Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier: bhNYpHpiM3W8+X8VD1tfudcED0Gw5zW33swhv5POQU8=
Subject key identifier: 8A:38:9B:2C:5E:FE:C1:74:6B:68:B5:22:D6:FF:38:8A:9C:E8:C8:78
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 01A0FC0FFAD6791940CF62FD6A6E0F248EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number: 0739
Signing time: Fri 02 Oct 2026 10:01:40 +0000
Manifest this update: Fri 02 Oct 2026 10:01:40 +0000
Manifest next update: Sat 03 Oct 2026 10:01:40 +0000
Files and hashes: 1: 5Edac9IUnILOtTlQImHIQXzm3FY.roa (hash: 0g3UdCMMmFcn185Anm2pj6+F5hE2ZCb92bl/1tjcAgw=)
2: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: 212hRvPvj51U7g2Kt6FnveHPPB+u3z5hO2oqo01w9lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:0f:fa:d6:79:19:40:cf:62:fd:6a:6e:0f:24:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Oct 2 10:01:40 2026 GMT
Not After : Oct 3 10:01:40 2026 GMT
Subject: CN=8a389b2c5efec1746b68b522d6ff388a9ce8c878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:62:17:69:e1:c2:14:87:83:fb:c5:18:05:
63:7a:28:ab:77:ed:d3:85:db:e0:c6:7c:f7:bc:3b:
42:32:85:cd:52:f4:75:8a:39:b1:bf:8e:d5:f0:98:
43:b4:34:f2:db:8e:e8:31:77:67:18:2c:b2:6f:bc:
ea:bf:12:c3:90:d0:2c:9f:fa:b6:ad:c3:d4:6b:8c:
71:1b:3a:f2:80:01:63:da:9f:13:b1:9c:ba:77:80:
de:3d:43:f0:23:f6:f8:66:9e:6a:03:62:c0:3f:1b:
61:69:1c:4e:4b:ef:64:ab:74:f0:ec:b8:b0:6c:25:
30:d5:cd:62:13:0b:a7:29:a1:c2:c0:1a:37:93:23:
d5:5d:fa:b1:92:22:09:84:6d:c6:12:51:2a:e0:0d:
19:1f:98:88:70:ba:13:55:01:cd:8a:6f:2b:72:85:
f9:ee:93:72:5a:dc:33:1c:e0:9f:bb:3f:f3:60:4e:
1e:65:8d:76:f7:1c:e3:3a:63:e1:a1:2d:fe:78:37:
8c:54:93:84:d5:16:66:1f:75:f0:60:3a:d4:10:e1:
8e:04:aa:18:89:2c:89:a4:dc:73:55:4f:25:16:6a:
2b:a5:10:b4:8c:21:85:a7:b8:e0:bb:c5:dd:f9:aa:
75:4a:44:ae:8f:85:3a:e5:4f:20:16:a3:20:34:02:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:38:9B:2C:5E:FE:C1:74:6B:68:B5:22:D6:FF:38:8A:9C:E8:C8:78
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ca:9f:07:05:f4:63:d9:57:61:32:93:9b:73:a6:94:fe:bc:
3c:a7:e3:c3:e1:cc:cb:d4:84:a5:cd:3e:17:50:89:8d:86:9b:
f9:e0:96:ea:c3:5f:33:e6:f6:34:3a:8f:3f:93:27:88:f9:ca:
2a:3d:05:0b:9b:37:39:18:39:27:1a:f4:78:48:37:ad:d7:ce:
fc:27:d0:23:0a:cd:60:8a:72:26:1b:cd:ca:fe:40:8a:64:38:
6d:21:c4:3d:57:df:16:6e:11:e6:e7:d7:4b:fc:f7:76:af:55:
76:26:8c:7c:e5:bd:97:7d:8c:cc:cf:44:8a:b6:f7:d9:0f:f9:
52:8f:6d:b0:de:fd:3f:1c:23:ac:5a:a3:9b:53:16:81:97:74:
52:b3:c3:d6:76:fa:5b:c4:ce:f6:ea:b1:d6:82:f0:5f:63:0a:
38:07:a0:eb:61:cb:45:1e:0b:a6:b8:b2:b3:2d:aa:32:c9:6c:
d8:0e:20:2a:f3:33:c3:46:cd:81:b2:02:26:9d:ca:13:7b:af:
20:c6:9d:9a:73:88:f1:8a:64:0e:00:17:03:5b:2e:54:13:14:
fd:11:46:3e:7c:f1:4d:13:5b:6f:d7:fe:7f:47:77:89:ef:3f:
33:d7:0f:2e:08:3e:e7:e1:1c:f9:e9:fb:f0:34:41:69:22:35:
09:4e:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:03:19 2026 by rpki-client