Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: Xgi/b3VQGHiOgschB2UcDiRKlYH6qzGskak1rxX+ZGw=
Subject key identifier: 2D:A8:6B:9A:D1:5F:AE:C3:29:6D:91:88:C6:29:74:C5:DE:B4:CA:98
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 019FAABE377F4B774152AF1D9D2EEF7F38DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 10DD
Signing time: Tue 28 Jul 2026 22:00:20 +0000
Manifest this update: Tue 28 Jul 2026 22:00:20 +0000
Manifest next update: Wed 29 Jul 2026 22:00:20 +0000
Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: d4I9fh92bf302hjY4gwFSTY4/LeHJXsUhRFsnoZNc/o=)
2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:37:7f:4b:77:41:52:af:1d:9d:2e:ef:7f:38:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Jul 28 22:00:20 2026 GMT
Not After : Jul 29 22:00:20 2026 GMT
Subject: CN=2da86b9ad15faec3296d9188c62974c5deb4ca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:c9:76:07:dd:eb:40:3b:ea:4d:40:db:15:
a6:80:81:ff:ca:d7:d0:98:a4:27:1d:45:24:4a:1b:
5c:9e:ef:21:85:5d:50:89:b3:ab:03:ca:10:95:4c:
29:d7:bc:18:3c:f8:05:9a:b7:65:29:44:0f:8f:81:
bd:cb:c0:88:2c:fb:ed:e6:aa:6b:ff:e8:12:d0:66:
af:73:ce:57:4e:6f:cf:08:3c:00:b7:55:5b:16:c2:
1f:a9:37:04:bd:df:ab:10:4b:e5:6a:ff:fa:d2:f8:
bc:79:85:21:2b:27:e2:87:f3:e6:19:ee:23:87:59:
fd:9a:3c:b4:d0:e6:02:5e:fd:e4:4c:b2:0f:1a:c3:
f6:fd:07:4d:6c:fc:2d:e8:56:5d:34:83:76:5c:78:
ce:13:4e:1a:3a:32:7e:ae:37:df:9b:a8:99:14:e0:
0e:74:fa:90:9f:9c:cf:03:80:f1:5f:f3:3c:a8:e5:
eb:a0:b2:0d:e0:11:a1:5e:a2:74:72:0d:61:78:22:
43:91:7a:cd:b6:e1:9e:d8:9f:ca:1d:66:d2:3a:ee:
ea:bd:38:3f:fd:e9:c9:e8:da:49:61:66:02:84:d1:
7e:59:5c:0b:ab:74:5c:b1:f2:b7:10:b7:aa:07:80:
63:4d:80:a9:e5:f5:12:86:71:84:6e:2c:bb:03:41:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:6B:9A:D1:5F:AE:C3:29:6D:91:88:C6:29:74:C5:DE:B4:CA:98
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5d:f8:cb:af:91:be:30:7f:25:ef:cb:99:26:7d:2d:78:7e:
40:83:25:e9:32:4f:11:86:dd:30:05:46:87:51:d0:ba:c4:3a:
b2:ad:6f:0b:65:c0:63:c1:fc:e8:15:f9:7b:03:39:38:c5:a9:
29:8d:ec:15:a6:05:23:45:75:ef:b1:0b:18:68:4d:d1:9e:17:
65:a9:1f:c8:32:fd:62:6b:fb:22:e8:0c:0a:4d:d7:59:49:31:
05:0e:95:7d:0d:dd:3b:7a:64:88:ce:b7:b2:12:11:cb:eb:d8:
05:92:b5:73:76:a0:c1:2b:9a:85:ac:48:ce:b8:4b:6f:74:d5:
59:ac:0d:d6:8d:50:f6:0e:04:24:f2:e6:bf:17:ec:cf:e8:21:
dc:e2:33:5d:10:9b:0c:ea:8e:95:ab:67:89:3d:3d:f2:61:0b:
72:4b:37:99:e4:ce:8a:62:a4:99:a4:0d:e9:9c:e4:07:01:99:
6f:d9:74:55:61:87:63:a6:58:36:2b:c9:e8:12:2f:cf:aa:1f:
b0:0f:09:90:05:49:23:81:94:a8:f8:96:9f:8e:f8:6b:57:6e:
84:1a:07:0e:71:20:07:ca:d4:60:69:72:3c:92:86:fd:d2:0d:
cf:a3:d4:14:82:5a:b3:50:f9:27:ac:03:ba:55:68:d1:1c:39:
78:bf:a5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:11:03 2026 by rpki-client