Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: OI/HaKGXgd+w6UXc21YMTfx3P5yqgfItd3Zrr87Fb8I=
Subject key identifier: FA:A2:F3:61:DF:CA:E5:AE:B6:22:08:53:BC:4B:71:DD:BB:77:6B:3E
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 019FA899E0917C0CD9206A1B20789B15DC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 0966
Signing time: Tue 28 Jul 2026 12:01:24 +0000
Manifest this update: Tue 28 Jul 2026 12:01:24 +0000
Manifest next update: Wed 29 Jul 2026 12:01:24 +0000
Files and hashes: 1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: 0bbtkthrIP3vyMqSMVAtKw5FbazUR2KCcJcTgE+P9j0=)
2: HvbqYPMAVepvi6ZtkrW2fUxUxMM.roa (hash: kj2P3vyd4ShtsXAZbQsRTziSHIgT6QC6RQY8zqv9EFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:e0:91:7c:0c:d9:20:6a:1b:20:78:9b:15:dc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Jul 28 12:01:24 2026 GMT
Not After : Jul 29 12:01:24 2026 GMT
Subject: CN=faa2f361dfcae5aeb6220853bc4b71ddbb776b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7b:8e:f3:96:bc:85:71:63:14:20:61:fe:14:
86:88:35:72:e6:27:e5:03:e6:37:50:16:04:e4:67:
23:09:04:eb:fe:ef:6e:e9:d1:44:64:9a:e0:b5:f2:
30:34:bb:31:d3:96:7a:37:67:fb:13:74:a3:94:01:
42:8e:69:e5:48:92:e3:b0:69:ad:c3:f2:22:63:95:
eb:91:53:be:96:e0:ab:5a:33:b1:8e:0e:c9:67:52:
68:5d:4e:01:1b:5d:65:02:c7:8a:1e:43:31:a4:31:
5f:3c:af:9a:b5:43:0b:d0:a0:2b:d8:ef:00:14:ec:
50:64:95:29:52:c4:c3:8d:fb:32:69:94:8e:8a:62:
e4:f7:5f:cb:22:4c:79:7d:ef:a4:54:4b:8c:ab:f0:
7a:34:ef:49:80:df:87:2c:2c:29:66:05:8e:f4:3b:
1f:7d:52:c3:5c:4e:25:19:bc:ba:c7:6a:fd:ca:5c:
e7:cf:68:8b:ad:df:cb:df:e4:1a:f7:02:0f:f3:fd:
1c:49:c9:f1:b8:2f:ab:5c:55:3f:f1:ba:5c:c6:a1:
52:85:fe:6b:10:b8:41:f9:06:86:3b:b7:10:93:33:
7f:4a:34:0d:db:43:6f:87:41:18:a7:c8:02:f4:b4:
6e:16:9b:62:ad:a4:b8:ec:5b:23:56:53:ee:70:3e:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A2:F3:61:DF:CA:E5:AE:B6:22:08:53:BC:4B:71:DD:BB:77:6B:3E
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e4:9d:9a:7a:c7:28:3b:0a:0f:1c:46:09:ed:76:f2:40:53:
4e:55:93:61:ed:27:3f:1d:e2:05:6d:aa:96:6e:31:98:b9:ae:
89:48:1b:aa:0b:04:27:dc:bf:ad:4c:72:45:a1:e2:56:7f:92:
f3:17:b7:68:bf:f5:e1:77:50:32:c7:3f:5e:af:85:95:cf:4e:
77:c1:3b:d9:07:42:c0:3d:54:44:89:50:61:e7:e2:9b:6a:b4:
07:58:3e:32:09:2a:a2:a2:21:14:b4:a4:db:5a:9c:b0:97:69:
2b:2f:c4:99:8f:79:a3:fa:e0:68:35:9f:89:6e:3d:da:83:59:
81:da:3f:16:e5:37:19:b9:71:49:2b:cf:e6:f8:7b:b6:76:d8:
bb:40:be:2c:8b:d7:90:05:8d:57:41:3c:61:0f:d7:f7:2d:02:
42:69:f6:a8:29:93:4b:11:9d:4f:a0:57:c4:19:35:29:ef:cd:
f8:86:0d:fc:33:82:a4:02:8d:43:56:2f:39:66:12:33:b2:41:
2d:1c:a1:f7:ce:ed:9c:db:c1:7a:52:d8:2d:df:dd:bb:98:26:
b6:b0:47:ca:7f:d8:a6:85:ff:e6:88:cf:d6:8f:06:67:6a:98:
a2:d6:20:8b:2b:94:e9:62:32:14:21:f2:68:99:54:ca:77:7e:
9b:f7:79:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:35:22 2026 by rpki-client