Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: zthUvXQSg5BZQ/Cg3rpAbwSw74V3C7H+iqggk0GTtMI=
Subject key identifier: 47:0C:EC:FB:92:DA:FC:B5:6A:32:26:BE:DA:D4:8B:7F:44:1B:D0:43
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 01A0D3EF1A6C1765F50604E38F90340F6BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 15:00:57 +0000
Manifest this update: Thu 24 Sep 2026 15:00:57 +0000
Manifest next update: Fri 25 Sep 2026 15:00:57 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: EHb0MgodZpUbHLVQdmlWogzf1UeeN8G2IbIQeD1eMmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:1a:6c:17:65:f5:06:04:e3:8f:90:34:0f:6b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Sep 24 15:00:57 2026 GMT
Not After : Sep 25 15:00:57 2026 GMT
Subject: CN=470cecfb92dafcb56a3226bedad48b7f441bd043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:24:b3:ae:0a:41:6f:a7:ab:9e:a1:2f:1c:f2:
bd:f7:bb:9d:41:c5:6d:4a:18:b1:90:78:2f:88:2a:
e3:e5:a4:2a:3b:85:3c:24:cb:b7:19:b0:bf:7f:36:
7a:d0:f6:7e:3f:a2:49:ab:14:a9:46:f9:09:23:8f:
1e:f4:bf:6d:cb:05:a1:f7:f2:a5:b3:ee:b8:2c:d7:
c0:ba:da:46:18:7f:ee:25:d1:6e:86:82:cc:55:f1:
22:ec:92:a6:b6:fa:b9:3e:a7:a9:8f:93:7d:66:b8:
a3:1e:ea:c4:1e:8f:6b:6c:ea:22:ba:44:3e:18:3d:
f5:36:76:f2:00:76:24:5d:9f:37:d4:1e:71:ff:ec:
b1:80:b3:0a:11:68:92:f6:b1:77:2f:74:35:5a:3f:
b8:85:86:cd:f2:f3:e4:0f:7c:42:6e:91:fd:0f:39:
cf:92:f4:77:ea:51:4f:43:34:8e:3e:62:c2:73:f6:
8d:aa:77:1a:a2:03:61:13:de:9e:82:1c:f0:ed:36:
be:4c:f3:c7:70:ee:35:6c:86:b2:bf:f2:7e:e8:96:
43:2a:1f:9c:5a:e9:25:57:aa:81:57:f7:6f:58:10:
ef:73:1e:73:74:89:f0:e8:d5:b3:fa:ab:ac:51:8f:
1b:e1:c2:ac:63:20:ae:2b:10:8c:dd:dd:d4:19:dd:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0C:EC:FB:92:DA:FC:B5:6A:32:26:BE:DA:D4:8B:7F:44:1B:D0:43
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:28:dc:ac:af:e3:57:d5:45:fe:a5:c0:c0:67:10:7e:da:1a:
73:75:ea:12:60:19:f3:a8:b0:8b:06:f3:8d:1c:0c:08:5e:12:
7f:c3:47:97:13:82:bf:ce:c8:c4:d7:b8:20:f3:1b:24:eb:e8:
c6:dd:b7:d1:9a:54:72:bb:f4:17:48:5c:c8:01:c1:7f:1e:55:
d0:0c:53:94:b8:1b:09:9f:3f:64:bc:45:26:0d:e3:77:1d:81:
82:b4:68:7a:7b:95:d1:c0:f1:5d:90:1f:d6:15:3f:1e:30:18:
d7:c5:6b:c4:1f:99:5b:df:1d:3d:2f:01:13:88:de:15:aa:a3:
8f:c9:91:0a:f3:90:4a:61:28:71:26:1b:ff:91:2d:98:26:f2:
94:70:a5:46:cd:cc:bd:e2:65:e2:05:d9:05:53:53:2d:72:7f:
99:d1:f8:e8:c8:2b:7f:e6:ea:89:61:8a:14:7b:50:17:57:1b:
f5:94:30:8e:1a:22:53:0f:bf:45:27:ae:43:c8:81:3d:09:06:
7e:33:d3:dd:c1:f3:3e:72:d4:c1:43:2f:db:4c:2f:60:5d:1d:
e6:2f:4c:da:02:4e:5e:f2:09:fb:30:f6:54:f4:5b:c4:ee:84:
89:83:90:46:e9:a6:09:d1:7c:46:e6:0e:43:6e:bf:0f:9f:d0:
75:3c:9e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:42:28 2026 by rpki-client