Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
File: h7kq03MXwzCg61kKFw0U9Rm3UrM.mft (raw, json)
Hash identifier: JMFOYecmDOcF5+ROKwqMhd7zjj22khoNXKyvHNdClrQ=
Subject key identifier: C4:EC:A9:34:DC:75:DB:A6:CF:E7:FC:3F:01:87:0F:7D:0C:AB:CF:E5
Authority key identifier: 87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
Certificate issuer: /CN=87b92ad37317c330a0eb590a170d14f519b752b3
Certificate serial: 01A0E174082A5E9EC89C9BD54256166B77DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:12 +0000
Manifest this update: Sun 27 Sep 2026 06:01:12 +0000
Manifest next update: Mon 28 Sep 2026 06:01:12 +0000
Files and hashes: 1: h7kq03MXwzCg61kKFw0U9Rm3UrM.crl (hash: +JuSGAHo2ihXcEBqetu9bRuo/uiSnuIZMfjHk9itwSg=)
2: l6h8cEy3vy8eHGUMk9ccO_E31gg.roa (hash: /rkHav/nq0FmDVvv83fpzsLSholUDtzomJfCggVqF3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:08:2a:5e:9e:c8:9c:9b:d5:42:56:16:6b:77:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b92ad37317c330a0eb590a170d14f519b752b3
Validity
Not Before: Sep 27 06:01:12 2026 GMT
Not After : Sep 28 06:01:12 2026 GMT
Subject: CN=c4eca934dc75dba6cfe7fc3f01870f7d0cabcfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:21:ee:62:b9:a9:cc:88:c7:a9:ca:b3:fd:
04:c6:e4:08:fd:a9:bc:ba:c1:70:57:7b:a4:9e:c4:
92:bb:16:1e:f9:2b:b2:3d:0c:a1:e9:6d:56:55:33:
3f:54:8d:e2:47:32:28:39:65:b7:c4:be:8e:db:21:
f0:b1:8f:3b:ff:fa:39:0e:0e:31:b3:9e:9c:26:d3:
eb:9b:7e:30:c4:c7:29:96:e1:7c:28:6f:26:d7:4a:
77:9d:49:23:68:8e:6d:0b:02:da:f5:77:03:5c:d5:
e9:c9:3e:01:cb:aa:c6:1f:1a:f2:67:52:54:25:8f:
28:c9:31:21:78:28:2b:e6:82:6a:b5:ff:6f:8f:dd:
80:2a:d0:df:33:61:82:d2:43:52:5e:9b:d9:79:b0:
27:61:2a:ef:6a:58:15:11:d6:c7:dc:fd:40:bf:27:
20:68:cf:fd:eb:af:80:01:99:59:8d:6c:e8:10:5a:
62:10:14:17:82:0c:82:f9:69:6c:fe:c5:00:11:fa:
7e:e7:e9:49:1e:96:44:67:59:02:9b:fa:59:16:77:
2f:ce:b6:01:ba:c6:38:69:8e:2f:55:66:dd:50:49:
39:8d:b7:dd:54:3b:8d:30:70:01:49:40:c7:aa:66:
e5:cb:7f:44:e2:3b:75:6d:9d:ef:cf:8e:c9:fb:aa:
be:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EC:A9:34:DC:75:DB:A6:CF:E7:FC:3F:01:87:0F:7D:0C:AB:CF:E5
X509v3 Authority Key Identifier:
keyid:87:B9:2A:D3:73:17:C3:30:A0:EB:59:0A:17:0D:14:F5:19:B7:52:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kq03MXwzCg61kKFw0U9Rm3UrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/720539-d36a-44dc-93e7-5a537629a439/1/h7kq03MXwzCg61kKFw0U9Rm3UrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bb:22:51:34:4a:89:30:d2:f9:51:4e:ed:a9:e4:b7:45:46:
e3:c0:e5:f8:35:0c:c3:b3:7f:f9:24:7e:12:6d:ed:73:d9:e1:
17:f6:79:3c:b4:cf:41:14:75:3b:69:3d:d2:f2:eb:a7:b8:b9:
16:a9:b9:44:3a:e2:be:1b:4d:dc:a5:bc:46:d7:a1:53:d7:84:
84:88:61:4d:bc:62:c6:0e:8d:d4:92:5d:3a:23:23:42:0f:3d:
61:74:73:a8:25:9c:5f:41:2d:c0:f7:dc:00:f0:9e:76:1d:01:
b5:66:07:9a:0a:49:93:83:a5:38:3c:f2:d6:3a:98:6a:88:da:
04:d1:c8:f1:90:a2:18:a1:37:ef:b0:72:ce:74:17:d8:dc:61:
0d:d3:b6:42:f9:86:d1:26:67:b2:4b:00:e5:d7:b4:2b:45:63:
98:28:77:1d:d5:bb:50:a8:4c:05:32:51:03:92:01:19:79:be:
0e:35:eb:fc:5a:3b:74:b1:66:81:26:f3:f4:cf:07:ac:63:c6:
c1:df:3d:d4:d5:1f:2d:47:84:b8:bf:90:de:0c:45:7c:20:03:
39:50:62:9b:0a:d6:05:40:17:5b:bd:39:5e:2d:9a:9b:87:a3:
33:0a:fd:9b:18:f7:31:de:fc:a0:61:eb:8f:0e:57:4b:b9:ab:
29:6a:98:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:24:16 2026 by rpki-client