Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
File: h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft (raw, json)
Hash identifier: FDSVq3G0alJYmkKwKMCQzvlrscv461MOGopjU68rgPY=
Subject key identifier: D6:4E:EE:18:C9:07:96:9A:82:CC:38:7B:06:5B:FB:60:3A:E2:2D:04
Authority key identifier: 87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
Certificate issuer: /CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Certificate serial: 019D270456D741FB935482787E671AF837BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
Manifest number: 0AA6
Signing time: Wed 25 Mar 2026 22:01:28 +0000
Manifest this update: Wed 25 Mar 2026 22:01:28 +0000
Manifest next update: Thu 26 Mar 2026 22:01:28 +0000
Files and hashes: 1: HDdJrGAOCORFyVgyxrNaNeF2t8Q.roa (hash: rD8uKvcs46K8PbUVJgx0QG2NecMmJWf53Xg6anGyvsM=)
2: h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl (hash: lutaLy2TXv4IoJxJaFmDzRirbWzLliXVfPFGBnhGtUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:56:d7:41:fb:93:54:82:78:7e:67:1a:f8:37:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c3b85a7befbb4490d7ac852eb8be84bf938b4d
Validity
Not Before: Mar 25 22:01:28 2026 GMT
Not After : Mar 26 22:01:28 2026 GMT
Subject: CN=d64eee18c907969a82cc387b065bfb603ae22d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:58:4a:72:17:b3:5e:05:1a:fa:cd:87:0e:
cd:24:1e:ce:1c:ac:d1:7d:4f:fd:8a:7f:c1:64:9e:
9c:6f:56:5a:e8:a5:db:41:78:23:e7:67:39:66:fa:
a3:0d:d9:91:cc:39:02:55:60:82:c8:13:68:ab:ae:
35:c3:a0:09:88:91:27:93:08:65:d0:1d:c1:8a:7f:
ee:57:fb:23:24:7c:71:a5:95:ff:3f:c0:67:d4:de:
a2:6e:9a:02:8d:9c:40:9e:d8:43:9f:5e:19:5f:73:
59:11:67:1f:ca:60:43:b0:3f:b2:cd:f4:9f:03:c6:
9d:a2:48:d6:fe:dc:2b:cf:14:66:bc:c1:7f:3c:13:
e6:83:21:cb:7f:cc:b9:92:38:68:79:48:eb:70:91:
e2:04:9a:1a:21:11:58:6c:56:6e:75:9b:28:df:c1:
c5:4a:b4:99:8a:b5:80:1d:48:e4:85:c1:18:fb:e1:
15:8c:4d:bc:cc:ef:d9:1d:f4:61:f2:17:cc:d4:2b:
38:98:e5:50:b8:64:01:8b:4d:65:e1:b0:a0:61:93:
16:7f:64:7d:6e:b1:98:68:48:9e:3d:d9:1e:58:d5:
1f:20:1f:51:7e:5f:37:5e:2a:c1:85:ba:f1:c3:fd:
11:1a:f8:52:24:02:61:97:e6:dd:69:67:65:a6:89:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4E:EE:18:C9:07:96:9A:82:CC:38:7B:06:5B:FB:60:3A:E2:2D:04
X509v3 Authority Key Identifier:
keyid:87:C3:B8:5A:7B:EF:BB:44:90:D7:AC:85:2E:B8:BE:84:BF:93:8B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8O4Wnvvu0SQ16yFLri-hL-Ti00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc5cc8-b3ef-40fc-ae40-78ec8023068f/1/h8O4Wnvvu0SQ16yFLri-hL-Ti00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7b:ac:f3:ad:14:ee:dc:6b:45:16:09:cc:5b:e6:b7:57:75:
8f:74:42:1d:5a:e3:24:c1:53:92:55:76:fd:aa:41:42:f7:c5:
c2:c6:ab:64:4e:ef:44:9e:f2:d3:64:fe:80:93:94:a8:d1:a9:
f5:83:47:ea:37:0f:10:66:05:2e:6e:2f:ba:69:25:e2:53:fa:
e8:d8:35:fc:6f:e4:7d:59:5a:08:4c:8e:1b:54:5f:c6:1d:f5:
44:67:2d:3f:59:59:16:4c:84:75:98:73:3b:57:0d:34:9e:fc:
9a:93:d8:e8:25:70:2c:d6:aa:10:49:32:1e:54:4d:09:29:b8:
08:77:c9:cb:dd:12:23:4d:d5:39:3b:11:45:46:92:52:7a:fa:
f2:b8:76:7b:d1:eb:91:3a:db:95:1a:a3:3e:99:90:4b:1e:79:
1f:2e:30:3e:76:44:0d:9a:be:f0:b7:5a:cf:d1:cc:41:b7:22:
ef:60:c0:2a:f7:11:fd:70:d1:6b:39:75:99:c9:b7:d7:e7:12:
70:ab:a2:6f:78:52:85:2c:f6:be:99:03:6e:fa:d2:da:bd:e5:
12:c3:5b:d0:32:bf:7b:f1:ce:83:dd:a5:58:7d:c4:4e:d3:8b:
04:64:1a:c4:33:0b:53:4d:22:e6:55:19:6e:30:78:a5:cf:bd:
d5:51:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:37 2026 by rpki-client