Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: filH2vyk4S04ZEWkQkAHZc/39NQWMRqCCubqEzu7JoE=
Subject key identifier: E2:E1:55:E8:5A:F2:74:09:B1:21:C1:5F:44:E7:0E:4B:7E:AD:38:44
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019FAD1A790BBFF1517BAA92CC77C5F7B350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 09:00:20 +0000
Manifest this update: Wed 29 Jul 2026 09:00:20 +0000
Manifest next update: Thu 30 Jul 2026 09:00:20 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: NtbGxeBkknBsk00fYIRYfoIDhBIe09gYdNOWpNVf6mU=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:79:0b:bf:f1:51:7b:aa:92:cc:77:c5:f7:b3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jul 29 09:00:20 2026 GMT
Not After : Jul 30 09:00:20 2026 GMT
Subject: CN=e2e155e85af27409b121c15f44e70e4b7ead3844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:5f:7c:9a:4b:e4:ad:a9:7c:5f:51:8e:25:
1b:4f:3d:ef:10:0b:40:d4:96:03:b4:57:40:e1:f2:
a5:99:8e:33:e9:a4:59:41:4d:e4:98:b0:20:8a:2d:
d0:d3:a6:5e:14:3a:76:9b:2b:96:34:2d:b6:43:b4:
04:a7:48:dc:15:ed:7d:50:9c:44:ea:64:bc:94:25:
b5:db:ad:52:40:21:e3:fe:2e:98:de:ac:e8:8b:12:
c7:01:dd:4c:8a:d9:e7:e7:ab:7d:0a:a6:2e:5f:6f:
cd:20:c1:6c:bc:7c:2e:17:68:eb:3a:6f:0a:55:20:
9a:f0:f3:7d:6e:12:26:bb:f3:e1:6b:fa:bf:d9:06:
80:7e:bc:49:ee:24:20:a3:6b:33:07:5e:82:f1:e9:
3d:8a:7c:f9:c5:af:ed:4c:24:9e:20:73:1b:3b:f3:
9c:84:07:f1:c8:10:45:4e:42:88:be:52:40:29:62:
53:64:1c:37:4d:ec:7f:7f:5d:62:2b:0a:26:94:0b:
48:54:7a:8e:e7:db:bf:10:b0:6a:09:e7:7b:2d:ed:
ff:3c:9b:6d:e0:05:27:10:28:ae:a6:18:3a:de:bb:
e8:a0:b0:d2:89:63:8e:a1:f8:44:b2:82:54:d3:61:
e0:be:04:84:8b:66:90:62:a9:da:28:b2:66:ff:45:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E1:55:E8:5A:F2:74:09:B1:21:C1:5F:44:E7:0E:4B:7E:AD:38:44
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c1:8b:6f:aa:f8:02:6e:fd:48:e3:e5:de:af:b2:9d:54:10:
69:b3:0f:07:39:24:a0:73:fe:b6:90:58:f0:59:3e:1f:5b:e0:
af:0e:67:99:e1:52:18:e0:5e:69:12:f3:78:63:9a:72:1e:24:
f7:b7:48:9a:af:08:52:a2:c0:dd:88:87:fc:1c:e6:cd:ac:71:
3e:35:0c:ad:43:98:e0:d8:d3:2e:f8:99:f6:d2:9d:f6:4d:1a:
b3:67:8a:02:51:7b:a0:64:e6:e7:88:f9:6b:86:aa:be:eb:0d:
96:4e:56:ee:f3:c2:4c:d6:1e:ed:73:09:05:15:52:cc:d2:a6:
01:9f:77:2e:8b:bc:38:0f:23:c5:c6:07:2f:7c:2d:b5:51:de:
2f:65:f6:49:06:81:2d:80:c4:12:d9:a5:f9:15:aa:66:0c:4a:
7f:a8:fd:54:c0:80:e2:35:7a:df:c2:54:cc:b4:70:00:f7:06:
af:da:78:e6:f3:5c:84:4e:a7:c9:66:f3:6e:1e:50:bc:cf:0a:
61:db:73:b3:e2:cb:36:a9:a3:71:aa:82:db:e0:b9:cc:88:26:
80:b5:47:45:de:f5:21:d5:79:63:84:8e:9e:c0:03:a9:76:60:
a9:bf:23:4b:31:b4:98:82:0d:22:71:46:78:99:ab:f9:29:89:
24:57:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:36 2026 by rpki-client