Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: 9Y1vPx7QhC3GTQCUqyRZVGRwIt/TLq7xpfHOmgkpgD4=
Subject key identifier: EE:01:09:E6:8B:CC:E8:67:DB:DD:71:97:E2:6E:A9:3F:B7:8C:6F:17
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019FABD154622FCA02087493409B74F909E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 0257
Signing time: Wed 29 Jul 2026 03:00:50 +0000
Manifest this update: Wed 29 Jul 2026 03:00:50 +0000
Manifest next update: Thu 30 Jul 2026 03:00:50 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: h8toHfxvKAD6dsg8w7XjMAxik3UsLHmfiMAXY5LrvOo=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:54:62:2f:ca:02:08:74:93:40:9b:74:f9:09:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Jul 29 03:00:50 2026 GMT
Not After : Jul 30 03:00:50 2026 GMT
Subject: CN=ee0109e68bcce867dbdd7197e26ea93fb78c6f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:63:cb:98:fa:aa:2f:f8:a5:a2:cf:06:26:
6f:c8:a2:36:cd:88:b4:c4:83:95:c9:c8:77:eb:10:
b3:3d:34:5e:b4:06:55:a8:20:86:f4:4f:f8:f2:9e:
9e:7a:27:97:a4:d0:38:aa:dd:22:9d:18:af:61:da:
15:b5:67:47:0d:c7:9f:2e:43:fa:0c:47:de:49:91:
b3:f9:cc:16:14:6c:37:c2:4e:d4:83:ee:c6:f0:c4:
21:e4:e6:48:2d:37:21:b4:a1:21:49:da:ed:47:9b:
7e:bb:eb:bf:6b:56:cd:6b:b8:60:e8:9f:38:11:33:
88:35:a2:91:2a:65:79:9b:8b:fb:cc:64:0b:5a:fc:
da:31:17:5e:6e:b0:0d:26:81:47:a1:06:33:ca:e0:
88:4d:c9:c8:bb:1c:16:83:61:3f:78:f0:e1:67:76:
8e:ae:f9:26:60:98:a9:3a:e2:99:61:89:a7:6b:4e:
41:bd:f8:f9:b7:5b:e0:3c:9f:3a:e2:06:db:21:30:
b2:25:4e:62:c8:99:09:67:b9:fc:8d:7f:64:b6:49:
37:29:c2:31:f3:b1:8a:c2:dc:48:d8:74:98:7e:b6:
8c:90:3f:6c:32:80:9c:56:84:78:c0:c1:93:f8:b2:
5a:c9:40:05:3a:26:75:e5:6e:d0:b6:5e:df:00:d2:
e9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:09:E6:8B:CC:E8:67:DB:DD:71:97:E2:6E:A9:3F:B7:8C:6F:17
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:51:9f:50:7b:88:4e:8f:51:f7:06:94:57:ac:b5:2c:26:9b:
22:4f:89:35:2a:77:1c:1e:94:03:3c:ae:c8:71:c0:fd:52:9f:
f4:d3:67:f0:a0:3a:97:f8:8c:3b:1e:de:c4:96:ca:a0:06:d5:
01:77:7f:20:44:a5:1c:7c:2c:6d:b6:bb:01:88:82:c1:fc:4b:
35:f6:f8:d1:0a:df:76:c7:20:7c:b5:9d:40:b9:b0:4b:8a:24:
c3:8e:9d:99:66:ed:17:79:e3:64:12:c8:ca:4e:93:c2:50:3e:
81:5c:42:f0:e9:bb:62:6c:5b:a4:e0:90:12:3b:70:44:cb:80:
ec:13:52:0c:08:32:8a:65:c4:f0:7a:38:37:d4:36:96:36:1b:
c0:40:7e:6d:e0:29:d1:0e:8f:cd:da:37:13:f3:a9:cd:1e:01:
ef:bb:9e:f2:e8:d2:9e:d3:a8:21:0e:97:31:4d:46:65:6d:c7:
bc:82:57:09:77:57:71:c9:02:2c:ed:8c:19:23:75:c0:38:84:
15:fb:68:4f:43:cb:39:a1:ef:1c:b3:66:4a:f4:4d:a9:96:f0:
54:74:43:92:fe:4f:c3:4b:69:63:0a:93:53:cf:43:33:5e:15:
da:26:fd:64:21:ca:30:38:df:0c:c8:ed:b4:44:e6:1f:1b:e7:
01:70:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:02:13 2026 by rpki-client