Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: ClnmXfgUsYY3+YOmwO8XWMnxAa/4bGgeuSy9JxcqiJg=
Subject key identifier: 25:51:AC:2F:B2:4D:68:D8:93:33:A6:9D:F6:30:F9:29:63:73:53:D6
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 01A0D50240BE2D20F819B8A27FFD2E7F62DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 20:01:29 +0000
Manifest this update: Thu 24 Sep 2026 20:01:29 +0000
Manifest next update: Fri 25 Sep 2026 20:01:29 +0000
Files and hashes: 1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: 1x9XeylVhbOWec8BvutjPYRM0i4hW6jfRFBVVFHhMsg=)
2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:40:be:2d:20:f8:19:b8:a2:7f:fd:2e:7f:62:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Sep 24 20:01:29 2026 GMT
Not After : Sep 25 20:01:29 2026 GMT
Subject: CN=2551ac2fb24d68d89333a69df630f929637353d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:63:57:ab:8c:f0:ff:9f:16:a0:aa:7b:98:
27:21:74:a0:86:96:8e:1f:f2:f2:fc:73:69:85:15:
40:ef:ca:15:d9:3b:96:20:57:0c:52:2b:2b:0c:12:
de:d5:bf:47:c2:3e:71:42:e5:fc:0d:11:14:e8:7b:
07:d7:86:3c:ec:cc:fe:46:57:5b:4b:90:35:98:ba:
8b:32:7c:0e:59:44:8b:1b:f4:cc:8e:55:c0:e0:cc:
99:7f:a1:5d:fd:bc:49:7e:5d:a7:5a:e8:34:62:7a:
8c:9f:31:cc:f4:21:ce:59:a6:55:09:05:8e:5b:df:
fd:04:ff:d8:ab:7d:da:de:29:54:71:34:5d:4a:ef:
10:4c:0d:4e:36:9d:1d:87:46:9f:5b:13:a4:20:18:
f0:64:15:84:f4:51:3e:38:57:12:ea:cd:a8:c6:5e:
2f:d7:49:d9:6c:52:e2:8c:c7:ba:d0:71:71:e8:29:
48:70:47:f4:1e:be:86:17:8a:7f:00:6f:0b:8b:69:
2b:8a:e3:08:88:32:4b:19:98:53:97:f4:c2:f4:88:
1d:4c:df:54:60:f1:d4:ec:22:49:75:c4:57:5a:4c:
49:37:e8:92:7d:c5:e0:0e:c3:21:d9:a9:fc:4b:f2:
e3:cf:ae:6a:73:b6:f4:3a:5a:1a:9e:b3:97:41:bf:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:AC:2F:B2:4D:68:D8:93:33:A6:9D:F6:30:F9:29:63:73:53:D6
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c3:30:38:82:fa:6c:0a:ef:41:8c:0b:26:40:08:b0:34:7a:
a7:03:60:17:8c:eb:c9:68:d8:e4:6b:d7:1f:a6:c4:5b:c6:57:
0f:c0:5d:06:90:9b:c5:f6:18:30:e9:48:28:1f:1c:92:6a:8e:
e5:86:63:17:04:9f:66:b9:04:f4:94:7c:b4:ae:cf:9d:89:08:
b7:27:90:c9:3b:6e:ec:0b:52:bf:8f:84:05:cb:88:0f:cf:af:
5a:23:b9:cc:5c:29:89:82:3d:1a:21:66:54:79:40:14:7a:5c:
98:db:73:cb:98:66:de:01:6c:ca:b5:bb:de:8a:52:87:79:ce:
c3:db:f3:a7:28:89:a2:ae:67:27:92:71:d6:46:ed:b6:4a:bd:
d5:ae:22:d9:c4:d1:31:64:c8:e2:fd:00:46:a7:31:5b:7e:d7:
b3:86:4c:67:34:d8:62:3f:79:a7:26:b7:cd:ce:7c:8f:de:b4:
5a:e1:1a:e1:96:7e:d4:a6:23:39:a1:f2:a4:f7:88:2e:b5:a5:
a0:91:19:ef:35:24:75:8e:e0:a0:b3:4a:ef:47:71:b6:b6:03:
45:89:b4:f9:43:4a:b4:55:46:82:56:84:5a:0e:40:a0:7e:2a:
fc:1e:96:46:4e:af:bd:57:7f:f5:9e:0b:cf:28:06:65:ca:ea:
cc:61:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:59:22 2026 by rpki-client