ca90ff28954d3330f7a6c71a2fb3486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:ec:82:15:f3:9d:a3:0b:cc:0c:b3:c8:5d:
75:76:5b:1a:69:7b:54:2e:dd:2a:9f:8f:55:24:a5:
43:c2:dc:0a:fc:32:5b:10:d5:95:72:33:b8:aa:51:
18:ba:57:55:5a:d9:26:ec:dc:fe:61:ce:b0:53:58:
35:8d:21:4c:6a:cd:8f:e1:4f:14:1b:ab:ea:56:47:
90:81:35:bb:1c:05:21:12:e7:3a:14:88:ab:c6:c0:
aa:5e:a4:b6:c6:db:e2:05:48:e3:84:00:16:a9:d5:
5e:d1:15:17:f7:42:45:b5:6c:dd:4d:76:bd:8f:71:
fc:df:57:ac:de:a4:0b:b4:df:5c:a9:7a:05:d8:a9:
66:88:48:8d:a1:92:e4:5d:91:c7:25:fa:7e:6d:ce:
f1:7f:84:c2:8e:93:6d:89:51:1d:ad:10:cb:7b:25:
f0:13:f7:6e:29:56:ad:76:3b:fa:9b:e7:1a:f2:50:
79:04:4e:7b:b6:a4:b6:81:06:71:54:a5:19:fc:99:
09:5e:c4:06:da:a9:87:8e:da:68:97:c6:09:df:be:
ea:a7:a2:69:b5:87:ea:bb:be:87:bc:b0:b3:fb:18:
8c:f0:e4:12:15:6d:cf:c1:03:b8:51:e2:79:09:49:
c7:fb:f9:70:6f:0e:de:b3:26:d5:73:15:61:c3:ef:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A7:1B:19:8C:A9:0F:F2:89:54:D3:33:0F:7A:6C:71:A2:FB:34:86
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4e:3a:98:8a:b2:36:70:cc:f2:31:2b:a4:dc:1d:4c:4e:bb:
97:87:2d:90:03:3b:f9:e9:b2:26:5a:10:a9:42:46:c6:91:b9:
92:38:09:ef:2c:32:ac:03:b8:33:91:b5:51:cb:aa:3a:84:73:
7a:88:01:fb:e8:07:3f:14:0f:68:d0:20:8b:4e:d8:0f:50:7e:
c0:76:c9:7f:bf:ef:f7:f9:58:3a:3a:96:06:03:1d:a5:e4:0b:
92:00:4c:c5:ec:69:b1:4e:08:0d:ca:b8:50:f9:0e:cb:59:6c:
ab:3d:fe:52:69:7f:dc:b9:be:88:82:2b:a5:4a:24:57:83:b1:
2b:37:5e:9f:1d:5c:ac:df:d8:59:d0:48:27:15:dd:bd:91:00:
0c:50:cb:06:31:a4:d7:7d:95:11:54:7d:3b:81:4d:cd:7d:fd:
15:31:30:82:0a:4a:1b:b8:fb:c9:e5:64:b4:cc:54:bf:75:ec:
0d:6d:2a:1b:94:14:bb:77:b5:95:ce:1d:5d:eb:c6:43:ca:1a:
93:b6:7a:84:0e:bc:f7:2d:03:07:eb:11:66:91:ac:8c:1a:81:
e5:2c:64:57:72:5c:c0:cd:c1:2b:3c:28:0e:2e:5d:fa:2b:bb:
19:3b:e1:d2:37:21:8b:c0:d6:aa:bd:d3:3c:98:4d:6d:80:24:
e3:cc:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:09:33 2026 by rpki-client