Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
File: h8SPxcLrLHSiQqR70yFXfo8eanE.mft (raw, json)
Hash identifier: Vi0A3voJGMjD2I+K6GFqpPu3Su1isplOsbQTLs2AShw=
Subject key identifier: AC:06:80:9D:0A:E3:D8:F0:E7:6F:2A:74:F6:F7:99:2B:25:7F:74:A9
Authority key identifier: 87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
Certificate issuer: /CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Certificate serial: 019D28841F55AF00B996223E57C1FAB11C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
Manifest number: 0121
Signing time: Thu 26 Mar 2026 05:00:40 +0000
Manifest this update: Thu 26 Mar 2026 05:00:40 +0000
Manifest next update: Fri 27 Mar 2026 05:00:40 +0000
Files and hashes: 1: h8SPxcLrLHSiQqR70yFXfo8eanE.crl (hash: Jt2E85GOJSihsU2TAh7M3iQmbeoNbFUtte+l1wK356U=)
2: pii4EjiWYU4Zm1fPwrFZx1lHAcc.roa (hash: uCsxcjM67iyaXfmTKhSaCnWCgdV8f42if+uMcnOjC+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1f:55:af:00:b9:96:22:3e:57:c1:fa:b1:1c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c48fc5c2eb2c74a242a47bd321577e8f1e6a71
Validity
Not Before: Mar 26 05:00:40 2026 GMT
Not After : Mar 27 05:00:40 2026 GMT
Subject: CN=ac06809d0ae3d8f0e76f2a74f6f7992b257f74a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:c5:b6:f6:bb:f3:38:e4:88:8d:4a:58:64:
7c:32:47:90:c9:0f:69:b7:38:d3:3d:fc:67:38:a0:
7f:66:e9:52:05:ef:a5:0d:1e:4b:7e:67:ef:32:51:
9c:82:f1:37:e7:94:60:fc:8d:55:fa:6f:76:25:3e:
4c:e5:11:ed:60:c6:57:59:6d:ec:63:08:98:d6:d8:
31:47:0c:72:81:58:8d:5c:5c:28:9d:2e:07:59:47:
8f:bb:1d:a5:3c:ee:52:37:61:4b:2d:35:e6:66:bc:
4f:00:bd:c2:5d:ea:36:a9:17:f1:72:e2:5e:af:20:
ad:1f:8c:89:5b:d8:a0:71:1c:7a:b0:22:38:5f:8a:
b9:ca:b5:10:0d:12:1a:ca:e3:9b:fb:a5:f5:66:42:
49:ea:11:c8:37:29:6b:bd:a7:6b:a4:6c:33:73:4b:
fc:79:0b:df:8b:bd:ad:9c:64:ff:f8:30:f0:57:74:
84:5d:c2:cf:8e:41:09:07:cb:5f:db:91:25:a5:4d:
f4:43:da:f9:aa:11:32:c6:ad:37:17:71:77:10:e9:
03:e1:ed:ef:ae:66:06:4e:64:18:0d:03:5a:9a:02:
6c:cf:78:d3:e8:95:d4:e1:c5:68:8b:d0:f3:c3:43:
f7:e0:a1:40:73:5a:b8:66:29:df:b4:58:64:4b:5e:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:06:80:9D:0A:E3:D8:F0:E7:6F:2A:74:F6:F7:99:2B:25:7F:74:A9
X509v3 Authority Key Identifier:
keyid:87:C4:8F:C5:C2:EB:2C:74:A2:42:A4:7B:D3:21:57:7E:8F:1E:6A:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8SPxcLrLHSiQqR70yFXfo8eanE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1d2359-2c4a-41b6-a1b6-55e4c92a5d50/1/h8SPxcLrLHSiQqR70yFXfo8eanE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:03:3a:b3:58:57:3b:6f:34:76:2c:df:56:40:54:1d:ee:
cd:0f:61:2a:bd:f8:0b:a3:98:e7:51:47:7e:57:9b:df:2f:15:
27:4a:7d:d6:fc:6b:56:29:54:6d:85:6f:fb:c5:35:1f:26:c3:
e2:93:65:cb:df:7d:94:d4:77:3f:17:c5:b5:26:cc:0e:16:ce:
a3:31:e2:dc:e6:a8:dd:55:7a:9d:2d:fb:5b:2f:74:9b:64:10:
57:d2:5d:3b:4e:0a:6e:c5:b5:79:89:ce:92:dc:07:db:1a:99:
7e:dc:32:84:f8:b6:39:ab:16:42:6c:20:be:19:75:a9:69:80:
ed:4f:a2:79:ad:97:bb:81:14:80:83:97:8e:a7:31:54:67:1b:
77:33:d8:c4:e1:f4:08:00:2b:42:f1:8f:6e:08:e9:83:8a:8f:
72:7e:37:b2:de:be:2f:1c:95:d8:71:37:7c:ac:df:45:78:57:
0d:c6:12:48:6e:05:4c:3d:1b:e1:78:05:fe:e2:99:cc:df:fb:
ef:1f:f7:19:14:d5:e9:00:6a:e7:77:5c:2a:d3:7e:b5:bb:fc:
ae:c3:92:00:81:57:7c:dc:a4:44:dc:63:b2:13:3c:c8:17:52:
ef:fe:68:a3:a9:6a:90:d5:7d:47:d5:29:66:31:62:7c:6b:41:
66:66:69:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:27 2026 by rpki-client