Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: 9HnvFMUK4h34hF3xsJbW9gG1p4VeA6258LQ7dhDiRX0=
Subject key identifier: AB:6E:5B:08:73:09:21:26:61:67:58:F9:1D:57:E2:85:91:CA:BA:3D
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 019D2704B0BD18FA6C2C9A2345EAFA814734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 22:01:51 +0000
Manifest this update: Wed 25 Mar 2026 22:01:51 +0000
Manifest next update: Thu 26 Mar 2026 22:01:51 +0000
Files and hashes: 1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: bwjtmg1aB/DFFKEYJJgmDIII0mGErMszT2Vdl5E/9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b0:bd:18:fa:6c:2c:9a:23:45:ea:fa:81:47:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Mar 25 22:01:51 2026 GMT
Not After : Mar 26 22:01:51 2026 GMT
Subject: CN=ab6e5b0873092126616758f91d57e28591caba3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:24:2e:b4:8b:8e:12:04:d6:c3:01:a9:f5:46:
43:84:8f:44:f2:c2:45:66:cf:94:4f:f9:fe:22:31:
04:ba:01:20:ed:f2:29:c1:d3:4c:b2:91:3f:0c:50:
44:46:ed:f0:a6:67:59:c6:3b:8b:d2:b7:cd:22:ab:
37:75:cd:48:20:19:38:ba:a5:ec:e4:ef:fb:df:7e:
19:02:ae:e4:08:b7:9f:2b:c7:b7:46:33:eb:12:7a:
d4:da:b4:8a:30:5a:65:a1:54:95:2f:42:6a:5a:85:
af:66:8b:ad:44:e1:4d:ba:06:4a:72:42:2c:76:f3:
de:b1:32:be:8b:3c:b8:c5:6e:ec:91:18:14:cb:8c:
f0:8b:80:a4:b0:df:56:6f:15:8c:11:3e:9e:55:07:
d2:fe:f1:ed:3d:ca:a6:e9:25:fd:fd:f5:5c:e9:7e:
05:d5:d9:70:54:8a:82:8d:7b:7b:79:fb:e4:bc:8f:
29:85:16:48:b6:43:2f:58:92:81:b1:5b:75:99:9a:
c6:6f:35:d7:79:c3:f5:45:f9:dc:51:ec:e0:33:41:
55:cb:94:d9:d5:30:06:2a:38:27:3b:9e:83:ed:21:
50:17:5a:d2:29:2e:e1:62:35:0e:64:b7:99:82:ad:
a1:55:5b:7b:96:a5:64:75:d9:62:09:ea:31:a8:24:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6E:5B:08:73:09:21:26:61:67:58:F9:1D:57:E2:85:91:CA:BA:3D
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:10:8e:cc:de:d4:b6:65:eb:96:f2:85:b5:a7:13:39:03:8f:
cc:b0:29:e3:29:99:e0:25:db:9f:84:72:0d:4b:03:fc:29:cd:
8f:cb:2d:c6:5d:fa:db:e5:5e:e9:e8:2c:22:4e:9e:ab:72:6c:
52:4c:35:34:04:f2:0a:36:b5:81:cd:2a:df:39:2d:fe:10:7f:
63:86:42:63:7e:62:27:02:1e:d0:78:43:9a:52:91:e1:ed:0a:
aa:58:ba:b2:0e:f0:70:26:e6:83:9a:41:5d:77:00:e4:0b:63:
39:fd:21:ae:16:09:07:cd:ec:34:4e:69:02:e3:27:70:f1:a9:
a7:b7:fd:93:65:dc:35:92:4a:f8:df:8b:e8:7b:45:17:04:f8:
ec:7d:7a:dd:4c:d8:c1:3d:c3:b8:da:4f:34:3a:90:05:ca:5c:
66:cd:4b:e6:5f:c9:3a:7e:a1:9d:bd:6a:30:b6:6b:b1:46:a3:
df:1a:f0:5d:d1:ca:78:28:98:3c:cb:c0:26:66:f3:ec:76:99:
c2:c2:c8:62:26:e2:20:91:da:24:0c:12:91:f1:ab:84:e8:4e:
ce:da:ac:cc:73:af:b0:78:62:57:12:05:f8:df:65:c1:6b:ac:
9d:fd:e9:d0:65:e0:2a:20:40:0c:c4:a9:e0:5a:04:d9:05:fb:
23:7b:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:20 2026 by rpki-client