Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: 7dmIXFYPJ7B/AZ4Tm0B8N4V83ELrWm7Hxs2npY0v+q8=
Subject key identifier: B7:E2:5D:3B:07:E2:76:60:97:8B:B7:2D:C5:B5:F8:49:27:4C:76:E8
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 019D2771CF46BC9B89FE6F9A22FE716952E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 189A
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: 4L2HrkOMp5Px3ZdgqOBGMnz6oXw.roa (hash: qjbkKzm11wnXRFJIt4quryujdmBS5m5m8Id3/w9vHFw=)
2: 78tSQmB_UZC_rIGDHLnxnqOm3fI.roa (hash: 3kNkwMTWy/XYCkJODFF1IVosQpGtDfhW2/dwVf0UwBQ=)
3: C3Lj3Wt6YNWIPGHmadEQ-dchhaw.roa (hash: fn0aOrz4mN4OtO/EtlMrSuF4wh5zaQaJSbD2ep7jxzI=)
4: JIk4GJqmgSwzYSk0JGPNI21QRnM.roa (hash: 45ZLZSPO108JAO0yb1j8MEBiHT4QdE4zU9XBhQbVqtg=)
5: PY323kbvCRFsNrwGFI26gXv0gpE.roa (hash: U0ksXLpw7uH4vwqe/cNwV58+FVim6JoHjXiFGt1giNE=)
6: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: ZypO26482m3zxiaCX56vfa0Gr9jeuzoMSkEqtd9XS5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cf:46:bc:9b:89:fe:6f:9a:22:fe:71:69:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=b7e25d3b07e27660978bb72dc5b5f849274c76e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:0c:d4:3d:1b:e4:a4:dc:3b:8b:78:3d:fd:
13:7e:e8:c5:5a:bb:2f:d1:f4:1e:30:9f:e7:3b:0e:
7e:fa:6e:e6:55:5b:5b:b0:40:99:d0:80:86:ab:02:
97:1f:28:3c:84:f9:90:95:93:cd:af:a3:77:16:c5:
fb:d1:06:d9:f8:c3:c4:11:32:b3:46:33:a4:06:00:
2d:c6:1e:a4:83:29:e6:01:6f:96:99:f8:4c:73:99:
1b:a6:a5:c0:65:c4:e0:a3:65:74:38:23:6b:51:cc:
a9:33:54:36:0c:7a:f6:e9:bc:83:ad:fa:15:a4:af:
91:56:f2:f7:da:9d:73:0c:f3:2f:7c:4c:b7:dd:1c:
9a:58:bf:9d:62:55:8a:6a:4f:ad:90:8e:bf:25:e4:
5f:87:94:a1:c3:bc:ff:e0:68:86:ae:e2:d2:ca:42:
09:51:cc:5b:c4:dc:7f:47:2e:e0:7c:51:80:f2:3d:
ab:b6:37:b9:5a:06:b4:11:82:cb:16:c7:8e:2b:5e:
52:55:4c:05:61:98:6d:29:7b:e9:cb:b5:18:48:79:
4b:30:c3:ef:5f:a1:f7:5c:70:d0:6f:a2:2e:af:32:
99:3d:2f:44:79:92:b4:fe:37:bf:d8:db:2b:d2:37:
ea:f9:e0:25:df:9d:aa:ba:94:65:c7:e3:c6:e0:3f:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E2:5D:3B:07:E2:76:60:97:8B:B7:2D:C5:B5:F8:49:27:4C:76:E8
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a9:5a:be:9c:c7:53:20:16:fd:69:d4:02:3a:5a:96:c1:bc:
b7:cf:7c:1a:69:42:e6:03:fb:02:0d:35:ae:60:05:52:93:6d:
e3:d8:a2:9d:52:14:d9:df:86:12:a5:b1:8c:a7:7c:c5:0d:91:
25:78:37:4a:e2:a6:fa:df:af:93:26:1f:04:be:1c:28:f9:85:
3c:8b:e6:41:de:5c:d5:9b:24:51:54:12:32:c0:5a:e0:f7:28:
e5:5f:47:52:d1:59:56:c9:81:e6:7a:fd:c1:75:f8:04:4c:e6:
29:8e:e0:91:e9:2d:e4:81:b3:15:19:6f:eb:28:e4:65:ec:a1:
a8:c3:cc:ff:ed:97:d8:77:a7:ba:ce:b9:97:d8:0a:5c:29:7a:
3b:ae:03:7b:c3:c1:e0:23:80:e6:55:71:e6:f7:93:80:85:f6:
dc:42:d4:d2:9a:6b:ff:58:3c:fb:ef:c7:92:e7:3b:fc:4a:e7:
0d:18:af:9e:34:22:de:3c:0a:1b:e3:86:c6:1c:8a:b9:5e:e3:
f2:5f:bf:8e:cc:c1:b4:8e:03:dc:58:fb:59:ad:60:63:47:98:
4d:ba:d7:d0:26:b7:ce:1a:2c:fb:c0:ea:61:51:14:27:84:8a:
c1:e9:a1:00:44:03:bc:32:cb:a6:68:02:50:5d:68:8e:35:ae:
7e:cd:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:03 2026 by rpki-client