Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: ksl6n8ruF9aogg6a/xGEJDnYnm9UENFEHbVsulwRe2s=
Subject key identifier: AE:D4:3D:37:40:2E:0C:65:E1:C4:B6:12:A7:6C:3C:98:B0:BA:74:4C
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 01A0D3EFE9EBA0138D357BEEA6668E3FC84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 14F7
Signing time: Thu 24 Sep 2026 15:01:50 +0000
Manifest this update: Thu 24 Sep 2026 15:01:50 +0000
Manifest next update: Fri 25 Sep 2026 15:01:50 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: PvER03YT84yC7xPHp70WGyf1PqJ42b/mAKVd+DSCz60=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:e9:eb:a0:13:8d:35:7b:ee:a6:66:8e:3f:c8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Sep 24 15:01:50 2026 GMT
Not After : Sep 25 15:01:50 2026 GMT
Subject: CN=aed43d37402e0c65e1c4b612a76c3c98b0ba744c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:31:d0:d1:3c:94:7f:51:42:87:16:f7:5c:
5e:c3:21:9c:70:2d:2f:7c:b9:d7:7d:c8:a2:91:77:
80:fc:7f:c4:9c:43:b5:ed:9a:56:f6:61:d3:5c:9d:
f0:f2:49:e8:9a:a8:26:b0:da:46:45:24:95:d6:18:
70:ed:86:f4:15:e6:11:f8:2a:c3:52:21:07:32:4c:
06:31:b4:da:ed:bd:68:1c:08:18:b4:1f:9d:64:83:
ff:5b:3f:bb:26:40:13:b4:34:7a:2e:45:53:11:cb:
ab:b3:f8:33:6e:a1:b6:36:91:24:4f:f5:ba:8c:13:
47:29:5e:1e:3f:80:dc:63:bc:15:c9:77:47:a2:14:
ba:0f:60:23:a5:33:f0:b3:77:e3:cf:2d:5f:ef:29:
e2:1b:6d:04:42:f9:5f:ba:d0:a4:ca:16:3f:5e:9a:
36:b6:f5:9a:71:e6:44:39:a2:1e:2b:d2:5f:4d:f6:
cf:e7:e5:74:79:ec:2b:5f:62:db:9f:e8:db:b2:db:
bb:0a:61:ea:97:ab:cd:ca:ff:ef:de:3e:b4:c0:e7:
76:e4:14:2f:2a:a5:25:68:b6:33:1a:a2:12:7a:33:
6e:7d:e3:b9:01:5b:34:71:0f:f9:1d:fc:cf:f8:a2:
ed:27:90:5c:b5:2c:2d:65:ef:07:fe:bd:7e:17:a4:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D4:3D:37:40:2E:0C:65:E1:C4:B6:12:A7:6C:3C:98:B0:BA:74:4C
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ea:0e:be:52:12:6f:21:bf:8b:b1:2c:41:b1:99:8e:2d:c5:
c2:40:ad:ca:cf:73:17:7c:f6:a2:19:b0:99:50:b9:e6:5e:56:
46:6d:2d:42:ed:91:c8:c1:56:7a:54:f7:7c:e5:f5:f5:1d:0d:
1a:29:fc:e6:e8:d6:fd:1b:24:a2:24:13:97:42:a9:bc:5e:19:
b1:f3:d4:30:19:ef:e3:a0:ae:a8:93:16:4b:13:8d:d8:b0:0b:
87:9b:88:0f:39:b0:3f:69:92:67:7f:fc:a0:0f:a5:92:dc:71:
92:fa:03:be:67:06:1d:5a:7b:17:e2:a3:cb:6a:d4:03:8c:6d:
ec:ac:29:6a:de:41:69:fa:47:8e:7b:1e:21:3d:08:3c:e3:1d:
8c:80:4a:f1:9c:5f:3d:ce:de:0e:c6:06:6b:a5:6f:b2:11:38:
10:e5:e2:ad:39:eb:22:fd:23:74:3e:00:39:c0:8b:6c:48:dd:
d2:56:73:5f:9d:01:2e:e8:96:1b:1c:43:a0:22:9a:31:f9:5b:
fd:1c:89:5f:19:7b:05:1d:d1:65:cc:48:f0:96:df:41:17:c2:
f1:61:cc:25:8f:b5:f4:9f:59:c9:cb:74:c9:a1:dc:1b:ba:a3:
f8:3c:e0:93:1b:71:30:09:8d:c6:d9:68:80:ee:96:7f:ba:5a:
57:04:b1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:47:32 2026 by rpki-client