Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: n6+lWTqKY6DCwI/C0LFZ9C5K0i4q8+UimKcc1shciBY=
Subject key identifier: 64:7F:8D:FF:91:D7:5B:56:B1:AE:3E:29:CE:4D:D9:F7:56:29:C3:0B
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019FAA87CDE89F30CC4BE7B71D0C7864CE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 145D
Signing time: Tue 28 Jul 2026 21:00:54 +0000
Manifest this update: Tue 28 Jul 2026 21:00:54 +0000
Manifest next update: Wed 29 Jul 2026 21:00:54 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: vX8Qq2cZHmil17/ZLqscMuLAkgOw1Yrzgu0FYTQLotc=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:cd:e8:9f:30:cc:4b:e7:b7:1d:0c:78:64:ce:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jul 28 21:00:54 2026 GMT
Not After : Jul 29 21:00:54 2026 GMT
Subject: CN=647f8dff91d75b56b1ae3e29ce4dd9f75629c30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:25:a3:f2:28:f5:df:0b:35:ee:38:ef:18:
e1:d7:be:e1:97:cf:f4:12:55:8a:60:c1:2c:bf:3d:
5e:3c:f6:71:fa:3c:37:59:62:83:19:e9:ed:6f:f0:
e7:03:e4:8b:99:fc:35:55:4a:ae:0a:26:19:b6:e3:
c7:f2:e5:4a:d4:d7:62:6d:60:11:22:c4:f1:e8:3e:
07:c8:0c:f2:83:71:fd:2d:80:d5:90:ea:a1:fe:87:
9b:b6:56:c6:d7:cc:ae:e6:93:1d:cf:00:c6:c2:21:
ce:c7:3f:94:74:3c:8a:97:d8:33:ac:37:41:cf:0b:
c2:a4:65:e3:03:91:58:82:28:cc:1c:57:2f:4e:42:
25:96:d3:0e:44:ec:e0:0f:84:0b:34:ee:0e:d0:7a:
61:78:07:8d:f9:0d:47:e4:d3:c8:9a:9e:43:b1:7c:
6d:8d:7e:e9:76:d5:5c:d5:4f:dc:f8:b9:67:ab:4a:
84:c4:d4:20:1a:53:73:8c:13:d7:5e:6f:bd:ba:bb:
36:c5:ac:6a:a2:5c:30:00:b3:32:35:30:84:87:90:
5b:d3:07:33:5d:de:91:ce:92:e8:ff:9f:a3:54:f5:
72:1c:a7:95:4b:5a:b8:dd:56:9d:77:7b:b2:b8:bd:
57:e4:59:54:5f:5d:0f:21:57:db:66:a2:70:94:c9:
19:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:8D:FF:91:D7:5B:56:B1:AE:3E:29:CE:4D:D9:F7:56:29:C3:0B
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ae:82:54:7c:82:8d:b9:cc:ed:b6:76:07:4c:ac:56:62:93:
99:18:ea:9f:6a:38:12:bc:a2:25:5d:af:e8:57:62:f3:62:bc:
bd:ae:22:9c:65:dc:34:d0:93:13:38:72:c3:32:ca:8d:43:c7:
7a:ad:b9:96:bc:00:2c:a6:3d:2e:0e:47:cb:2b:d2:3d:eb:31:
14:34:38:eb:1a:ce:c1:71:dd:cc:1c:d7:c1:5a:4a:81:c3:57:
6e:d5:e6:03:03:44:23:55:3c:43:8a:2c:ed:0c:08:1f:76:5d:
d0:94:1e:27:75:0d:ac:cc:1a:1e:26:a2:84:24:3a:2e:50:ab:
fb:52:61:22:a2:2f:3a:02:75:02:c8:cb:a8:18:63:33:24:ad:
f7:83:d5:9b:43:97:e3:b1:cc:d1:de:d2:24:12:9e:54:e6:19:
a5:b3:54:2b:da:9c:ce:52:04:cf:1c:42:43:7c:5f:f8:9a:4b:
74:00:96:92:7b:fc:6d:37:d8:85:07:bb:b6:3e:e0:05:1a:19:
7d:35:d8:40:8a:eb:bf:f9:61:c5:80:7a:0c:4c:7a:19:c0:b5:
1b:a2:b4:a8:4b:e2:0a:b1:44:62:eb:01:6f:60:56:b2:de:2b:
ff:6c:11:04:4e:34:01:fa:fd:53:f7:1b:78:cb:53:07:db:39:
74:09:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:01 2026 by rpki-client