Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
File: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft (raw, json)
Hash identifier: eaE/s1Wx9dHVLXFuSvu3V2um0sxMw9StDeiRsb49obs=
Subject key identifier: C6:0B:03:EE:10:EA:A8:6F:08:9A:D6:5C:08:54:43:34:D6:80:C8:E2
Authority key identifier: 1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
Certificate issuer: /CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Certificate serial: 019FAC75BE996EE555871F7BA380D30E751F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:25 +0000
Manifest this update: Wed 29 Jul 2026 06:00:25 +0000
Manifest next update: Thu 30 Jul 2026 06:00:25 +0000
Files and hashes: 1: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl (hash: c0AHCrTD6pnmqQypV3ZTq6eJJaz1VxFY6TNCdm1z1wU=)
2: V9X49EieL5muWb2FuiaJlUR-F0M.roa (hash: KCwcP0n4ZTZ4GNIBxxk+6aPghXeAJv53hQU1wGojBWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:be:99:6e:e5:55:87:1f:7b:a3:80:d3:0e:75:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Validity
Not Before: Jul 29 06:00:25 2026 GMT
Not After : Jul 30 06:00:25 2026 GMT
Subject: CN=c60b03ee10eaa86f089ad65c08544334d680c8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:a6:0a:99:27:28:79:d1:10:13:13:4e:54:
e5:b1:6d:e4:55:58:26:44:5f:1b:d9:c2:2f:8d:b0:
e8:19:7a:cf:b1:ae:f4:d5:63:b5:9d:ee:ee:e1:38:
dd:ff:5b:2e:04:ae:94:56:d3:9b:5d:92:be:c4:41:
ed:6a:87:ed:f8:0e:58:50:53:bb:86:52:7e:d5:52:
cc:96:9a:06:fe:95:fe:55:3e:c6:f8:56:f1:ad:93:
05:ff:12:10:d9:cd:b4:22:fc:ed:25:ab:9f:05:99:
6f:3a:fb:ca:dc:74:03:4a:a3:90:88:2d:ff:d1:79:
c1:fa:b4:af:15:6a:b9:86:93:40:d6:65:0d:da:36:
7f:3c:74:dd:57:4c:e1:88:40:4b:d2:5d:29:7b:be:
4e:51:fb:92:ab:82:68:40:b1:41:48:5f:55:a8:18:
e5:58:e0:b1:1f:1d:e1:2b:dd:e5:19:b6:5a:ef:3b:
2c:ca:ed:a7:0e:2f:65:36:c9:f2:f0:fc:ec:87:fd:
28:84:0a:48:30:4d:42:27:73:57:d0:10:d5:10:3c:
b0:e6:fb:a9:0b:c6:02:84:f1:3d:eb:df:23:68:12:
88:68:51:d8:38:63:af:b1:04:a8:45:c5:1f:ed:7d:
88:0b:38:de:e9:42:3f:75:d2:3c:50:cf:ca:51:0f:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0B:03:EE:10:EA:A8:6F:08:9A:D6:5C:08:54:43:34:D6:80:C8:E2
X509v3 Authority Key Identifier:
keyid:1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:59:6a:a3:f3:50:ed:93:88:27:8f:69:b2:a8:a4:e6:eb:a2:
53:df:95:c6:da:4c:8a:48:63:3f:19:46:72:a5:7c:7b:03:66:
91:5d:a6:3f:3c:49:a5:e6:b0:40:6d:fe:ad:c1:4c:bc:e4:38:
74:8f:d0:b6:76:c8:56:54:9c:97:90:e7:93:6b:78:50:4c:13:
b9:28:2e:a6:1a:06:49:8d:06:67:76:e9:2d:25:13:0a:c1:d4:
de:94:a7:8c:94:83:e8:2d:03:f9:15:dd:22:ca:a5:ee:45:74:
fc:6f:09:32:dc:e9:4f:c5:9d:a6:83:8a:bc:d9:a9:8d:71:63:
01:65:52:eb:b5:81:37:0d:b7:b9:37:5f:17:e3:f4:f0:c9:b7:
01:a5:18:44:e5:90:8c:62:70:4f:b5:62:a0:b3:20:65:25:f1:
09:22:77:13:4f:6b:b8:ca:01:b7:24:f6:d1:48:d8:11:11:6e:
00:81:64:60:db:60:cd:75:d4:1d:08:5b:e6:a2:63:b1:73:ce:
58:07:23:10:65:81:f8:68:bd:cb:90:78:67:93:c9:eb:51:17:
5f:80:1e:dc:5b:dc:6c:6d:52:9b:11:0e:1b:86:fe:d1:0b:c3:
77:ed:c0:a2:55:c2:8a:6e:d0:ec:72:d5:aa:dc:11:34:88:1a:
3c:d8:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:17 2026 by rpki-client