Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File: h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier: +PlWX+j5uy4oodEGxI4p5nxf76DsXMdyzuLOGmftD1s=
Subject key identifier: 5F:5A:5C:04:AC:70:34:63:CD:F6:16:B2:98:EE:A3:98:1E:9F:8C:51
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer: /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial: 019D26960C1452D024457EA32718A11737EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number: 0F7A
Signing time: Wed 25 Mar 2026 20:01:00 +0000
Manifest this update: Wed 25 Mar 2026 20:01:00 +0000
Manifest next update: Thu 26 Mar 2026 20:01:00 +0000
Files and hashes: 1: K3q7rDAAcTkhLcTgXHyQCl5GQuI.roa (hash: XY2CV23nGfpFfkmgGkboOd40b6zMjm8v5H58JjAU0/Y=)
2: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: gOzROFuC2yjH525WIcGV+tlyI0fOA+ZwliJ+SixALqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:0c:14:52:d0:24:45:7e:a3:27:18:a1:17:37:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Validity
Not Before: Mar 25 20:01:00 2026 GMT
Not After : Mar 26 20:01:00 2026 GMT
Subject: CN=5f5a5c04ac703463cdf616b298eea3981e9f8c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:bb:87:a6:08:1e:66:1e:3d:d7:cf:fb:84:
27:79:36:ad:33:da:ad:79:c7:1d:b6:d1:97:4b:9a:
62:39:09:92:f6:af:fb:99:30:3b:0f:41:f3:37:a4:
d7:0b:a9:d5:69:58:0f:e0:85:75:84:63:55:cd:54:
1f:a1:b2:b8:73:6d:27:d3:6b:1d:db:26:18:cd:b4:
a7:28:69:af:e2:80:9c:66:99:b5:96:71:4e:63:b8:
fb:75:a9:89:b3:cf:62:90:a7:a8:e2:43:6c:a1:4a:
f8:97:01:a9:2c:8f:c8:7b:89:85:b7:81:9b:88:de:
c4:77:2b:42:d2:32:80:7c:b4:d4:b9:bc:12:f3:e2:
11:29:41:bc:13:a4:31:97:c6:41:89:0e:ea:1e:d1:
3e:47:08:e9:6b:90:cb:e6:b8:df:ed:da:03:e6:d1:
93:60:0e:f0:7c:4d:92:b5:73:6c:df:5e:8a:9f:af:
eb:85:99:1b:1d:19:99:b5:a1:ca:ff:c4:1e:6c:64:
50:1d:14:93:29:77:87:68:47:8d:28:4c:15:62:f5:
38:58:f6:5f:9c:af:5c:15:58:08:d2:27:d8:ad:82:
f0:5c:06:eb:6b:9d:f0:dd:20:d7:55:ee:8d:11:75:
42:7a:2c:35:14:ed:b9:8c:ab:26:82:6a:f7:70:30:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5A:5C:04:AC:70:34:63:CD:F6:16:B2:98:EE:A3:98:1E:9F:8C:51
X509v3 Authority Key Identifier:
keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cb:19:0f:44:90:42:ff:1d:3d:79:75:37:71:91:2c:41:73:
a4:6e:85:c8:87:f2:ed:aa:22:39:c3:d4:7e:0e:c5:e7:69:90:
b5:4d:70:65:81:aa:3e:03:8b:dd:27:84:6e:c6:e1:3d:90:2e:
e2:22:b6:86:b3:c1:c7:29:7f:e8:22:ef:3d:fb:0e:be:fc:10:
aa:ea:da:8c:c6:e5:25:bc:19:42:80:70:2c:e2:2f:2b:07:24:
05:4b:9a:23:18:2e:ed:91:51:e3:a4:51:e4:b7:68:87:2d:7e:
06:fa:0a:ac:e9:4a:60:ed:12:14:91:a6:9c:83:79:08:ce:88:
a5:b7:a5:ba:8c:10:e8:6c:2b:55:89:62:24:e8:85:18:93:a8:
07:78:fa:be:4b:49:a5:e6:c2:dd:2a:32:5f:2e:c7:4d:2f:0e:
36:6c:28:cf:79:bc:b6:27:60:44:f4:70:25:f5:bc:d0:c7:6f:
bc:e4:61:01:77:ee:27:c0:36:31:23:d7:38:93:57:b1:ef:17:
10:f6:21:44:c8:ba:65:ff:63:b2:a1:fa:a7:d2:4a:f8:58:c4:
eb:55:bd:ed:dd:f6:e5:94:97:bf:9c:40:7f:bb:2d:39:7e:39:
c7:d4:e1:12:93:a7:59:4a:67:ba:20:02:69:83:ea:e8:6d:e6:
37:a7:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:35 2026 by rpki-client