Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: MSsMAy/insmeYJSYxUnd+/vdnEQXDBIniLzsqylCB1Y=
Subject key identifier: 1A:CF:74:43:C3:8A:AC:63:86:0C:AE:6A:92:51:F8:65:E5:DF:A2:EF
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 019E1E35F51F0EBB75A9A718A6538C54A229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 22:01:52 +0000
Manifest this update: Tue 12 May 2026 22:01:52 +0000
Manifest next update: Wed 13 May 2026 22:01:52 +0000
Files and hashes: 1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: QScT2Y1t8+OU2jkHeRmdlqSttfm+4iqNbXyKnCzwnd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:f5:1f:0e:bb:75:a9:a7:18:a6:53:8c:54:a2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: May 12 22:01:52 2026 GMT
Not After : May 13 22:01:52 2026 GMT
Subject: CN=1acf7443c38aac63860cae6a9251f865e5dfa2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ee:22:f0:69:58:4d:68:6f:15:44:5d:f7:0a:
55:3c:e2:a5:93:c0:ae:97:84:9e:a7:f6:fd:f0:ef:
46:39:d5:00:e1:4c:c3:72:88:39:89:f5:0a:28:45:
bd:f9:c8:89:68:9d:9b:11:35:d1:fc:72:09:23:97:
f1:83:c8:5a:18:57:f9:91:6f:8f:09:18:44:35:77:
6d:85:93:22:bf:2c:c1:d9:3f:4d:6b:8d:80:9f:5d:
02:e0:f5:ed:cb:6e:de:75:3c:85:41:b9:aa:fc:8d:
b1:7d:b5:e1:1d:27:2a:59:38:a2:45:29:ea:84:da:
7a:69:cd:b9:7a:27:d4:73:1f:c8:e2:9a:f9:99:f8:
66:66:c5:e9:ce:ba:02:04:65:6f:47:77:85:2d:ec:
c8:aa:ca:5b:ef:6c:ad:72:51:f0:c3:4f:c2:a4:aa:
23:cd:ea:2c:14:8a:76:b1:a9:6d:59:80:47:91:64:
7b:8a:4e:1a:47:99:46:ab:8a:2d:01:ef:db:22:b8:
78:94:b1:e9:e0:a6:4c:fd:78:d9:35:b7:37:a8:ce:
c7:63:6e:7a:d1:24:c5:a7:4e:5a:81:a9:af:b9:28:
50:92:da:7a:71:07:99:89:83:a9:9a:ba:3b:ce:28:
3e:3d:a3:07:52:48:27:72:49:59:9a:db:d8:d3:9d:
ef:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:74:43:C3:8A:AC:63:86:0C:AE:6A:92:51:F8:65:E5:DF:A2:EF
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c3:c4:fb:52:0c:e1:16:14:b5:a7:5a:65:fc:6f:58:05:6a:
77:69:79:a9:a6:03:35:27:d0:14:ff:21:58:ac:71:c9:45:0a:
92:13:36:1d:39:74:28:22:0f:db:5d:f1:e8:c7:96:32:4c:e1:
2c:6e:13:90:40:98:52:93:1c:25:84:e7:aa:a8:4a:c1:ba:48:
47:68:58:4d:f1:4a:9f:f1:c3:bc:e8:c5:57:53:ce:c7:23:6a:
f5:71:a3:e9:1c:91:75:9a:6f:93:50:98:e3:7c:7c:58:42:cc:
83:57:62:14:3b:af:37:42:e1:ba:af:e6:ae:d3:60:20:6a:33:
f4:eb:c3:1c:d5:4d:5e:76:36:43:89:39:5a:77:d1:9f:9b:9a:
18:31:f8:8c:e2:c1:01:c6:7d:51:f4:52:44:bf:21:ef:bb:f1:
5c:33:0b:80:72:72:00:cb:a9:a1:7b:a7:9c:9f:53:77:89:c0:
24:f7:18:99:2d:50:fc:9b:73:ac:fb:a5:63:bf:43:f3:c1:bb:
4f:5c:16:a3:ac:45:e7:96:7c:27:72:21:17:3b:fe:fe:60:b9:
e8:87:e7:bc:9f:1e:c0:4d:75:da:0d:15:09:c0:2b:c7:4b:bd:
54:f6:24:08:3d:79:94:45:59:00:1f:e1:1e:a3:ba:cb:1a:f6:
e3:8c:0f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:28:43 2026 by rpki-client