Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier: mgXMduRPyza0iGMipR9YQU3JO+PI+J/qq9IRdMFiEZc=
Subject key identifier: 8C:5A:91:04:92:DE:7D:88:27:36:86:65:69:E3:FA:6F:2C:06:EE:79
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 01A0E286FD73F194C63163D229F43E3AA9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number: 1169
Signing time: Sun 27 Sep 2026 11:01:32 +0000
Manifest this update: Sun 27 Sep 2026 11:01:32 +0000
Manifest next update: Mon 28 Sep 2026 11:01:32 +0000
Files and hashes: 1: K3q7rDAAcTkhLcTgXHyQCl5GQuI.roa (hash: XY2CV23nGfpFfkmgGkboOd40b6zMjm8v5H58JjAU0/Y=)
2: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: 3XyJrJVa549tNalGa/mxqWHvgzgX8s5IUksYUmvQotU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:fd:73:f1:94:c6:31:63:d2:29:f4:3e:3a:a9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Sep 27 11:01:32 2026 GMT
Not After : Sep 28 11:01:32 2026 GMT
Subject: CN=8c5a910492de7d882736866569e3fa6f2c06ee79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:ff:56:7b:37:3f:c4:81:01:79:72:10:ac:
0f:6f:2c:d8:36:40:a4:35:b3:94:d7:0e:ed:b7:2a:
f7:f7:ef:0e:1c:f8:e2:55:3f:8b:1d:a5:84:38:2e:
5b:ba:3b:41:c3:7e:63:85:a8:c1:60:ad:a4:06:92:
fd:c9:a7:80:46:cb:3e:0d:67:be:b2:f1:61:01:5f:
c3:12:f8:84:18:4c:96:c9:43:61:c8:d5:ca:ab:c2:
17:83:95:0d:ec:5f:47:c8:1f:9d:86:bd:ef:3a:3d:
b1:cb:6a:69:e7:df:a3:0a:3a:e9:d0:dd:1d:4e:ae:
3f:bb:44:7e:25:6c:20:79:42:b5:d1:6c:3c:dc:d2:
e7:aa:e6:49:00:85:9e:94:cb:9b:3c:c5:22:27:6f:
12:b1:96:02:dc:5a:80:15:78:41:f8:fa:bf:07:ea:
2b:e8:d9:a9:15:ab:06:d0:ea:8b:91:de:31:ab:5d:
8a:18:d5:f3:40:30:3c:fe:58:ed:2b:48:5c:94:43:
87:99:e3:03:19:bd:4f:cc:8b:cb:32:b9:97:3f:5a:
d5:60:55:09:44:2d:65:9f:d5:a8:40:f5:4b:60:80:
64:ed:60:7a:ae:d6:77:41:20:ce:94:50:53:a6:32:
98:ee:70:c9:d8:0d:22:dc:20:b3:68:42:7b:ac:7f:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5A:91:04:92:DE:7D:88:27:36:86:65:69:E3:FA:6F:2C:06:EE:79
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:12:c1:bd:06:8f:7b:75:68:d6:c8:83:c4:8d:57:cd:5e:bb:
53:4b:66:05:ea:8e:46:d7:62:c9:3b:67:52:9e:e1:32:2e:fb:
06:50:78:36:38:1d:de:5f:7b:a6:07:bb:63:53:44:62:fe:09:
1a:31:5d:66:ac:8f:28:75:3f:35:82:51:df:a7:92:b1:56:a2:
38:75:9d:4b:2e:41:57:69:df:a7:90:3d:34:1f:52:31:74:df:
bc:60:2c:4c:93:b9:76:be:6f:1c:6f:ea:a6:37:7b:e7:ec:0b:
8b:44:42:6f:8f:55:fe:a1:8a:54:39:b1:a4:4a:c8:39:60:71:
5e:c9:72:36:26:de:d5:2b:68:b7:9e:d6:fc:87:e0:76:12:0f:
15:99:de:26:2b:b7:70:80:c0:58:6a:c8:29:2f:53:2c:b2:5c:
dc:93:3c:b3:dd:91:dd:f6:28:ba:36:48:9e:a7:4b:a4:82:83:
fe:ea:ac:b1:c7:2d:2f:d6:7f:f7:b6:22:97:e9:ff:84:69:09:
8d:93:7f:6a:83:7e:a6:09:96:3a:62:a8:95:f4:20:d9:c4:df:
1a:7a:15:0d:ca:8f:36:ab:56:ae:9d:7e:26:c0:6b:43:ac:49:
de:a6:8d:9d:ee:c7:49:62:c5:dd:d5:b2:0e:b5:b7:5e:c5:da:
ff:e7:af:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:44:55 2026 by rpki-client