Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: ENGT9uB9ydgD7oF7sqOQ8GS0qxVxx97Xbo9vtBAilBQ=
Subject key identifier: 85:96:B3:DD:0B:86:3A:30:46:83:91:F3:02:B0:64:1B:73:36:59:36
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 019FAA87991294751B8E0FC8C8B15FD6E225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 21:00:40 +0000
Manifest this update: Tue 28 Jul 2026 21:00:40 +0000
Manifest next update: Wed 29 Jul 2026 21:00:40 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: xb6JAtUhdXr4JJy+s0N//poBsHwATS2If2D2lsuqVX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:99:12:94:75:1b:8e:0f:c8:c8:b1:5f:d6:e2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Jul 28 21:00:40 2026 GMT
Not After : Jul 29 21:00:40 2026 GMT
Subject: CN=8596b3dd0b863a30468391f302b0641b73365936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:0d:d0:fc:0c:b0:18:c4:1c:89:9b:fa:ae:
74:75:3c:9e:91:f6:49:21:dc:3f:11:47:89:38:ca:
8a:d2:f9:8a:5a:b3:2f:9b:5f:c8:ba:c9:da:d7:79:
17:9b:08:ff:b8:b6:2c:90:96:ca:80:ce:0b:65:0f:
45:ae:27:f5:6a:e0:dd:bf:cb:60:cf:2e:e0:32:3d:
8b:6d:36:a2:14:d3:25:33:67:3d:24:84:7d:19:8f:
5e:d6:a6:7a:c6:b5:ad:d2:2e:96:ad:71:45:f8:ad:
76:f8:d5:8d:95:57:44:27:62:87:2c:a6:07:1e:19:
c0:e0:4c:bb:32:14:c7:96:25:8c:31:88:e0:2a:25:
87:d2:1b:d1:72:74:e6:03:c1:78:7c:98:7b:49:d5:
75:95:68:09:ae:9a:47:fe:cd:6b:7a:a0:90:93:c5:
f0:fa:c3:50:be:68:51:fb:fc:51:6a:48:95:d3:76:
cd:7e:82:2d:99:69:1f:c9:73:bb:8f:25:14:b6:ce:
42:00:4c:67:57:ea:18:61:19:3f:ec:e0:ab:b0:2a:
44:7f:e3:bc:3a:e8:a0:3c:40:60:c6:0a:a6:69:e4:
f0:1a:2e:e0:78:2e:61:1d:23:39:96:65:1e:2c:02:
93:eb:f3:be:bb:01:78:71:5c:d6:2d:cf:ed:7e:b8:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:B3:DD:0B:86:3A:30:46:83:91:F3:02:B0:64:1B:73:36:59:36
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:93:4f:5b:33:09:13:90:30:06:95:31:2d:95:8e:8e:db:
1e:df:d3:08:df:48:b0:e6:02:17:2a:2a:20:0f:3b:54:e3:a2:
56:27:0c:2a:88:c2:72:0e:ed:f3:74:4f:4e:99:cf:5c:ce:f0:
8b:79:ca:65:14:5b:97:c2:65:28:fe:04:44:99:52:3c:aa:79:
6d:3e:ed:5d:d3:f8:b9:57:f3:e9:29:d5:39:d7:06:8d:00:cf:
0c:db:49:4c:66:d6:9d:cc:9a:18:46:d8:03:f0:a7:0b:a6:f2:
9a:9f:a8:0b:09:39:10:54:30:4a:59:06:f2:14:7e:15:e2:88:
23:a4:c4:21:9d:17:dc:5c:6a:46:44:73:9b:3d:59:b1:96:d8:
ff:0a:53:04:c5:c2:2b:87:2f:fc:80:77:96:1a:47:cb:79:2f:
8d:c2:e9:4b:da:4d:f1:32:8c:51:0a:82:29:b2:c8:61:d3:58:
c5:82:e7:59:62:cd:69:01:e6:20:0a:a8:16:fb:66:97:92:0c:
ae:e4:86:a3:c8:cd:ed:54:d9:49:c2:2e:4f:1b:40:ed:9e:39:
ee:b8:eb:89:03:65:55:84:56:0a:69:84:25:b5:c8:3b:66:cd:
20:bd:59:2e:5d:67:3c:5a:1f:28:a8:21:35:76:c5:b2:e5:9c:
af:a8:71:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh5kSlHUbjg/IyLFf1uIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw
Y2QzZTcwHhcNMjYwNzI4MjEwMDQwWhcNMjYwNzI5MjEwMDQwWjAzMTEwLwYDVQQD
Eyg4NTk2YjNkZDBiODYzYTMwNDY4MzkxZjMwMmIwNjQxYjczMzY1OTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT4N0PwMsBjEHImb+q50dTyekfZJ
Idw/EUeJOMqK0vmKWrMvm1/Iusna13kXmwj/uLYskJbKgM4LZQ9Frif1auDdv8tg
zy7gMj2LbTaiFNMlM2c9JIR9GY9e1qZ6xrWt0i6WrXFF+K12+NWNlVdEJ2KHLKYH
HhnA4Ey7MhTHliWMMYjgKiWH0hvRcnTmA8F4fJh7SdV1lWgJrppH/s1reqCQk8Xw
+sNQvmhR+/xRakiV03bNfoItmWkfyXO7jyUUts5CAExnV+oYYRk/7OCrsCpEf+O8
OuigPEBgxgqmaeTwGi7geC5hHSM5lmUeLAKT6/O+uwF4cVzWLc/tfrhaRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWWs90LhjowRoOR8wKwZBtzNlk2MB8GA1UdIwQY
MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt
YzQzYWIyYTEyZDU1LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1
LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACk+TT1sz
CROQMAaVMS2Vjo7bHt/TCN9IsOYCFyoqIA87VOOiVicMKojCcg7t83RPTpnPXM7w
i3nKZRRbl8JlKP4ERJlSPKp5bT7tXdP4uVfz6SnVOdcGjQDPDNtJTGbWncyaGEbY
A/CnC6bymp+oCwk5EFQwSlkG8hR+FeKII6TEIZ0X3FxqRkRzmz1ZsZbY/wpTBMXC
K4cv/IB3lhpHy3kvjcLpS9pN8TKMUQqCKbLIYdNYxYLnWWLNaQHmIAqoFvtml5IM
ruSGo8jN7VTZScIuTxtA7Z457rjriQNlVYRWCmmEJbXIO2bNIL1ZLl1nPFofKKgh
NXbFsuWcr6hxpA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:36:47 2026 by rpki-client