Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: W/Ap8dK57XZnvJ5lNc0MoeAKitengWM85ABhmTPl+KE=
Subject key identifier: E6:F6:F2:FB:6E:C5:87:2D:D8:43:6D:07:B3:EF:04:70:4B:58:99:F7
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 01A0ECD36269E2B5CDBAA21F7568AD6811E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 1A7E
Signing time: Tue 29 Sep 2026 11:01:11 +0000
Manifest this update: Tue 29 Sep 2026 11:01:11 +0000
Manifest next update: Wed 30 Sep 2026 11:01:11 +0000
Files and hashes: 1: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (hash: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: M+iiV6m1CzR8UncN0oU1XU01anWYqN1pONyB3ZbCK5g=)
3: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (hash: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:62:69:e2:b5:cd:ba:a2:1f:75:68:ad:68:11:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Sep 29 11:01:11 2026 GMT
Not After : Sep 30 11:01:11 2026 GMT
Subject: CN=e6f6f2fb6ec5872dd8436d07b3ef04704b5899f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:0b:3f:55:f1:81:53:2a:d4:0e:43:7e:09:
aa:5c:67:20:56:fd:31:c7:c6:8d:c2:3f:12:66:23:
0a:bd:4d:d3:77:22:cc:2b:27:6d:eb:20:9a:8e:2f:
fa:f5:52:cc:d7:26:c2:8a:e4:7f:db:0c:29:0a:68:
32:8e:0c:db:65:51:00:90:aa:77:01:db:1b:6f:83:
3d:dd:0f:2b:5a:81:71:bc:42:39:3c:f6:f0:57:47:
bc:21:9b:b8:98:58:6c:e0:38:0e:e1:f4:c4:d3:20:
cf:b8:0f:f9:07:ca:09:3e:1d:78:cd:a6:4f:28:84:
5c:3f:49:b7:2c:3e:4d:ce:76:a5:b2:3e:ca:f0:c4:
2b:43:24:5e:95:de:45:87:2b:98:2a:18:0c:12:74:
9b:f5:7f:32:86:49:a3:3d:48:93:e9:02:17:d0:40:
d5:0d:85:f8:a2:36:02:fe:e6:d0:47:07:46:1d:43:
68:f3:4f:4d:6c:8b:ce:fa:7d:a6:5d:a3:c4:7d:1f:
9e:14:f5:c4:88:cf:71:d6:28:83:1d:32:24:f9:02:
0d:c4:f3:b6:8e:ad:03:aa:88:9a:ec:3e:68:af:4c:
65:e0:b3:90:b9:d6:70:c2:db:ea:9d:14:1d:a8:3b:
24:98:c1:a6:d5:eb:95:1b:8f:f1:01:be:44:a8:11:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F6:F2:FB:6E:C5:87:2D:D8:43:6D:07:B3:EF:04:70:4B:58:99:F7
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:28:76:86:c8:c5:ca:1a:e9:fa:8c:25:8c:14:ec:15:a2:25:
00:05:e2:80:70:6b:0f:82:48:d3:62:4d:fb:91:3c:49:23:9e:
ed:f8:c3:f0:49:b9:be:eb:59:d0:d6:91:d8:e7:b0:25:9e:d6:
ae:8e:7a:73:d7:e8:b2:65:96:a5:a0:56:2f:ed:18:cd:86:5b:
f9:b8:b7:8f:a7:8c:05:7b:84:5c:a8:5f:4f:d4:d5:44:1e:a9:
ce:e4:c3:ad:59:a2:e8:81:17:ef:71:21:82:1d:14:ef:b9:2e:
78:9b:c8:ec:2c:07:1d:0f:d8:0f:03:62:c6:64:7d:7c:42:91:
0b:7f:6f:a5:b7:d0:91:ec:b0:37:7a:a4:12:3d:a4:0f:94:ed:
b4:59:1d:33:e3:15:e1:6c:40:80:ed:cf:cf:25:cc:a6:fb:ab:
7a:0e:72:0e:67:c2:a4:1b:3c:18:5f:8b:a1:5d:13:95:9c:14:
35:90:2d:ab:87:8d:c5:b1:46:bc:6e:d3:d5:5d:30:a6:7e:9d:
42:bf:94:52:1a:7c:9d:42:0b:a0:62:e7:f6:64:1e:39:15:34:
6e:50:92:c4:3e:87:5c:bf:95:ed:d1:af:ba:7a:b2:ef:52:d6:
4d:e7:4e:4a:8f:22:ce:40:d9:4e:e0:e0:c8:e8:06:3e:d9:e7:
0e:4d:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:47:01 2026 by rpki-client