Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: Lm1oAtm4khYYCQ8Fb61hnA+WdrtHGEFI5e3SPu2GS4Y=
Subject key identifier: 40:EC:93:40:55:94:8F:B5:88:54:11:4F:D5:7F:D5:00:43:D4:15:34
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 019FAB2C4BA31A05E971F7624645AE78621B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 1348
Signing time: Wed 29 Jul 2026 00:00:34 +0000
Manifest this update: Wed 29 Jul 2026 00:00:34 +0000
Manifest next update: Thu 30 Jul 2026 00:00:34 +0000
Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: hETbw8ssMpsoGAOzbGud4anKlzT19FFWOfLdh32z0+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:4b:a3:1a:05:e9:71:f7:62:46:45:ae:78:62:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Jul 29 00:00:34 2026 GMT
Not After : Jul 30 00:00:34 2026 GMT
Subject: CN=40ec934055948fb58854114fd57fd50043d41534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:8e:20:57:0c:e8:49:93:b0:69:f1:d4:89:
1c:b6:ef:90:76:ce:16:ff:eb:4f:42:51:d4:f1:68:
ee:b8:a8:f3:b6:67:ac:40:0e:9d:6b:fe:3d:dc:8e:
c4:c1:61:3b:8e:57:00:35:16:a7:61:03:9a:b4:75:
17:9c:ad:1b:fa:53:c7:c7:22:b2:97:96:4c:22:53:
14:35:f4:b6:36:13:3b:bb:dc:15:a5:10:2f:10:b9:
54:06:30:6d:21:a0:bb:14:b8:af:c4:38:e5:b8:64:
b2:3f:a7:4f:a7:91:09:52:22:94:ac:45:a2:5f:d8:
20:97:93:e3:2c:5e:cb:f5:6e:d2:67:a2:df:d6:0e:
d0:9b:d8:b1:94:56:61:6c:20:66:53:2b:be:83:31:
f2:85:34:bf:6e:ed:05:03:fb:3c:72:83:33:2c:70:
d0:2b:ee:05:47:3e:e0:cc:b6:2a:d6:b7:45:58:1f:
7e:81:43:15:65:3c:a2:cb:5a:e0:1f:a5:b1:36:33:
26:fe:4a:12:b1:d6:fd:f3:52:cd:92:0a:06:09:12:
8f:57:e8:37:40:74:f7:00:84:03:92:94:8b:87:8b:
33:7a:4f:1a:51:35:54:08:95:6a:5e:26:ed:fd:9e:
e8:36:1c:ed:38:c7:8b:a5:da:33:e6:30:b6:35:25:
05:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EC:93:40:55:94:8F:B5:88:54:11:4F:D5:7F:D5:00:43:D4:15:34
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e9:6f:e7:f7:85:01:38:c3:e3:1e:68:c3:a6:74:ad:4e:1b:
a8:82:09:6d:9b:c0:f3:df:89:21:8d:1d:e0:41:ab:b6:f5:9f:
88:86:3d:54:42:0f:a7:b0:58:33:1f:88:8b:ec:66:ca:b7:b4:
c4:4b:8a:05:e2:3a:a2:d7:5c:63:ba:a5:ea:22:43:7a:76:fe:
fb:61:e9:3c:72:65:30:fe:d1:79:9d:7f:b2:0b:e0:4e:d9:3c:
e5:2b:bc:38:22:02:37:2d:47:b0:07:12:48:99:f1:85:f6:db:
98:ee:38:f9:24:b5:41:80:2d:6a:53:6f:a3:6f:8e:0a:73:0e:
b2:e6:40:12:69:bb:e6:5f:49:45:14:93:5d:c4:37:72:ad:ed:
1a:11:0d:55:f6:dd:f3:67:6c:91:13:05:87:1f:21:60:d3:2d:
6d:98:3b:25:5e:03:ce:7a:5c:37:85:6d:53:27:ea:db:e3:7c:
d4:02:65:91:49:bd:17:7d:dd:d3:e7:03:31:87:f3:c0:2c:0b:
f3:59:92:a6:19:be:34:3a:fc:42:f7:92:b7:c0:04:2a:41:52:
19:ad:f4:c1:de:49:33:45:eb:f8:af:7e:7f:5b:0c:de:59:0d:
8f:6c:f4:52:3e:bd:6e:c4:c4:82:99:47:c0:f1:a3:b5:ee:91:
63:4b:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:54:28 2026 by rpki-client