Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: t4j5LhA25guQTSIt4GV3rqSg+tp1YF6uzjgAb9pECqQ=
Subject key identifier: A8:7B:EA:31:93:04:E4:9F:49:B2:D6:F0:3E:84:62:65:24:D2:25:C1
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 01A0D7CC5FAEB4064B02DD4B928996419828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 0A03
Signing time: Fri 25 Sep 2026 09:01:30 +0000
Manifest this update: Fri 25 Sep 2026 09:01:30 +0000
Manifest next update: Sat 26 Sep 2026 09:01:30 +0000
Files and hashes: 1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: woQFfiYx+vHEwnNbYjH73oOW89P2AoH1T7i5KLYMFmA=)
2: HvbqYPMAVepvi6ZtkrW2fUxUxMM.roa (hash: kj2P3vyd4ShtsXAZbQsRTziSHIgT6QC6RQY8zqv9EFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:5f:ae:b4:06:4b:02:dd:4b:92:89:96:41:98:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Sep 25 09:01:30 2026 GMT
Not After : Sep 26 09:01:30 2026 GMT
Subject: CN=a87bea319304e49f49b2d6f03e84626524d225c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f1:0a:29:a6:36:bc:5a:3e:80:84:e4:a0:81:
ae:a1:8f:95:4f:23:ef:40:5f:1d:98:7c:a3:1f:dc:
ab:28:37:bf:14:c4:0c:42:08:01:af:d6:ac:b0:8d:
87:a6:ca:92:56:5a:b7:c7:7e:33:92:ae:6b:2b:9c:
d1:75:0f:4c:13:5a:db:35:6d:09:15:70:db:a1:64:
8f:f0:6b:8f:b2:3d:5f:4c:f0:40:12:9b:f1:eb:a7:
90:a8:bc:ee:9e:eb:a5:a4:aa:9c:de:7c:95:a9:24:
6a:90:39:8a:94:3d:ab:7a:87:93:15:4a:8b:43:51:
48:a2:ad:4f:0f:b1:e8:ed:c2:b8:da:1a:5c:d8:a8:
ae:d1:db:fe:dc:02:d7:e9:c2:ee:1c:7c:c2:e8:1e:
bf:ab:c4:eb:ad:22:0a:c8:77:7e:f3:3d:9a:51:d0:
2f:4d:f8:bc:c8:db:77:5e:f0:cb:99:05:7c:62:3d:
be:91:36:c3:cb:cc:23:60:8f:ff:70:df:5f:1b:ec:
1b:05:c8:db:c2:a1:c6:33:ce:82:14:ab:99:1e:1c:
b1:82:8e:2b:fa:00:80:60:8d:9b:84:6d:c8:4f:2b:
d9:7f:85:18:f3:86:ac:ad:05:8f:c6:43:aa:86:ec:
02:a1:cc:39:cf:ce:da:97:dc:db:1f:1f:f3:03:cb:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7B:EA:31:93:04:E4:9F:49:B2:D6:F0:3E:84:62:65:24:D2:25:C1
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9f:23:56:8b:30:67:d9:02:b8:8c:40:49:25:f4:39:4f:3d:
cd:e2:8a:bb:32:33:76:27:31:3b:41:1f:97:7f:3f:db:cf:3a:
83:fc:19:6a:5e:48:48:a6:da:89:2d:b9:4d:20:d9:ce:9e:79:
a6:19:7c:d6:66:ba:c4:c0:db:06:24:29:2c:29:9b:b6:1a:f0:
c0:4e:37:cf:1e:ed:b8:7a:2b:e3:5c:a0:1d:b1:02:91:05:4d:
36:6e:d5:5d:18:5d:8d:8d:8a:94:71:df:44:42:b2:80:f4:58:
fa:c2:31:17:4c:7f:b2:ab:1e:de:84:00:0a:5e:c8:92:9d:4a:
bc:44:6f:1e:50:43:56:f5:f2:7b:ad:11:cd:dc:ca:8c:01:75:
c5:87:03:f0:ba:f5:25:bf:65:37:de:3f:c8:f9:46:37:9b:06:
2e:a4:36:f5:80:9e:fd:8c:11:33:af:e6:e4:b2:d4:5e:37:07:
cc:aa:60:ea:ea:3c:4f:1e:3f:fd:02:89:47:e0:31:e1:e8:dc:
00:a5:d6:1a:dd:41:dd:9d:36:29:d3:d8:8d:84:53:40:35:04:
5f:86:da:4b:14:14:a1:b7:ad:2d:29:86:fe:f2:9e:64:ae:c9:
e2:50:fd:ba:0b:09:c6:78:e2:23:73:18:cb:fa:c7:10:b0:c7:
b5:1d:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:18:21 2026 by rpki-client