Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: UZzDvZKcJqVHc+2kVRNBXDXKihagobrFnktsVqhhL/c=
Subject key identifier: 95:60:B4:F4:57:15:DC:1A:5D:49:7C:3F:7E:3A:64:E4:34:EE:06:A7
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 019F90C81C076F44A7D51CA1F72F46DB32F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 0261
Signing time: Thu 23 Jul 2026 21:01:01 +0000
Manifest this update: Thu 23 Jul 2026 21:01:01 +0000
Manifest next update: Fri 24 Jul 2026 21:01:01 +0000
Files and hashes: 1: U9tquwjV-Fl1Rt7IVQP5hkEY43I.roa (hash: srgZ/d/1Mf+pXoVfocYHeRG57Srn6yyMLcULuvh4vxE=)
2: X7yocFTQF6cpDm4YRCXee2IMJAg.roa (hash: 47J3ggzuN8K15GJrL+w0gv5iDQyMBjOUoNghcomDNf4=)
3: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: VIqBPUC+2ijs3fT8yymQevhXgTKk9WCrCWgTtDN+0Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c8:1c:07:6f:44:a7:d5:1c:a1:f7:2f:46:db:32:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Jul 23 21:01:01 2026 GMT
Not After : Jul 24 21:01:01 2026 GMT
Subject: CN=9560b4f45715dc1a5d497c3f7e3a64e434ee06a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:01:ed:8c:08:52:d6:91:e9:5a:ad:55:d6:ee:
c9:77:e0:a8:8e:a9:fd:a6:43:ac:60:83:0e:05:91:
38:b2:9a:13:a3:b9:db:1e:48:c9:46:8b:c2:d4:ca:
c6:50:8b:50:0e:e2:08:38:10:cf:10:97:eb:bb:8b:
f1:32:06:4b:0d:33:40:f1:0d:ef:c7:6a:25:eb:ce:
48:d6:74:59:e2:d4:0e:64:dc:04:02:21:10:0d:94:
4e:ca:1f:d0:f7:bf:c1:9e:9e:76:3d:c3:0c:64:73:
83:cf:23:56:91:6a:5d:ae:0f:8c:ec:94:bf:c0:c9:
51:56:9e:d1:67:e8:fd:cc:55:8c:81:74:b4:15:24:
ae:58:ce:6f:1c:eb:77:6e:26:ac:cf:0e:38:69:1e:
6a:08:15:66:d3:69:80:88:bf:0f:d7:0a:b0:4f:43:
a0:26:a3:f4:b2:6a:61:bd:15:bf:5f:75:0a:3d:be:
34:2e:a8:68:a6:92:c4:99:9b:95:f0:20:d1:98:76:
b1:6b:0d:a9:0b:1e:97:2a:77:9b:89:b9:fd:ac:f6:
73:a3:34:24:9c:b8:75:02:75:ae:35:39:f4:aa:82:
9c:2a:d2:97:d9:07:8e:92:a7:ca:5a:a1:48:99:17:
92:cd:ba:a3:46:cb:4a:5a:55:75:a2:81:1c:62:ff:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:60:B4:F4:57:15:DC:1A:5D:49:7C:3F:7E:3A:64:E4:34:EE:06:A7
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:78:bc:49:06:7e:12:3a:dd:f8:8d:f5:37:da:33:c3:83:c7:
b0:4f:52:72:dc:8f:3b:e1:6f:3a:76:7d:fe:de:c1:65:ac:f4:
c7:07:a9:6b:6b:82:0f:50:d6:8a:df:50:51:20:3e:31:a1:5c:
c6:cb:74:78:16:a6:29:44:15:0a:3e:bf:5f:b2:29:e4:a9:ed:
bb:e1:58:94:05:6d:74:20:d4:a8:e1:74:93:40:37:d6:d9:bb:
7d:a1:cc:99:10:16:3f:8b:6a:02:43:80:e9:be:cf:87:fe:49:
6a:e1:47:c0:7f:49:21:ab:f5:fd:c2:eb:ee:ed:22:f5:e0:9e:
c1:eb:8f:f9:70:6b:e1:96:ac:7c:11:36:29:0a:95:e2:18:18:
cd:4e:e3:97:91:52:b4:ab:a5:36:ad:1b:83:ad:d8:c7:c7:5d:
25:f8:f6:b0:c0:a1:d2:e3:b8:87:11:38:98:9b:85:00:78:9c:
06:43:29:80:37:25:43:26:5b:3a:3a:19:3a:ad:51:09:e4:f1:
d3:80:2b:3d:a0:02:3a:3b:5a:c1:fd:6a:88:69:66:da:5a:6e:
ba:84:f7:fe:c9:fd:c4:50:b7:78:04:da:b1:de:7b:d3:3c:34:
ee:6e:d8:d9:85:ec:cc:c1:fd:91:9f:d3:96:a3:c6:5b:7f:b3:
d8:a6:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:20 2026 by rpki-client