Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: 5pZ9tr4cJMjS0Y+t8vQrBVy5plarVbCNcfk7HomiYyU=
Subject key identifier: E3:54:A9:15:5B:CB:98:75:59:80:F0:17:5E:18:CE:2A:ED:B5:27:FE
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 01A0D34A66492082EA3F517E4FC861ABF052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 0308
Signing time: Thu 24 Sep 2026 12:01:03 +0000
Manifest this update: Thu 24 Sep 2026 12:01:03 +0000
Manifest next update: Fri 25 Sep 2026 12:01:03 +0000
Files and hashes: 1: U9tquwjV-Fl1Rt7IVQP5hkEY43I.roa (hash: srgZ/d/1Mf+pXoVfocYHeRG57Srn6yyMLcULuvh4vxE=)
2: X7yocFTQF6cpDm4YRCXee2IMJAg.roa (hash: 47J3ggzuN8K15GJrL+w0gv5iDQyMBjOUoNghcomDNf4=)
3: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: 1OR9h7xwWpBVrbAPtWK68/xcivuXHNH302HEeTDVkKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:66:49:20:82:ea:3f:51:7e:4f:c8:61:ab:f0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Sep 24 12:01:03 2026 GMT
Not After : Sep 25 12:01:03 2026 GMT
Subject: CN=e354a9155bcb98755980f0175e18ce2aedb527fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fe:bd:b5:25:3a:cc:6e:96:90:d1:08:b5:fd:
5e:fd:7f:a8:d3:93:c7:62:a6:79:07:0e:81:cd:7d:
6b:4e:37:13:7e:56:a9:de:f5:d4:d1:c6:f8:f9:5e:
8e:e3:16:91:c5:4f:37:11:22:36:b4:7e:c7:2c:10:
9a:bb:15:ef:7e:44:cb:ff:99:a8:90:b8:06:14:23:
f5:36:c8:ce:64:a7:82:82:3e:9b:33:3b:82:83:b0:
e3:2b:bd:f2:fd:fd:fd:ec:b6:84:70:ed:67:2e:1e:
0c:3d:94:71:23:8f:88:1a:24:37:58:79:39:6f:58:
a6:f9:27:9c:9f:64:df:d0:24:e7:84:b0:8b:6b:af:
7e:c3:fb:da:7e:56:82:f8:7e:92:01:8d:fb:3c:6e:
b1:08:51:01:9e:e4:ea:34:48:8d:42:52:7c:6c:d2:
54:e8:5c:f3:dc:0d:b2:8a:3b:29:2f:6e:36:20:5f:
e4:c3:a4:a9:87:f9:35:8d:7c:81:ec:23:33:8c:8d:
e2:25:08:f0:5b:a8:00:cb:8f:21:84:22:94:97:6c:
16:6f:a2:27:e9:a0:3e:9e:8e:02:18:96:3b:e7:d8:
62:f6:4c:82:30:d8:e2:e9:b0:86:d9:39:39:9c:9e:
ff:3e:a3:40:9c:c8:0b:8f:69:ee:30:4b:17:28:32:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:54:A9:15:5B:CB:98:75:59:80:F0:17:5E:18:CE:2A:ED:B5:27:FE
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:0b:5c:a2:04:f7:91:9d:8a:f1:4b:3e:2b:61:ff:e3:71:10:
46:61:7e:3c:ec:d6:2b:c0:2f:ee:14:f0:c7:97:0e:be:11:a9:
16:ed:5e:12:24:d5:73:25:3c:e7:dd:c1:43:45:4f:a0:5c:20:
2a:e3:5a:4d:44:21:13:19:86:ec:23:df:04:d2:9b:a3:26:c2:
7d:ae:d1:a3:5f:fb:05:33:2f:32:46:7a:06:0b:16:e5:c0:62:
ce:77:3a:7f:3c:66:83:67:e3:86:03:13:54:c4:b1:df:28:f1:
4a:e4:59:bd:e3:d1:72:4e:e7:f9:6c:db:f3:9d:54:ee:27:39:
f7:18:9f:85:5c:99:fb:d2:cf:01:3d:d1:c3:99:7c:af:08:0c:
7c:a3:69:65:48:56:56:94:54:83:10:a7:a1:f9:91:43:df:1a:
5d:5f:80:24:11:0c:11:96:42:f5:02:f4:6a:d3:36:d6:ac:64:
94:cc:39:e0:51:7c:3a:f9:87:f1:04:97:ca:5b:59:81:b8:14:
04:16:32:0b:2e:74:9f:88:b5:00:5b:11:b6:02:9f:3c:72:9b:
a6:08:ad:40:47:b2:ec:dc:31:b8:5f:3c:56:e1:53:fb:74:5e:
6d:49:37:2b:16:72:d6:47:f7:87:b6:01:65:08:4a:3f:b4:b9:
a8:5c:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:12:03 2026 by rpki-client