Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: sV5t75aL3RkTGyLeHI4sfJ8/qoA1U3OukuJN7CZru3E=
Subject key identifier: C4:94:B7:D9:A1:C6:87:9C:2B:49:5D:71:BE:B0:45:6A:0E:F2:96:F4
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019FAB2C1CBFE941BD8644CBE77140525BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 19DF
Signing time: Wed 29 Jul 2026 00:00:22 +0000
Manifest this update: Wed 29 Jul 2026 00:00:22 +0000
Manifest next update: Thu 30 Jul 2026 00:00:22 +0000
Files and hashes: 1: 8gHT_lp19vgQo-djG0BRf5eWAE4.roa (hash: Vche9wHHqKAp5aWnmI6EY8xEE+HzW3Pog606cPmiZs0=)
2: B_EncHrDvifkg2nCGMklUrOo0Ug.roa (hash: xcZDiT2m5lq0I5LG6Q29RjfmHvdiXJHBI+h2WR1rfvY=)
3: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: Jeb/w9+Z/TLhsrqMQbeXr8r6v6a7BMGLrLWG6hLGbzs=)
4: vsf8LQXVSI_154WNFyRlxFSnkh0.asa (hash: NPO9cK2OOJcLqlWS9kD9KyKkEvllCdUMDHEWnkAZkdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:1c:bf:e9:41:bd:86:44:cb:e7:71:40:52:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jul 29 00:00:22 2026 GMT
Not After : Jul 30 00:00:22 2026 GMT
Subject: CN=c494b7d9a1c6879c2b495d71beb0456a0ef296f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:25:3a:d8:0a:4f:36:3c:6b:f2:44:67:6e:
27:13:ad:9a:5b:01:35:c5:61:85:3a:e1:be:db:ef:
b1:7a:8b:b6:0f:02:2f:93:8e:f2:82:1a:09:e5:f7:
a7:f8:db:80:45:68:35:1a:d6:e3:80:ed:c7:d5:6a:
85:05:58:6e:93:57:d1:b1:73:92:6b:3b:58:ba:9b:
bc:3e:a8:e2:17:c4:fc:e1:3f:f9:ab:61:21:f4:71:
ec:34:06:e1:64:15:96:67:59:66:b3:1a:a7:f0:d9:
73:60:07:f7:e6:9a:20:58:b5:44:84:1b:db:60:16:
4c:31:8a:28:e0:0d:15:9f:99:84:e1:48:76:7b:43:
1f:6a:c9:dc:6a:4c:16:a8:bc:05:7a:c5:52:bf:2c:
96:b7:f7:73:a6:07:d4:ee:28:51:17:70:8e:f7:2c:
8d:b1:a0:d6:ab:44:f0:f4:7d:00:c0:fa:30:a7:63:
55:81:49:60:f2:a6:20:d6:37:16:15:66:5f:d3:6a:
a7:e3:07:60:22:7e:1e:34:2a:cf:75:e9:8c:d4:a8:
13:91:49:15:4b:77:f9:b8:84:7a:bd:b9:1f:b7:00:
b1:46:20:3b:46:f5:2a:20:ef:8e:5a:cb:d3:df:f6:
5d:c9:1e:2d:f8:87:8d:0a:5f:f6:39:b8:ad:e6:43:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:94:B7:D9:A1:C6:87:9C:2B:49:5D:71:BE:B0:45:6A:0E:F2:96:F4
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ae:68:b3:bb:92:0e:12:e4:2e:34:87:4c:e0:31:d5:ab:7f:
22:b4:1d:d7:3a:70:68:c9:73:cf:54:e7:00:1b:5a:39:23:05:
9b:7b:af:41:24:94:dc:91:68:f6:f5:ad:fb:a3:cd:dd:76:fb:
71:d7:31:c5:4e:68:3d:84:f4:f9:52:9f:37:5a:8b:1a:26:92:
26:71:c0:07:4c:ae:15:be:16:88:d8:ca:9a:9d:a9:6c:c5:0e:
1b:d3:7a:48:d3:ee:c5:d0:af:b5:12:ad:e1:37:16:de:7f:75:
c8:60:c4:9a:b7:b6:b0:f9:15:39:30:ac:9b:48:75:fc:a5:cb:
6c:36:0c:27:94:b5:31:93:20:2d:4b:28:f5:fd:a8:c6:a9:bf:
c4:b1:6f:bf:1a:e7:4f:ee:ff:bc:45:64:ee:1d:a8:7c:50:fa:
a2:55:14:71:91:2b:f4:e4:57:17:c3:0d:27:ee:90:51:4b:3f:
45:35:0f:8e:33:d2:dc:69:01:ff:59:43:a0:f9:1b:b5:0f:84:
41:b9:d4:bb:9e:80:37:12:a4:e1:dc:b0:77:4d:9b:63:53:a1:
96:7e:2d:f8:5d:0c:5e:9d:55:ec:70:78:02:95:8d:23:56:37:
5b:45:5a:fe:48:e7:b1:0f:f4:68:9b:41:86:9c:96:43:70:a7:
ca:ea:7a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:19 2026 by rpki-client