Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: zbs+xCWMPW1mH6p4m6vjDkAhuK6FjoZOYj4p8Hdy8YQ=
Subject key identifier: B1:33:06:D6:28:8D:86:F7:C2:85:A4:10:B3:D2:76:37:02:F8:7B:03
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 019E1DC7A2DE4241FE136261A74DD09E2354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 01A0
Signing time: Tue 12 May 2026 20:01:22 +0000
Manifest this update: Tue 12 May 2026 20:01:22 +0000
Manifest next update: Wed 13 May 2026 20:01:22 +0000
Files and hashes: 1: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: S0/kIKMXgHmxfWC24QdFgcweUqWyx/KgEv0QRZKVKMU=)
2: pii4EjiWYU4Zm1fPwrFZx1lHAcc.roa (hash: uCsxcjM67iyaXfmTKhSaCnWCgdV8f42if+uMcnOjC+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:a2:de:42:41:fe:13:62:61:a7:4d:d0:9e:23:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: May 12 20:01:22 2026 GMT
Not After : May 13 20:01:22 2026 GMT
Subject: CN=b13306d6288d86f7c285a410b3d2763702f87b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7f:a3:57:f4:25:fb:8d:34:3d:1d:21:7c:90:
83:e8:8a:53:f0:78:ee:0a:fb:77:02:8a:30:6e:00:
5f:0c:71:d9:10:e0:d8:04:9d:6e:68:05:2a:e5:e2:
72:3d:2a:1e:ad:b6:c4:c4:3b:98:d6:32:54:69:67:
4a:1c:75:55:c8:b3:8b:22:b6:10:18:b0:4e:19:62:
27:d8:53:ca:be:7e:47:f3:1a:a1:b7:4a:59:f8:6d:
cb:61:95:d1:36:fb:b5:4c:09:a1:11:27:6e:66:4d:
0d:8c:a3:3a:8c:38:a5:6d:69:e8:5b:c2:4b:9e:ec:
5c:35:e8:92:cb:fe:d2:93:3c:c7:5e:63:c1:93:84:
85:c8:14:7d:af:4f:6a:09:da:c9:e2:41:43:5a:b8:
4c:9e:98:a1:4b:f5:cb:88:ea:d6:ba:3c:1a:4e:88:
07:b1:19:6c:0a:8b:3b:0a:18:91:af:ca:ae:28:bd:
e1:e5:30:56:7b:59:b0:8d:44:fd:57:f8:b8:e4:98:
35:9a:f7:01:72:96:c8:53:19:0d:3a:d5:43:ac:07:
ca:49:05:ca:e4:e4:69:47:a7:e0:3f:e7:a4:94:80:
c1:b9:18:d7:bc:d1:bc:87:77:07:38:84:a9:0f:73:
3e:f1:9f:52:d6:0c:70:8f:2a:28:52:14:e3:de:6b:
6b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:33:06:D6:28:8D:86:F7:C2:85:A4:10:B3:D2:76:37:02:F8:7B:03
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:50:7f:34:26:eb:5c:b5:23:18:2f:b6:e8:05:a3:79:d4:e9:
19:55:19:6e:a9:00:4f:2a:63:6d:82:03:a2:db:88:33:e2:a1:
67:1d:de:ae:86:98:8d:34:05:65:e7:33:09:00:ac:26:b9:95:
2c:c2:e4:82:a5:5e:8f:56:79:da:cf:34:86:4d:bd:c5:3b:7e:
b7:d5:8e:4a:16:f0:66:d1:e1:dd:f9:e6:70:2c:a6:9e:3e:35:
c4:7e:d1:16:8b:7b:d1:8c:b9:80:38:dd:5f:49:85:f3:d1:89:
5a:af:82:57:19:b2:de:14:a9:24:6d:15:52:5f:dd:1a:c3:d3:
d1:e5:9f:d6:19:b2:89:a7:ad:e0:8a:d7:d4:94:4b:3e:32:a6:
38:88:8f:83:1d:bb:e4:07:98:0f:9a:7f:f6:fc:dc:e7:2b:7d:
7a:dc:8a:60:73:a0:29:63:23:61:3c:cf:8b:0d:82:78:67:10:
19:75:9d:1f:0f:31:ea:fd:91:6a:78:2d:40:71:4c:b4:6f:66:
4a:27:5a:8b:18:b3:8a:92:77:f0:04:ed:d9:1a:b0:a9:22:a8:
96:3d:47:6c:1d:50:97:ac:77:b9:fb:54:36:48:90:36:6c:2d:
cc:53:64:a8:a9:17:7f:dc:b6:2f:d5:be:b6:41:6d:af:9b:b9:
34:70:27:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:21 2026 by rpki-client