Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
File: h-2cuDQKwglaTLBSjl6i9zjOpnI.mft (raw, json)
Hash identifier: naBnm0BLQ6mULziJEcjnkGyaXP/DDl/1m+LyLqm4AYw=
Subject key identifier: FC:79:95:4D:7E:04:2E:CC:43:43:7E:FF:6C:01:C8:4D:3D:3E:AA:65
Authority key identifier: 87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
Certificate issuer: /CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Certificate serial: 019FAA1A06A64EBB9B12B65FA718604DE747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
Manifest number: 079F
Signing time: Tue 28 Jul 2026 19:00:59 +0000
Manifest this update: Tue 28 Jul 2026 19:00:59 +0000
Manifest next update: Wed 29 Jul 2026 19:00:59 +0000
Files and hashes: 1: ClXL4dT4GSld8lEfAWyCYr5cI3Y.roa (hash: gOfRKf6V+xV3ZsFtbBW86oarsiPBo5VFvmb0v2OnPU0=)
2: h-2cuDQKwglaTLBSjl6i9zjOpnI.crl (hash: LU8ynnwKTje4nIryt0G5/0vH1ITnrs0r9o3bBS9b3+Q=)
3: vT00UMTKIHLp4hINXZvd81w31H4.roa (hash: QI91nZrYvdKW6PkjSidpqTabE42DmbX4YNbp5QsN850=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:06:a6:4e:bb:9b:12:b6:5f:a7:18:60:4d:e7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Validity
Not Before: Jul 28 19:00:59 2026 GMT
Not After : Jul 29 19:00:59 2026 GMT
Subject: CN=fc79954d7e042ecc43437eff6c01c84d3d3eaa65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:17:1d:94:5e:04:52:78:8a:b2:2e:75:2f:
94:2d:9e:e0:c5:d6:a3:b8:35:ce:88:aa:db:56:48:
77:ea:ff:87:8a:b4:29:f4:ec:63:e7:67:06:1e:0e:
a3:43:fa:0f:37:a2:8a:e4:2d:8a:3c:6c:b9:38:11:
6b:e1:c5:9b:fa:f4:46:95:c3:d7:d6:c0:21:ed:f3:
16:be:62:f4:55:a3:c2:0c:ea:56:5f:36:29:7b:b0:
f6:31:7a:68:47:06:cc:20:b0:c3:6d:65:35:6e:b3:
9d:8a:c2:7d:b7:0f:8a:83:ef:9d:6b:7f:43:4b:d2:
1e:c7:06:dc:9d:7f:4d:fe:87:cc:04:4e:d5:a9:7e:
da:19:31:5b:cd:db:9e:7a:ed:d4:3e:ab:af:7b:a6:
92:49:b1:0c:81:4b:80:7d:43:6f:a9:06:94:5d:b3:
e5:9f:97:17:47:68:d8:ff:d2:1c:79:70:23:4e:37:
ff:87:a2:4d:de:17:11:e9:a0:8c:da:e6:32:1a:2f:
49:71:44:2e:4c:94:78:2d:5c:fb:08:4b:23:41:af:
f9:6e:40:77:5f:e1:e3:b6:67:8d:86:16:a7:b5:19:
ac:8e:bb:05:d4:15:41:64:70:a7:73:fa:43:c6:90:
95:19:2f:db:8f:95:5e:e4:a4:17:0b:c9:22:fc:67:
71:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:79:95:4D:7E:04:2E:CC:43:43:7E:FF:6C:01:C8:4D:3D:3E:AA:65
X509v3 Authority Key Identifier:
keyid:87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:52:4c:0f:f3:03:e7:06:6f:ab:41:75:75:d3:3a:0a:f4:39:
4f:2a:d5:22:41:3f:33:48:7c:39:fe:2c:7f:ae:f9:0b:87:22:
a0:98:1b:58:89:74:ef:38:b6:dd:cc:c8:79:d7:d6:88:fc:5a:
f0:85:e1:31:1e:af:8d:19:08:ae:47:b8:9a:49:ff:33:5a:30:
fd:0a:86:7a:30:35:a2:b4:0e:2c:66:18:2f:fd:8e:31:64:5b:
82:29:0b:95:5d:ea:d3:4c:e5:42:d6:cf:f3:ff:e5:98:9e:14:
75:0e:2b:10:08:46:62:b8:70:73:9f:29:ea:31:2e:07:a0:ca:
f0:aa:ed:84:6a:fc:3b:f7:e3:3b:1d:96:6b:08:c3:8c:e6:d1:
8e:ab:5d:7f:24:06:35:db:0a:76:65:e0:2f:a7:7f:45:ae:71:
b8:b4:5d:70:98:d6:80:98:10:49:91:0f:2a:5b:86:11:01:5b:
ea:21:41:34:5f:af:f9:44:3e:16:1f:1b:5c:ba:85:b1:51:ca:
dc:47:de:47:46:96:78:7f:14:f3:d3:ac:8d:ef:4d:84:4d:42:
1e:b1:3b:c9:71:a0:8c:27:3b:41:e8:1b:d6:14:3d:d5:61:a2:
a2:11:78:63:5a:fc:10:40:c0:6d:74:46:e8:6f:30:dc:bf:19:
5b:7b:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:31:19 2026 by rpki-client