Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: nJIGcN9PZjPNGDeQsO7gXbYKexXMeuTnDfR03ucWTiE=
Subject key identifier: FA:9A:CA:18:C7:40:9F:80:75:76:73:B7:2B:B6:1E:A0:0B:05:6E:71
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 019FAD51C8EBBC198C6A0F178DBFFC223C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 10:00:45 +0000
Manifest this update: Wed 29 Jul 2026 10:00:45 +0000
Manifest next update: Thu 30 Jul 2026 10:00:45 +0000
Files and hashes: 1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: Lxk79L+bP6kC9Z0033JaIQzT4B1Q5tfPz/cLkrSJGWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:c8:eb:bc:19:8c:6a:0f:17:8d:bf:fc:22:3c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Jul 29 10:00:45 2026 GMT
Not After : Jul 30 10:00:45 2026 GMT
Subject: CN=fa9aca18c7409f80757673b72bb61ea00b056e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c8:0c:b7:dc:6d:e9:4a:4c:88:7c:48:f3:89:
d4:e2:a8:1d:94:6a:22:d1:34:9e:81:75:4a:fa:24:
06:3c:ff:10:4e:cd:d6:2b:e9:97:18:3a:7e:05:b7:
7f:e0:92:84:06:c4:52:ab:f2:9a:ae:4a:9f:93:ab:
88:52:e0:fd:d6:77:2d:1e:8c:d1:2b:56:8d:ad:3f:
65:47:f4:45:e5:0a:a1:34:b4:ae:f4:29:82:58:b3:
02:e8:0f:42:80:cb:88:5a:ec:1e:8f:f2:71:11:78:
1a:0e:e0:88:69:48:81:5a:5f:6e:41:54:58:a7:39:
18:90:25:ce:1e:c0:1a:6a:a5:df:f3:b3:35:20:93:
68:23:44:3e:f6:45:72:3a:71:dd:ee:a5:2e:f4:67:
bc:ee:65:35:db:ff:e4:e8:15:d7:45:38:23:69:12:
13:3a:e7:2d:f1:d5:6e:6e:99:b9:1a:91:82:ab:a0:
7f:ee:a3:07:cb:6b:0d:77:1b:2e:ab:8d:ea:e1:8c:
92:d2:f6:59:15:f3:4a:5d:97:b6:ba:52:6e:95:6b:
7b:9b:92:37:3e:10:2e:e6:1a:24:e6:c0:40:3c:f4:
a0:1d:13:e7:e8:b0:e0:47:82:3f:71:64:b6:41:26:
a9:d7:de:b2:27:d6:46:00:43:6d:4b:17:40:13:88:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9A:CA:18:C7:40:9F:80:75:76:73:B7:2B:B6:1E:A0:0B:05:6E:71
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f8:46:0e:60:fb:d6:e1:bf:af:f8:e5:d3:bd:31:26:c5:93:
b7:32:72:0f:32:f8:7c:01:b7:ba:fa:35:47:42:42:32:ab:50:
49:c9:c8:14:58:f2:3b:16:0c:c6:cf:4a:01:73:ed:f4:6e:47:
33:b3:78:64:fa:96:55:e3:24:ca:ac:9a:0e:4b:37:a9:b4:be:
bc:e0:15:e4:8f:74:67:b6:05:6a:22:f5:b4:30:3b:bf:a8:c6:
a6:80:9d:53:cd:21:e8:99:b6:c9:fc:95:1a:3c:16:83:c1:1d:
8a:2b:b5:8b:92:24:e7:a1:d3:31:26:f4:95:69:6a:f4:31:0e:
37:45:65:5a:ea:e8:62:d8:ae:2f:10:74:10:05:8d:1d:e1:54:
66:d8:a0:56:19:30:42:1e:0b:04:f7:e4:fd:01:3b:ee:0b:57:
15:c2:bb:bf:55:7e:5a:40:ea:16:fb:ec:86:38:6c:1b:f4:a8:
2a:53:31:8a:18:9d:f1:5c:fe:3c:d7:9c:96:ca:4e:2e:d9:9b:
a1:7e:b6:82:de:d6:9a:ce:46:a2:87:bb:85:9d:48:bd:7e:5e:
1d:ee:77:6a:2f:66:fa:c0:fa:b4:29:f1:1d:dc:14:36:bb:5e:
9d:cc:2b:3d:29:63:b5:9e:8a:08:70:55:9b:c3:54:7a:7d:79:
03:8a:14:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:27:09 2026 by rpki-client