Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier: 16opStM2GkpElha+JyhKXByebpVv/9+VPSaVvMXqUlk=
Subject key identifier: DF:36:F8:E2:A5:FF:D0:98:4E:35:F0:D5:9C:47:6D:3C:2E:11:52:A9
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 019D27E0009ED9E6501C504A15F00A5BAB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number: 0C0F
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: 3I57kWj-MwOuWGgEJOOA7NVOnaw.roa (hash: u4MWGRCWmsfLRNP506Vpdbs2aaAzu9zhtPD+IDIYvpU=)
2: CnF9cjlgaGUvfor-A11xEctTpak.roa (hash: lSwL0usE/Gb/GkCss8GSY6ht7fo/KB8MqQdEL3prjBY=)
3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: 5FdE9tkJDCUHXqHwhI+3YP0ke2wqtHS+eUO87syWhYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:00:9e:d9:e6:50:1c:50:4a:15:f0:0a:5b:ab:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=df36f8e2a5ffd0984e35f0d59c476d3c2e1152a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:d8:d4:d0:b9:29:64:98:10:5e:94:eb:6b:
7d:ec:11:27:f4:9b:ee:ed:39:ca:e1:8c:d2:9b:87:
fb:bb:e4:b6:5d:7e:0f:00:10:17:bf:bc:b6:65:a8:
d9:32:e0:cb:dd:9b:ab:2a:be:e7:c9:8c:5b:26:e9:
8b:85:91:3c:c0:86:12:e7:ab:d5:9e:ce:02:1b:1c:
5d:c7:f0:8a:8a:97:78:14:64:ee:ea:e8:29:55:01:
89:02:83:b3:f0:24:79:52:94:74:23:39:09:bc:aa:
a2:9b:81:d7:8f:9b:89:75:a4:76:46:e5:17:f4:b5:
51:05:1b:fe:b1:13:2d:60:e9:bd:3e:be:82:3b:74:
7f:dc:d9:9f:a8:15:57:90:3d:16:03:ef:b2:e0:ee:
a0:3e:a3:99:eb:0b:47:93:6e:7f:45:63:71:8a:ad:
1f:24:d5:fc:cc:4b:e9:10:88:d8:2e:dc:31:1a:ef:
8b:57:8f:2f:76:8d:9d:21:29:49:2c:62:db:3a:a9:
a8:35:d5:77:84:8d:42:71:07:d4:7d:33:68:f7:fd:
ed:f3:d3:25:95:20:8e:1e:97:11:5f:1f:1f:bd:c0:
b6:ad:3a:f6:71:ff:2c:21:ad:8e:8c:0e:5c:a4:01:
c1:9b:b6:5f:1f:f6:be:3e:7e:5d:83:a3:90:3f:cd:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:F8:E2:A5:FF:D0:98:4E:35:F0:D5:9C:47:6D:3C:2E:11:52:A9
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a1:61:10:fc:f2:8b:54:58:e8:ca:50:68:ed:6a:2f:c8:69:
c2:97:75:da:25:8b:b1:69:4a:ee:50:d2:a8:f0:5d:1a:b8:5c:
ef:5e:2c:f6:1d:9c:82:8b:0d:47:24:98:2a:f0:72:f6:1a:17:
02:3f:ff:94:ba:da:a3:2a:64:cb:01:84:8d:74:27:64:c3:5e:
54:b1:cf:7f:73:03:28:03:e7:a8:6e:3c:d2:0a:30:be:ee:66:
4d:70:e0:39:ae:3f:18:30:db:2c:3f:fd:5d:6b:9a:25:7d:a4:
9f:97:82:72:34:68:07:c1:af:cc:03:fc:f5:fa:bd:d2:87:06:
42:35:15:18:f7:c9:fd:ca:a3:6d:02:04:64:47:10:22:e3:a8:
e2:48:46:a5:5e:1f:f0:06:e2:2a:d3:af:e1:e0:ee:48:4e:71:
27:af:c3:64:5f:33:fd:b3:da:39:6c:1c:00:a8:e3:15:70:5d:
4e:dd:54:a5:17:cc:50:1f:16:d1:80:d7:e8:0b:ab:2a:7a:aa:
e5:1f:94:8f:f4:ef:96:4f:f9:a7:90:15:45:28:af:85:25:da:
39:23:d4:5e:bc:fc:91:c0:5f:f5:82:94:12:a8:34:2b:2b:1e:
84:0a:48:c9:ff:bd:7a:11:04:cd:39:4c:f2:f4:25:e5:c2:12:
d9:6c:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:11 2026 by rpki-client