Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
File: H9nOye0f1PQcCx4w77lshhVTvjY.mft (raw, json)
Hash identifier: +2/3AWjL+iiJB5pAZGdUEoGTA2VH//Eyd+lILEW0Ae0=
Subject key identifier: 83:53:A4:73:2B:0A:37:2A:D0:ED:EC:4E:FD:84:DD:94:9B:4D:F3:F1
Authority key identifier: 1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
Certificate issuer: /CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Certificate serial: 019FAABE493DEE3580CC71DA377E82AF49BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
Manifest number: 05B6
Signing time: Tue 28 Jul 2026 22:00:25 +0000
Manifest this update: Tue 28 Jul 2026 22:00:25 +0000
Manifest next update: Wed 29 Jul 2026 22:00:25 +0000
Files and hashes: 1: AGVrI7h1W1sZnmEHrQIXxLRxF1Q.roa (hash: K1nbjcJomqgMcH/NVsTCJWhMoSmEDtw4c8u/MMrHlso=)
2: H9nOye0f1PQcCx4w77lshhVTvjY.crl (hash: jWW4Nmt9ybb1AjdXlk5dB/T8+4e9r4R3HrhOEhIRojI=)
3: fnZsGtHZZ57ibD1bgR7D-kx03A8.asa (hash: gnq6h8vpZgrDrbXWUtlG5+lFKokphaSsAqWL7zsvVig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:49:3d:ee:35:80:cc:71:da:37:7e:82:af:49:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Validity
Not Before: Jul 28 22:00:25 2026 GMT
Not After : Jul 29 22:00:25 2026 GMT
Subject: CN=8353a4732b0a372ad0edec4efd84dd949b4df3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:8e:db:fb:6b:90:02:ce:8b:3a:3c:1e:5c:
bc:69:6a:fc:68:01:1a:31:16:64:33:34:50:2a:4d:
bc:32:e1:ca:5a:d8:3e:c8:99:d2:f3:bd:d7:cd:ee:
5b:5f:32:f4:31:c4:37:3b:f1:bd:8f:10:2a:39:87:
ae:28:98:ca:4c:17:bb:b8:d0:4d:4b:66:7a:6c:c4:
6f:5e:f4:73:08:de:67:f7:b2:c8:41:86:b4:2e:16:
c1:fe:56:11:77:49:9c:11:0a:03:e5:a8:47:45:b5:
e5:1b:8a:fe:2a:f5:c6:a6:0e:e4:6f:e2:a6:eb:94:
9e:5e:85:8a:14:7b:d8:f9:a0:8c:4c:a5:85:ba:8c:
49:bb:ba:a1:4c:21:74:64:71:6c:01:4d:b2:5f:27:
c2:04:4a:c3:34:05:e3:a4:3a:c0:90:31:5e:27:20:
07:d0:46:59:77:c1:68:aa:98:c0:15:69:89:cd:32:
e1:05:59:aa:b5:bb:20:60:27:b7:7d:e2:11:f5:72:
0b:8c:fb:b2:64:09:c0:b2:65:b6:c3:51:f9:73:9c:
14:39:96:e3:76:de:1f:ba:30:23:c1:33:94:2d:ec:
2e:35:c6:8c:0e:4f:48:21:68:84:09:4b:ac:0b:f1:
6c:a1:e7:51:1a:4f:f1:ce:1e:01:dc:53:81:a3:86:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:53:A4:73:2B:0A:37:2A:D0:ED:EC:4E:FD:84:DD:94:9B:4D:F3:F1
X509v3 Authority Key Identifier:
keyid:1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:18:5e:6b:a5:bb:07:71:6f:19:25:d7:ce:1c:e6:47:c6:6b:
df:d4:b2:ef:26:34:20:23:44:56:f6:04:68:04:09:26:a9:23:
46:39:c7:77:9b:de:81:85:bb:de:08:8c:f9:38:cb:62:dd:90:
f1:9d:3d:b6:ed:3d:f5:1f:67:a9:1d:66:b2:82:e9:6a:52:c8:
9a:0d:a1:f6:b1:8c:17:dd:6f:d7:a2:94:f2:0b:d2:03:9b:17:
29:a3:0c:68:2e:79:fd:c4:e9:a4:1e:91:81:ae:61:f1:fb:bb:
6a:bb:71:b6:50:9a:31:38:b0:3e:e5:69:00:02:be:21:e0:7c:
3b:9d:e3:64:83:e1:bf:40:39:77:71:17:ad:f7:51:ba:b4:d7:
d4:e5:dc:c3:ba:d8:e5:50:9d:bc:ee:74:78:17:19:3a:23:f4:
5c:7a:2b:14:df:19:d9:bb:ce:fa:3a:99:4b:59:a0:54:f2:10:
22:5d:77:87:e3:f4:ef:4b:e4:37:43:ff:cd:14:88:f3:2d:8d:
8e:1d:12:69:be:a8:f8:31:08:69:07:19:6a:67:89:e4:43:42:
e1:a0:6c:27:96:53:27:fd:4a:40:10:88:6e:8a:3d:6f:81:68:
2c:98:67:5d:9f:09:ef:b4:b4:d8:8b:a9:3e:d2:45:7d:81:9d:
47:3b:d7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:32 2026 by rpki-client