
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: JhUCVaQVB5FoX8aCd/SOtd6Q3fxWhuwx7OUE61W1sH8=
Subject key identifier: 6D:3B:A6:C4:A5:29:AE:C4:AA:F5:A3:0C:89:7E:E4:10:97:B8:C7:C5
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 01A0E1062B33EE56C393F73E733F23F4118A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 04:01:12 +0000
Manifest this update: Sun 27 Sep 2026 04:01:12 +0000
Manifest next update: Mon 28 Sep 2026 04:01:12 +0000
Files and hashes: 1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: LYlRJ1tNQKoBcQbFSBSu/RNlmai2fJpt08eYfoy5BOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:2b:33:ee:56:c3:93:f7:3e:73:3f:23:f4:11:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Sep 27 04:01:12 2026 GMT
Not After : Sep 28 04:01:12 2026 GMT
Subject: CN=6d3ba6c4a529aec4aaf5a30c897ee41097b8c7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:35:99:fe:27:fe:05:aa:1b:68:c5:7e:c5:
bc:e5:9c:ca:d1:a7:2d:6b:bf:8d:9e:46:11:a2:14:
59:d2:70:ec:b7:61:ee:b7:ee:5f:4a:4f:61:73:91:
b2:1a:5e:dd:dc:c8:16:c4:74:8f:1c:7a:5c:54:90:
c3:21:80:a2:89:17:f5:2c:cc:94:64:fd:8c:5f:29:
2a:04:9c:76:21:fe:db:52:c9:61:b1:75:8d:a3:03:
5a:ca:11:88:98:f8:dc:56:d2:90:2c:db:e9:bc:6e:
d3:13:c6:67:10:e6:ad:dd:27:15:31:3e:d5:81:80:
98:78:a3:70:41:13:d4:72:f4:25:71:31:9d:7b:b7:
e5:85:94:ef:e2:b3:10:5f:46:65:ca:3b:d3:ff:5f:
30:40:da:ed:b4:a2:9d:8c:de:bc:fc:82:81:a5:17:
6a:0e:2f:8a:a2:f0:6f:f5:0d:43:49:9d:27:d1:b8:
d1:f8:b6:e1:de:1c:82:0e:2e:f2:c1:55:82:96:0b:
77:21:5e:f5:1c:54:2b:18:76:ae:1e:94:4a:cd:3b:
10:ae:5c:6f:f0:ab:81:f7:c1:27:ae:50:0c:d6:94:
35:8d:a9:fd:cc:34:9c:40:18:2f:58:a8:47:50:27:
0e:41:98:34:31:04:10:88:c0:0f:a9:7f:7f:62:74:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3B:A6:C4:A5:29:AE:C4:AA:F5:A3:0C:89:7E:E4:10:97:B8:C7:C5
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b4:2a:32:f5:24:b6:89:96:54:b0:26:67:52:ad:91:45:08:
78:23:f2:29:1e:31:d8:7c:ec:dd:fe:56:4c:fa:5a:b1:cf:31:
ef:f4:f5:2f:60:7c:79:6d:3e:f3:e0:ca:60:dd:6c:5d:1e:09:
7e:5b:01:90:69:07:ba:e5:7e:47:ed:89:5d:43:db:65:f1:3b:
d4:d9:17:62:e3:77:56:6c:39:f1:4a:8a:9e:b3:5a:ed:fc:6e:
8c:4f:19:29:d1:81:05:b5:6f:60:94:63:9d:13:9b:4f:b6:77:
52:6a:2c:0d:47:24:08:58:c5:61:3f:4c:e4:74:ce:e6:e9:40:
ca:24:47:2e:b3:f5:0c:cd:44:4a:2f:db:f1:70:56:8f:90:31:
65:d3:b6:99:65:51:09:d3:00:34:e4:03:6f:a7:fa:02:58:22:
53:7e:dd:6c:26:9e:1b:be:74:75:7d:a6:9e:5c:5e:fb:f6:5f:
60:22:99:b2:4b:9f:08:a1:7d:08:14:3c:f0:e6:be:24:89:54:
8a:26:78:6a:2c:c7:8c:a5:cd:aa:68:55:3f:55:38:95:cd:e5:
86:24:b7:0f:b3:1a:f3:66:f3:bc:68:85:e7:06:07:41:84:b4:
30:18:10:b6:f2:0a:e2:5a:8e:30:26:35:d2:51:bf:ac:ab:d4:
3a:b3:1e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:27:53 2026 by rpki-client