Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
File: h_S8G8xE8-kQBwQ1297UG25ILmg.mft (raw, json)
Hash identifier: a/agqYCqnmELsmrD34+qiBXwGCcj08DSVR26AfyGI7k=
Subject key identifier: A8:8B:33:DD:9A:BD:5A:87:47:06:98:81:65:A5:37:63:F6:EC:B8:C8
Authority key identifier: 87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
Certificate issuer: /CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Certificate serial: 019D284E04A1DEC42B3B9F552D87F3191AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
Manifest number: 06BA
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: 0-9adPkcL-4YbjFYTMCOeFy3i08.roa (hash: +Wndu36xFA4FqzMwoCDPyuyiaHM6T8hR75Kfir6Lp0E=)
2: h_S8G8xE8-kQBwQ1297UG25ILmg.crl (hash: yR8+sRMR6wN0HmVxxPcm35uF/BYqhbONv6EhfLUI2PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:04:a1:de:c4:2b:3b:9f:55:2d:87:f3:19:1a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f4bc1bcc44f3e910070435dbded41b6e482e68
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=a88b33dd9abd5a874706988165a53763f6ecb8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:c5:33:9f:f7:36:76:c2:9c:1d:fb:c7:79:
1d:75:b2:17:51:bd:2f:ef:29:a9:74:e4:95:34:30:
3e:58:7c:7d:91:78:6e:d1:9a:6c:32:a1:c2:67:d7:
bd:07:af:7a:e1:02:e7:c6:eb:ad:35:f4:9d:95:8c:
6b:f0:e7:85:e5:d2:1a:2e:25:8b:e8:57:26:29:f0:
47:74:af:af:d6:73:91:00:71:c6:18:fd:a7:94:cc:
38:9a:61:20:76:25:bc:8e:dd:36:c8:c5:e7:45:1c:
96:fd:d0:d6:2e:6a:00:33:26:c9:3e:b8:fc:da:1c:
1f:4e:7e:11:36:fd:01:e6:e3:08:db:f0:a1:58:cd:
fc:f9:67:ad:bc:0e:ff:aa:ba:35:72:73:6e:af:5b:
75:d4:8e:5b:8e:11:ba:43:9e:c9:6c:59:37:34:44:
ce:42:2c:94:78:08:03:b9:b0:dc:f0:06:11:ac:96:
66:53:29:e4:3d:99:e9:c4:a0:c0:e5:43:a4:cd:83:
06:c8:ee:f6:25:10:cb:51:9b:c1:b5:15:63:d6:82:
f7:06:c0:8c:14:dd:c3:39:e0:69:14:45:02:a2:80:
24:5f:f8:98:6f:c5:37:56:1b:64:2f:a1:8d:02:10:
56:17:e1:64:17:b6:64:72:fa:f6:bd:48:a1:a2:17:
ca:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8B:33:DD:9A:BD:5A:87:47:06:98:81:65:A5:37:63:F6:EC:B8:C8
X509v3 Authority Key Identifier:
keyid:87:F4:BC:1B:CC:44:F3:E9:10:07:04:35:DB:DE:D4:1B:6E:48:2E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_S8G8xE8-kQBwQ1297UG25ILmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5b6d-7f46-447a-8946-7e781680d1d2/1/h_S8G8xE8-kQBwQ1297UG25ILmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6e:51:bf:4c:f6:4d:05:77:15:d9:8b:12:52:84:fa:09:50:
cf:d1:eb:47:da:cd:05:1f:8c:2a:3e:1b:d5:b7:fc:7b:07:6e:
b4:f7:1c:fc:22:d7:a9:34:29:0d:c8:28:af:47:5c:b6:2a:a2:
ec:c7:a1:94:28:1a:92:91:bf:6b:15:68:1d:f5:c6:48:61:7c:
88:f4:df:77:c7:3d:ca:45:ad:e7:c0:67:82:d3:d9:68:04:03:
90:9b:54:7e:9c:1b:64:71:9a:a4:67:45:a5:ab:bd:5b:94:62:
bf:f8:2d:9d:a0:7c:b3:42:e3:a8:67:5c:b4:91:99:6b:71:91:
8c:70:67:e4:74:eb:ed:a0:e5:00:14:91:d7:c9:9e:36:ce:51:
a2:e1:c3:d2:3f:f3:21:6e:30:4b:c7:b6:8c:a3:c2:66:92:e5:
89:df:26:32:b1:7c:17:58:aa:39:10:21:dd:7c:12:ae:4a:1f:
e9:50:5e:0e:9a:1c:0b:02:b5:4e:2d:ef:57:ed:5a:39:bd:5f:
69:e9:de:e2:68:94:d3:5e:2e:61:e9:09:f5:07:ed:0c:16:08:
b8:c0:78:bd:57:51:6b:0f:59:e0:5f:8d:8c:b2:5f:1d:fb:1c:
e4:17:dd:01:26:e3:ea:6b:0c:87:a0:a4:ba:e2:73:f0:97:25:
a4:23:9a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:21:57 2026 by rpki-client