Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: VhuE2fevH6tDj+Ncq5NLVcghCnUAuq2zZ2WaVegZ4sU=
Subject key identifier: E7:63:EA:29:48:72:A7:34:63:38:CD:47:E3:8E:0D:E5:EA:77:BB:91
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 01A10EF14B765154F4AA8C3BBF2B62457D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 0CD5
Signing time: Tue 06 Oct 2026 02:00:56 +0000
Manifest this update: Tue 06 Oct 2026 02:00:56 +0000
Manifest next update: Wed 07 Oct 2026 02:00:56 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: KiQsf4Xc5Iol+d8+jyfRtBunZJAVsBjbELOXzS5tY48=)
2: rEklxLhJo9S4IBAy4se1tLI3lkE.roa (hash: xqvERQ2TneWjz4TWOCFTyowIh4LAz/S0+u0Tj5YT4tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:f1:4b:76:51:54:f4:aa:8c:3b:bf:2b:62:45:7d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Oct 6 02:00:56 2026 GMT
Not After : Oct 7 02:00:56 2026 GMT
Subject: CN=e763ea294872a7346338cd47e38e0de5ea77bb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:72:9e:d5:22:cb:45:67:24:0f:71:5b:02:
36:29:76:03:1d:86:27:92:11:db:35:e6:b3:a3:fc:
17:57:b3:d6:f3:d7:fa:86:69:29:ff:1f:c0:24:1e:
7b:8f:d8:aa:08:10:63:f0:96:e3:81:a7:c8:b6:eb:
5c:58:d6:f7:8b:60:c4:c8:c0:8e:87:57:15:60:3d:
d2:a4:f0:c9:69:27:1c:f2:ba:c7:28:8d:38:10:0d:
c7:ca:76:88:a5:8f:06:f9:27:3b:6b:00:e6:6a:6d:
ce:56:9e:b8:71:61:f1:21:2d:19:44:06:d2:d3:a7:
5b:f4:d6:8f:1a:fa:e9:9e:e3:fe:65:65:fd:61:7d:
d2:d1:84:c9:e0:e9:fd:52:1f:3f:3e:d4:ea:8f:88:
41:db:ac:05:5a:92:2b:47:cf:84:e4:91:0a:83:ba:
aa:e6:ca:e0:58:6e:d5:9b:08:f8:6d:6b:46:77:bf:
3a:b7:3f:3d:8f:6e:0a:07:20:a8:26:af:ee:15:a4:
98:7b:ab:f9:aa:2e:75:f8:e9:5c:b3:ab:c5:29:90:
72:e5:2d:c5:a7:4a:1d:04:8d:38:34:21:a1:fc:86:
af:f8:eb:68:04:eb:94:88:80:9e:fa:86:10:12:36:
87:68:89:ac:09:76:82:9e:b4:4c:57:6d:d4:96:a9:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:63:EA:29:48:72:A7:34:63:38:CD:47:E3:8E:0D:E5:EA:77:BB:91
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e4:ff:91:62:5e:94:ef:b9:0b:cc:59:4b:4b:77:c3:14:0f:
fa:3a:11:b1:2f:71:a0:1f:68:37:c9:e7:0a:da:a2:9d:da:24:
ce:60:ea:21:e1:03:e2:5a:b2:a4:ad:fa:3d:64:2e:2a:68:85:
a1:8c:fb:18:dc:e7:aa:e4:f9:13:ab:df:b2:4d:44:48:75:97:
97:b5:61:6a:b1:97:03:12:c0:64:34:39:3c:70:86:4e:67:9b:
6e:7b:44:2c:01:5e:0a:eb:94:56:9e:ea:63:e6:9c:11:46:8f:
d1:44:43:e4:ea:a4:6a:bf:75:67:cf:2d:64:ec:af:11:89:5e:
7b:7b:8e:f2:61:e7:1e:11:87:6d:38:30:aa:75:3f:ac:47:5f:
1e:17:7e:d5:91:88:5a:ea:a0:2a:13:cc:78:8d:f1:cb:07:0b:
b2:f6:ac:70:39:3a:c8:9b:47:e9:8c:db:08:fa:97:60:3e:67:
31:e4:ec:9b:97:88:1f:53:c8:c1:82:a9:57:db:f2:f1:77:dd:
b8:7e:74:23:3a:80:a7:3d:ba:eb:ad:a3:0a:54:e8:43:19:d5:
a3:24:37:68:38:f6:52:68:d6:f8:02:59:72:27:3c:b4:1a:d9:
83:e0:19:d7:c1:1b:8a:fc:72:f5:c6:9e:b0:0e:7a:51:da:7d:
18:77:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:46:33 2026 by rpki-client