Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: 3ewsNB/lwx8Dvnbrl0QB3IKxhof/18ztrolGWtGp85Q=
Subject key identifier: 5D:EC:DD:58:18:B6:0E:DE:CB:7F:F0:5F:C6:40:40:64:82:1A:39:74
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 019D29608D9A4D38FCF73B35AA97A9124823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 07B0
Signing time: Thu 26 Mar 2026 09:01:26 +0000
Manifest this update: Thu 26 Mar 2026 09:01:26 +0000
Manifest next update: Fri 27 Mar 2026 09:01:26 +0000
Files and hashes: 1: FdbE8gLBJPaXpYaXJBSvvCFsnb4.roa (hash: dTLvAdXPyt6Wu2rqAm637RJ0hAUBe/Pvjzn8bfwfdaw=)
2: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: hRqe0E/hwxlLM2j4i3UqvpL5dT2lUDW1p+wxVr86Aa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:8d:9a:4d:38:fc:f7:3b:35:aa:97:a9:12:48:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Mar 26 09:01:26 2026 GMT
Not After : Mar 27 09:01:26 2026 GMT
Subject: CN=5decdd5818b60edecb7ff05fc6404064821a3974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:e1:ae:3e:a1:ef:f0:da:13:19:8f:c2:15:
2d:18:c5:5c:e7:6d:d9:e6:ae:b1:66:1d:b9:2c:9c:
4a:42:08:85:09:b3:52:b1:6b:03:c8:05:e3:93:88:
e6:bc:19:73:3c:44:78:fb:06:09:b8:2c:ef:e3:aa:
5f:79:86:ab:b7:e1:fe:52:28:23:b7:54:2b:9a:c2:
94:52:cc:ae:38:a3:0b:0a:bf:54:2d:5f:46:ce:c3:
b3:b1:02:f9:58:81:c5:c6:78:6f:32:b3:aa:aa:1f:
0d:e3:5d:e3:b4:e4:20:42:34:b4:63:d2:4e:4f:22:
17:c1:e6:b0:02:db:bd:70:64:60:40:5e:5a:71:c9:
0b:18:ed:e5:d5:6c:46:e6:15:54:b1:b9:5d:54:f0:
18:7b:ce:c4:69:93:a0:f6:51:a5:66:6c:ef:6a:27:
05:3d:18:26:a4:a3:87:be:86:4d:22:1c:a9:67:0d:
23:8b:2a:ff:11:7f:1e:24:4d:bd:b2:51:36:64:b0:
7a:dd:94:b4:a1:80:c9:b4:0a:b1:00:44:1f:a3:82:
51:fe:6c:e3:40:7d:2c:d9:38:49:00:4b:1a:96:e2:
42:6f:7d:7a:49:71:04:48:d6:99:44:e8:47:6d:ad:
25:fd:d2:f3:18:a4:39:de:b0:fd:c9:3d:a8:4f:60:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EC:DD:58:18:B6:0E:DE:CB:7F:F0:5F:C6:40:40:64:82:1A:39:74
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:98:d1:e9:ca:6f:68:eb:e2:6a:f7:7a:90:c7:8a:1c:c6:2d:
3d:98:6a:30:9a:9f:ba:71:03:8e:a2:a1:4e:7f:ff:4f:96:e0:
d4:bf:87:f8:28:d2:1b:9c:49:1c:13:0b:19:0f:90:3c:6c:2f:
1f:96:c9:66:e6:e7:ee:6d:38:f9:0a:01:ca:53:c5:ee:2c:9d:
c2:dc:6d:50:fe:19:65:c4:6a:6b:42:c0:e6:2b:fe:90:8c:a0:
ce:e1:4b:6b:dc:6d:c1:db:a6:f4:6c:2d:c3:bf:27:28:78:07:
87:4a:fc:99:57:b9:01:1a:f9:63:8a:e0:1d:59:42:e5:df:cc:
b1:ad:1f:d0:84:aa:05:ad:90:6a:71:6d:59:c5:17:64:0f:0b:
85:6e:a5:e6:ff:4f:52:9a:18:44:3d:15:b6:af:0d:19:f2:54:
fc:03:69:9b:1c:ad:c6:d2:21:9e:b3:e6:9b:0d:4d:30:e1:b0:
a1:3e:ad:67:62:bc:76:8e:da:ad:73:5f:c2:9c:7c:70:98:fd:
56:9f:2b:72:b1:25:10:2c:9a:cb:cd:95:e5:a3:7b:0d:4e:a2:
ce:e6:f4:07:d8:fc:a7:d9:da:51:8e:e9:63:ca:ae:30:2d:03:
91:fc:c9:e7:f9:1a:dc:ea:75:35:2c:51:11:f4:6d:41:b3:48:
13:02:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:12 2026 by rpki-client