Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
File: h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft (raw, json)
Hash identifier: 3+SKDP4Wz2ozl40H3OjF3ipk3Zdexw3Hj2cv6tbFKx8=
Subject key identifier: D6:46:FE:7E:96:28:E7:8C:36:94:EF:BD:E7:6E:0B:EB:A1:F8:94:59
Authority key identifier: 87:EB:B7:59:6D:95:83:9A:49:26:67:3B:CD:7B:FF:D3:3B:F8:53:BD
Certificate issuer: /CN=87ebb7596d95839a4926673bcd7bffd33bf853bd
Certificate serial: 01A0FF10EF22EB36A27795339B4B62E0F518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
Manifest number: 01B6
Signing time: Sat 03 Oct 2026 00:01:34 +0000
Manifest this update: Sat 03 Oct 2026 00:01:34 +0000
Manifest next update: Sun 04 Oct 2026 00:01:34 +0000
Files and hashes: 1: 4VnSoaJFq21OFcZvDPsAEryTDSk.roa (hash: CEZUEzkTNlI42r5UTq7wcvBj5hp5tyvou0Tezlvu5lg=)
2: h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl (hash: jPax4SIxpcpflPVTP/laTdSZYA3eJKc+W3vLL8ZyupM=)
3: zFKSffrPsjxLp1Rn4HVvoFmQLKc.roa (hash: XkXnvMZ9f35IfpEaF5/d3kcQ6c6OZwO+xjVlqj6fwEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:10:ef:22:eb:36:a2:77:95:33:9b:4b:62:e0:f5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ebb7596d95839a4926673bcd7bffd33bf853bd
Validity
Not Before: Oct 3 00:01:34 2026 GMT
Not After : Oct 4 00:01:34 2026 GMT
Subject: CN=d646fe7e9628e78c3694efbde76e0beba1f89459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:ac:cd:08:69:5d:72:f7:07:7f:e4:aa:e5:
cb:5a:0a:7b:d6:2f:f4:18:6b:f1:86:fa:42:99:4b:
ac:57:38:c3:37:c5:ea:f8:40:db:ac:21:c7:da:ee:
79:93:f8:11:c4:c3:3e:c4:4f:23:b4:70:b3:e6:eb:
32:5a:2f:b1:e2:2a:db:a4:c0:52:15:42:7b:7e:fd:
01:19:06:68:42:1e:e2:1d:87:b9:61:b7:88:c3:94:
bb:96:c5:d0:87:3d:42:ee:ac:23:7a:11:48:a3:45:
f7:ce:91:31:c1:75:e3:fc:62:35:e7:b4:ea:05:f3:
06:c1:25:20:ac:db:c1:9b:e8:24:9a:f2:d5:14:cf:
b5:25:32:d2:29:48:ff:5d:58:44:4c:29:ff:bd:d4:
e2:cc:85:9a:eb:93:e7:59:2d:f5:6e:0c:21:64:49:
e8:86:68:77:a3:6c:01:cd:0c:bd:e9:75:26:36:df:
8d:3f:9c:eb:7f:25:95:c0:0c:9c:99:7b:87:1d:89:
bf:ab:7c:3a:92:c3:8f:ee:cf:7e:e3:7b:f7:2a:c0:
32:4d:9e:de:d2:b1:f2:04:7c:95:5a:ad:0e:79:7a:
d6:b8:2d:29:df:cd:f6:41:fb:d8:db:b8:43:f2:62:
80:76:c6:a9:cc:a1:6e:28:68:33:fd:11:48:83:72:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:46:FE:7E:96:28:E7:8C:36:94:EF:BD:E7:6E:0B:EB:A1:F8:94:59
X509v3 Authority Key Identifier:
keyid:87:EB:B7:59:6D:95:83:9A:49:26:67:3B:CD:7B:FF:D3:3B:F8:53:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:52:d6:bb:0c:99:d4:87:39:be:4f:a8:9b:1d:0e:16:5b:e8:
01:b5:57:8e:59:e8:83:c1:48:06:dc:ba:99:61:6d:35:1c:9d:
73:cf:70:67:8e:84:c3:f2:59:f3:c9:f6:80:cd:e9:26:a7:36:
30:24:ba:73:e9:27:e9:36:17:28:85:76:8c:54:70:f6:4e:93:
1b:34:20:0b:31:1d:ee:6a:36:c4:84:af:e4:e5:a6:47:4d:f6:
2e:9e:66:6d:21:c5:97:80:77:bc:71:6f:a4:6d:4d:a9:76:62:
c9:ec:c2:46:cc:6f:64:ca:33:05:ac:75:96:6a:03:88:2d:14:
09:47:e4:8d:94:e7:b5:ce:8d:7e:ef:9c:f6:44:30:d1:7c:68:
da:c7:b4:ed:90:03:e0:63:48:f8:8c:90:01:37:e0:09:41:e0:
c8:b6:d4:aa:c2:5a:4c:ae:19:4d:69:f1:dd:7f:73:89:74:39:
b6:6d:84:06:a0:49:a8:6f:81:5f:a0:a7:a5:6b:41:f0:57:b2:
1f:02:2d:21:bf:c8:4e:fe:4d:44:2c:69:7c:e7:e7:4b:fb:6c:
26:b0:27:35:be:f0:42:04:5a:23:3b:f8:c3:bd:be:8a:09:49:
8f:b7:79:5c:12:4d:bf:7b:ed:83:c5:8c:de:13:c8:4e:54:5f:
7a:ea:79:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:33:19 2026 by rpki-client