Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: Y/8OfzbdLz0DimumhEPfh2LgN6RtcAhrCc5gsa3NaQw=
Subject key identifier: 45:F3:84:D6:2E:5B:DE:AF:1A:87:21:C7:C6:EE:4D:3D:E8:DE:1C:9E
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 019FAB63609DDADF9E081F7EBD8581130925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 01:00:44 +0000
Manifest this update: Wed 29 Jul 2026 01:00:44 +0000
Manifest next update: Thu 30 Jul 2026 01:00:44 +0000
Files and hashes: 1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: 7tnxgiWVVAud9VJlcdAFwveqKv2IQKyFMMrLz1KaQOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:60:9d:da:df:9e:08:1f:7e:bd:85:81:13:09:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Jul 29 01:00:44 2026 GMT
Not After : Jul 30 01:00:44 2026 GMT
Subject: CN=45f384d62e5bdeaf1a8721c7c6ee4d3de8de1c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:89:32:50:26:7e:80:60:d9:c5:18:5c:04:
e7:73:72:9c:3a:7e:4f:6f:13:b7:72:aa:51:b7:e5:
37:b1:f7:2d:7c:92:50:0d:2e:e9:0e:2c:98:8d:df:
47:b8:03:9f:7a:e6:d7:35:4f:ef:a0:36:3d:b6:d1:
71:f1:fe:3b:5d:00:90:49:69:56:19:be:77:53:73:
aa:7b:9e:14:61:60:85:c7:2a:d8:3a:90:8d:09:07:
31:ef:88:82:fc:94:30:0f:24:b3:50:c8:85:eb:2f:
ed:99:77:e2:c0:ef:a1:5a:56:9c:74:4c:c3:a0:4b:
8b:48:6c:34:91:3d:65:d9:da:c9:49:e2:40:47:e6:
75:b6:3f:4b:0c:63:41:ac:8a:59:17:19:c3:a1:2f:
87:02:03:d4:63:41:5e:4d:56:e6:db:da:90:77:26:
88:0a:a1:26:6d:95:4e:2b:2d:ba:8e:2a:98:54:79:
1b:53:f0:1f:2d:96:9b:aa:8c:1b:9d:f5:13:31:2a:
9b:a3:c2:d2:22:84:34:91:1b:e2:a7:c0:5c:a5:f3:
14:2e:fa:5b:22:07:c7:2e:3a:32:13:96:26:85:aa:
0c:bc:b2:12:c6:6e:cd:7d:5a:7a:43:db:a4:4a:c3:
a5:96:94:5b:d2:1b:b2:e0:90:b6:29:36:ef:bf:97:
3d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F3:84:D6:2E:5B:DE:AF:1A:87:21:C7:C6:EE:4D:3D:E8:DE:1C:9E
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e3:e9:4d:49:27:84:71:50:d9:3f:b3:2f:bd:40:d7:ed:82:
a0:6f:67:df:0b:2f:f2:71:33:4c:58:ca:4d:a3:cf:35:a7:21:
ce:7d:78:45:0d:0c:25:1f:3d:b4:92:ba:6a:7a:14:ee:80:01:
5b:51:bf:32:68:37:8d:06:3e:dc:e0:2d:3e:2b:69:95:f3:e9:
17:59:cb:c8:50:62:d7:d9:91:52:b5:22:3e:61:c5:87:ba:5e:
b6:84:48:4a:a9:06:85:12:49:44:83:d5:83:a1:6b:1b:e4:55:
b4:ee:d5:69:30:71:86:2c:36:ba:79:82:c4:5b:47:0b:4b:6e:
77:62:f8:71:06:80:3a:2a:24:1d:34:de:95:7d:f9:c6:2f:9f:
7c:4a:7b:20:19:bd:a7:e8:69:83:7f:59:aa:8b:5f:a7:89:71:
64:b6:57:8b:c5:a1:ca:bc:63:92:33:45:e7:b4:7e:14:77:7f:
2e:1e:f8:45:92:c0:75:66:0f:ef:49:a4:4f:ed:9e:04:2d:f7:
a9:c0:6d:bd:da:f4:34:65:12:7b:af:fa:7f:22:0a:c6:7a:15:
73:5f:1b:1b:f6:d7:2b:1b:74:b4:31:0b:9c:14:a2:11:9d:6d:
b5:53:15:fa:3a:11:f5:e5:61:ef:cc:3c:ab:f1:08:34:60:2d:
f3:7c:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:51 2026 by rpki-client