Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: v/WzhH7yV+kQMJTK7SYJ/OPFsxcBrvbc+ebqydlgwJ8=
Subject key identifier: 65:9B:94:97:4B:E4:0E:B6:F3:FB:E3:3D:65:28:BE:E2:D7:21:88:CD
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 019FAABF02026008AE146EA6E882472580A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 22:01:12 +0000
Manifest this update: Tue 28 Jul 2026 22:01:12 +0000
Manifest next update: Wed 29 Jul 2026 22:01:12 +0000
Files and hashes: 1: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: 5QkMK0xQH/fjdylc7s+GuPnRx2tSoestcz4WVLgY3nA=)
2: UBCKv_WWXY7T8US1FqPcXNJVmjg.roa (hash: R7LskYqdTLN1UcYPAtGnZ+S1OveE97ZJ0efnayhth/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:02:02:60:08:ae:14:6e:a6:e8:82:47:25:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Jul 28 22:01:12 2026 GMT
Not After : Jul 29 22:01:12 2026 GMT
Subject: CN=659b94974be40eb6f3fbe33d6528bee2d72188cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:ce:35:69:31:c8:77:57:0f:59:07:dc:22:
9c:15:e7:25:71:9c:8a:9c:52:22:0f:32:d5:fd:bd:
86:64:37:09:f7:4e:c4:e9:a8:4f:3f:e7:6d:90:80:
0d:d4:ca:30:9c:75:e6:95:23:63:90:b4:27:a2:82:
a9:38:cf:25:ee:36:b0:b2:03:8c:f1:08:5a:a6:5e:
dd:d0:38:71:80:83:d3:2e:8f:4d:4f:78:4f:1f:de:
16:0e:7f:76:e0:59:eb:bd:98:62:e9:b0:9e:e5:a2:
9b:f5:67:9a:3f:77:9c:ff:27:2a:a9:ee:91:fc:8a:
69:07:b2:00:5c:52:2b:aa:61:a4:6e:d9:7d:cb:56:
3a:1f:e9:27:cf:c9:26:76:8b:8d:fc:bb:7f:8e:f0:
35:f2:2a:cf:75:44:ac:2c:d6:ef:76:48:4b:80:a7:
af:4a:99:0e:2b:0d:3b:3a:0e:b5:5f:d6:83:9b:c9:
16:76:b9:45:f6:e8:22:cf:bc:12:38:bb:48:9f:6c:
6b:c2:5e:f1:e0:3b:13:ef:b1:55:8f:cb:04:8f:35:
64:97:0e:ab:25:1b:61:e7:8e:04:58:fe:f6:23:61:
2f:d9:96:6e:24:59:7b:9c:d4:cf:53:2e:72:2c:13:
59:e4:07:11:51:0d:82:2d:aa:17:57:53:5e:d2:06:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:94:97:4B:E4:0E:B6:F3:FB:E3:3D:65:28:BE:E2:D7:21:88:CD
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a4:f0:36:5f:30:d7:56:a3:47:9e:b4:d2:51:e6:c7:d0:17:
c5:33:da:d6:10:16:75:66:32:16:d7:d4:7c:17:71:26:c1:7c:
ef:e0:ca:38:67:93:37:24:70:3c:43:52:74:e6:f1:e9:86:1c:
72:15:91:08:83:0e:4e:8f:84:6a:7e:c4:e4:83:1b:1d:b9:ed:
4e:bc:1c:59:34:75:dd:b3:b4:3e:35:99:f4:f7:6e:37:bc:0e:
bf:e5:5d:d6:66:4f:11:dd:28:df:b3:c8:a0:71:6a:06:0e:ac:
00:e3:26:cb:66:d4:3a:ae:0a:dc:7a:bf:7a:a1:88:4d:c7:a1:
cb:da:3f:90:d3:f3:0d:ab:ee:32:b8:f4:5d:c7:4a:19:cd:4e:
3d:64:1c:0e:77:c2:84:00:84:79:50:d1:6d:6e:86:10:1a:5c:
51:44:30:bb:50:b4:d2:aa:4c:52:cf:cf:60:9c:ed:78:ed:7c:
ea:7b:5b:7a:07:62:5f:f2:4a:fc:99:b4:c6:ee:e5:4d:b3:41:
15:e3:49:56:0e:77:10:a4:de:4f:27:9b:08:8a:9f:41:a1:eb:
b2:1e:ba:d3:d3:68:42:db:ae:b0:a7:f6:53:d8:f7:e2:54:00:
18:4d:18:bd:39:15:b2:59:07:68:18:88:91:6f:48:55:0b:3f:
61:12:4c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:10:58 2026 by rpki-client