Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: fgzCmB5e/9BCpCtZguTMC+UjGiJ7lfr2nXnKhaPQ7dM=
Subject key identifier: 08:F4:63:63:C7:35:15:C1:56:40:C8:F5:F0:63:FD:3A:D3:F6:B0:A8
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 01A0D15BCDE54A8576BBEB9ADE265C59DADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 02EF
Signing time: Thu 24 Sep 2026 03:00:49 +0000
Manifest this update: Thu 24 Sep 2026 03:00:49 +0000
Manifest next update: Fri 25 Sep 2026 03:00:49 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: Q58w4KbdeolaMruSzP3ke6MVbpR2uutSLkJpcvp3eT4=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:cd:e5:4a:85:76:bb:eb:9a:de:26:5c:59:da:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Sep 24 03:00:49 2026 GMT
Not After : Sep 25 03:00:49 2026 GMT
Subject: CN=08f46363c73515c15640c8f5f063fd3ad3f6b0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:87:81:22:b9:ab:3f:b1:b5:0d:bb:cb:bf:
14:ec:eb:d6:89:c7:80:ab:83:48:96:8b:ae:68:94:
ec:11:30:61:b0:87:97:6e:0d:52:36:5f:db:88:50:
8c:bb:53:fd:0b:91:25:27:ea:79:7d:31:40:9f:5f:
14:58:7e:65:b6:67:d3:65:93:1c:df:46:65:96:cb:
74:f2:dc:e3:7f:fa:ca:ba:21:49:62:28:fc:93:62:
18:ad:59:c6:42:94:e9:49:7e:f8:14:39:e1:84:d4:
52:38:dc:32:eb:a0:99:67:84:bb:02:a7:02:87:c7:
4a:12:40:3f:1a:61:47:44:2d:35:63:2e:79:9e:bc:
9b:f2:38:9d:d0:43:fe:92:78:08:86:d6:50:4d:b9:
e9:4c:e8:dd:fc:f8:0c:6e:a8:96:5c:c0:97:76:30:
9f:18:d3:c5:6c:31:ed:39:df:9b:88:d2:36:d8:59:
80:50:3e:af:55:3d:70:ed:d0:e5:c5:34:b8:01:7b:
72:56:34:f4:4a:1f:55:58:7f:ca:b5:af:d3:66:64:
ea:88:f8:df:56:94:7a:30:58:f1:8b:67:48:1d:c6:
a1:46:5a:be:db:4b:34:fa:31:82:e3:a6:3e:39:86:
11:5a:cf:45:18:91:12:bf:39:29:e6:98:63:3b:10:
cc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:63:63:C7:35:15:C1:56:40:C8:F5:F0:63:FD:3A:D3:F6:B0:A8
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7f:bb:7d:22:db:b1:58:b5:63:ad:4f:c1:b9:1a:23:ad:50:
9e:44:91:d3:f0:3b:19:16:ff:c7:25:5e:87:dc:c6:dc:42:ca:
73:83:7e:3d:ba:cd:cd:a7:73:55:f1:b0:cc:9a:2f:4b:3d:23:
f3:ee:fd:11:ce:b2:55:09:3f:bb:60:5b:8b:86:08:6d:c4:20:
29:fd:1f:8b:9b:bd:aa:17:c9:c1:06:77:d1:62:ab:a6:5e:77:
64:3b:db:6e:91:a8:81:7a:ca:92:de:10:2c:33:1e:08:85:8d:
1d:26:01:39:f5:c4:9b:a3:1a:06:2a:89:5c:12:43:f7:92:66:
fa:73:e5:ea:d2:ce:dc:e6:1f:ae:55:a8:b4:c1:3c:46:bd:34:
f3:bf:36:f4:fa:5d:e6:74:e4:e0:63:04:ba:e3:73:3e:cb:42:
32:d4:c1:30:7b:b1:99:14:7b:93:59:c9:07:de:3f:a0:0c:aa:
ab:f7:4c:5e:e6:8d:81:ae:a6:f4:fd:cf:7c:a1:3d:40:8f:1b:
2e:39:8e:fc:c4:e5:1f:26:71:1c:8c:b9:b4:6d:87:0d:fd:ed:
ca:d6:2d:55:68:1f:94:a7:51:f4:2e:e3:57:2f:45:8f:42:73:
41:7c:76:0d:46:91:4d:a2:dd:54:a8:8e:55:e8:51:4e:0a:a6:
07:b8:8c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:21:10 2026 by rpki-client