Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: FimGa9MR6gPlJdweOCr4R8pjwZ7RoW16XCbFk6xylhg=
Subject key identifier: E7:C2:37:FF:AF:86:C1:41:6B:20:2F:40:10:66:D4:6C:D8:8F:66:B4
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 019FABD1473B6D7F9D0DA7B4F8F6AC233278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 03A5
Signing time: Wed 29 Jul 2026 03:00:46 +0000
Manifest this update: Wed 29 Jul 2026 03:00:46 +0000
Manifest next update: Thu 30 Jul 2026 03:00:46 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: xKrvmKyIYpi7QqFIerLO5xYtB6yqahTKBrBH60tsW58=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:47:3b:6d:7f:9d:0d:a7:b4:f8:f6:ac:23:32:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Jul 29 03:00:46 2026 GMT
Not After : Jul 30 03:00:46 2026 GMT
Subject: CN=e7c237ffaf86c1416b202f401066d46cd88f66b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:a6:17:d9:a4:f7:89:2f:4a:0f:1a:e0:61:
de:cc:2e:1b:ac:4f:57:6f:7e:ab:81:77:f6:80:e7:
3f:fb:04:88:a6:a9:c4:5d:91:33:53:c7:63:47:fa:
f7:5c:55:f4:3b:50:cf:d4:65:de:dc:71:a6:e9:91:
ab:8c:9a:c6:2a:42:ec:31:26:35:f0:04:3a:d8:3b:
c4:84:73:15:05:05:8e:59:f8:c0:67:71:f0:2c:94:
2d:08:8a:4a:fd:00:e1:2d:fc:c2:4e:1b:95:c2:78:
78:28:b3:9f:85:d6:5d:88:71:a9:92:fd:ab:83:9b:
b0:35:2b:5f:c6:e9:56:9b:6f:95:1d:61:5a:df:d6:
de:76:06:df:91:a2:47:38:fd:51:31:9f:b1:ed:46:
72:70:c1:02:55:dc:75:79:4f:e2:08:60:2e:eb:8b:
ba:8c:8d:b4:b6:a8:83:58:69:72:ff:7f:42:43:bb:
98:02:07:31:93:b3:a7:12:67:e9:7a:9e:3c:09:61:
e1:d3:69:c7:3e:7c:02:0b:9f:93:82:d7:bb:48:dc:
27:df:9f:ba:be:71:9b:bd:89:e5:dd:e6:82:04:38:
79:17:61:1a:56:86:95:e2:d1:e5:0f:b5:cd:e7:ef:
3f:3d:25:a7:aa:be:42:3c:fe:81:5b:39:a2:41:92:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C2:37:FF:AF:86:C1:41:6B:20:2F:40:10:66:D4:6C:D8:8F:66:B4
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:34:19:2a:d8:ef:63:dc:85:f9:58:8f:38:9f:59:50:d0:a0:
df:ac:bd:d1:da:18:03:e1:4e:c7:80:57:9a:8f:00:6d:cc:ae:
65:40:89:81:52:e9:69:1f:2c:3d:7c:a8:20:26:f6:e5:5b:8d:
24:55:c4:d7:c2:e9:65:65:47:73:26:0c:db:4d:43:ae:b5:4f:
10:4b:3a:28:4d:92:36:21:ee:00:46:3b:4f:96:84:d3:17:18:
cc:09:74:40:fa:dc:40:44:7c:e3:2c:74:f5:69:0c:76:53:4e:
d6:25:30:62:65:79:e2:d3:fc:07:20:30:31:61:0e:ac:2b:0b:
38:3f:86:2c:d9:c2:3a:5a:ca:12:2f:6c:d0:fd:2f:f9:6d:42:
bd:47:42:d1:84:dc:92:84:12:6a:ad:74:ca:00:57:88:36:38:
cf:90:b8:6f:90:4e:bc:98:77:1b:75:76:7f:68:ae:3f:e0:80:
09:f0:9f:fe:4d:29:56:46:4d:d4:a7:e5:35:1f:b6:6e:ee:45:
94:cd:86:6f:b3:33:88:59:ab:57:fd:4e:3e:c3:dd:a2:73:dc:
cf:40:c2:6b:72:3d:46:fa:d3:89:94:8f:c6:e4:ef:ab:c4:09:
30:82:d3:ce:55:47:81:4f:dd:12:a7:c1:e3:55:ee:fe:30:b4:
db:44:b9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:09:20 2026 by rpki-client