Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: KJD4BrxiHhu+xkpeRMHKr5b2WO1SZNoaFVFVrBo/c44=
Subject key identifier: EF:E4:FC:AE:30:9F:36:8F:18:FE:E2:13:13:59:36:81:0A:CC:18:2A
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 01A1DFBA0A59E810A9631E19C998040CCEBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 0393
Signing time: Sun 15 Nov 2026 15:01:13 +0000
Manifest this update: Sun 15 Nov 2026 15:01:13 +0000
Manifest next update: Mon 16 Nov 2026 15:01:13 +0000
Files and hashes: 1: U9tquwjV-Fl1Rt7IVQP5hkEY43I.roa (hash: srgZ/d/1Mf+pXoVfocYHeRG57Srn6yyMLcULuvh4vxE=)
2: X7yocFTQF6cpDm4YRCXee2IMJAg.roa (hash: 47J3ggzuN8K15GJrL+w0gv5iDQyMBjOUoNghcomDNf4=)
3: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: xMUvu/btp9ICBFRknQT5gZSXGX2mLhgD02VARSRe4GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:0a:59:e8:10:a9:63:1e:19:c9:98:04:0c:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Nov 15 15:01:13 2026 GMT
Not After : Nov 16 15:01:13 2026 GMT
Subject: CN=efe4fcae309f368f18fee213135936810acc182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a8:ca:90:74:46:28:5d:d8:89:0d:6b:37:76:
e0:27:b2:53:7d:0f:fa:22:09:70:bd:05:00:9e:00:
4e:38:63:f1:f0:cd:f7:9b:15:be:7e:fd:5e:fd:8b:
32:c5:21:97:36:49:2d:68:4b:21:d7:04:f4:2d:f8:
08:3c:46:98:7f:61:2f:28:1d:59:17:f6:96:08:7d:
64:6f:91:82:33:8c:79:72:51:ce:3d:2f:16:60:73:
71:97:96:19:8a:06:ac:9c:0a:a4:18:92:b6:e5:9a:
6f:a5:cb:cb:07:20:36:47:37:08:a0:75:13:d2:39:
8e:a6:65:7e:68:4f:ee:ed:3e:bb:34:96:41:2d:4c:
c8:18:0b:a2:30:c5:49:cb:91:a6:10:43:2d:2f:f2:
ad:d2:4f:d2:d8:58:4c:43:a9:f1:44:ea:5f:f7:f8:
06:40:fc:a9:02:97:04:44:0f:3e:71:28:ee:3e:4f:
0f:e7:f2:12:31:d4:8c:c3:06:78:9f:e1:c4:b8:1c:
87:94:24:af:e9:22:28:6f:fc:e3:6f:d5:02:e2:8a:
1b:f7:d8:ae:df:5a:25:3e:b6:67:4b:a1:d7:ef:cc:
d4:33:43:22:2c:64:83:4d:fd:dc:eb:83:59:f6:25:
fa:18:98:f2:6b:81:81:bb:30:7c:88:04:3f:ed:a4:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E4:FC:AE:30:9F:36:8F:18:FE:E2:13:13:59:36:81:0A:CC:18:2A
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6a:47:1a:da:99:98:31:1c:64:4a:f6:32:4e:3d:bd:ea:ff:
01:51:fd:2c:4f:cf:31:2e:0d:40:a9:05:d0:86:7a:7d:ca:85:
76:d2:e0:b0:e8:1f:78:38:3d:2b:a3:95:fb:3d:dd:fe:d5:90:
bb:9f:e2:19:c4:71:0c:c3:3e:4a:a4:a8:e1:09:5c:d5:49:77:
cc:33:9b:53:79:36:17:ce:3f:4a:46:e7:81:f2:13:3a:55:f7:
ca:23:9a:af:e8:dd:e0:4d:e2:f1:8a:e4:4d:d6:e3:22:b9:5c:
5a:03:a9:86:d9:a5:e7:d1:16:31:54:e4:e6:75:c1:ad:44:e9:
b8:ca:1e:a0:3f:ec:15:47:c9:de:f5:ed:ea:f5:44:17:0c:c4:
6a:fa:7b:c2:70:43:52:4d:8f:c8:0b:6a:19:d3:7c:72:41:41:
f2:dc:21:de:50:f7:5c:97:40:bf:b3:9f:44:e4:3f:8f:31:62:
4a:ee:e8:ab:bc:ec:09:cd:9b:43:3e:ac:f6:9d:6b:0c:60:ec:
9b:f4:11:7e:68:77:bb:4b:6c:73:3d:4a:77:61:0e:65:3f:ac:
f7:ca:98:fc:e5:57:8d:e2:7a:c6:22:d5:4e:0a:14:a7:13:a2:
83:85:e5:91:62:ce:a2:77:e4:3b:c2:14:5b:74:be:6c:55:f9:
ff:a0:66:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:36:12 2026 by rpki-client