Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier: HPEuSpU3Qm4isfplSxeJMMDla2lEaY8HEgNSL4oz8hE=
Subject key identifier: 3A:02:0F:FD:30:08:FD:C4:A1:33:76:25:8F:3B:A9:5E:8C:9D:63:8C
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 019FAAF51FE61DC9F7B43508F04FDE21BA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number: 0D5C
Signing time: Tue 28 Jul 2026 23:00:18 +0000
Manifest this update: Tue 28 Jul 2026 23:00:18 +0000
Manifest next update: Wed 29 Jul 2026 23:00:18 +0000
Files and hashes: 1: 3I57kWj-MwOuWGgEJOOA7NVOnaw.roa (hash: u4MWGRCWmsfLRNP506Vpdbs2aaAzu9zhtPD+IDIYvpU=)
2: CnF9cjlgaGUvfor-A11xEctTpak.roa (hash: lSwL0usE/Gb/GkCss8GSY6ht7fo/KB8MqQdEL3prjBY=)
3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: nLEOqGEU4Ho1yE5uI0lmK1BYBwEXPSibF3rSnZ19K7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:1f:e6:1d:c9:f7:b4:35:08:f0:4f:de:21:ba:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Jul 28 23:00:18 2026 GMT
Not After : Jul 29 23:00:18 2026 GMT
Subject: CN=3a020ffd3008fdc4a13376258f3ba95e8c9d638c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:93:c2:9a:33:5d:0e:9a:66:cd:29:e8:c6:
71:c6:03:27:08:bd:31:77:d7:bc:71:3a:af:e2:d4:
54:79:9c:08:3a:68:88:3c:59:97:6a:24:66:34:a3:
a9:7a:96:bd:d5:b8:4f:07:21:79:8d:95:b8:8d:19:
b7:d4:96:23:55:2a:0a:09:dd:36:3d:16:d7:8f:70:
73:2b:bd:42:87:39:44:35:ed:e3:40:7f:b7:46:6f:
ac:52:bc:0e:33:6d:bb:4d:1d:f9:26:a2:0c:22:9b:
75:da:fb:a4:49:b2:50:20:2d:1e:a3:88:20:b3:f3:
4c:ea:ed:31:99:98:02:21:98:cd:64:be:f2:5c:63:
02:d5:57:76:1b:d0:0d:e1:15:f5:b1:4e:73:1b:61:
ed:84:0f:1d:5b:94:32:3a:ac:fd:79:ee:e6:76:50:
7c:6a:02:d5:12:72:bb:56:c6:67:ae:53:59:39:34:
c8:59:a3:46:b3:ec:37:07:0d:fd:26:e3:ec:f1:25:
17:ae:88:3a:76:15:94:f3:33:71:69:88:64:d6:1e:
e2:05:55:62:b5:11:62:43:20:3c:95:df:c4:4e:53:
32:49:6a:17:53:46:62:cd:d4:df:27:b7:f2:94:0a:
e9:dc:c0:89:b0:4d:f1:ad:85:f3:45:06:80:e3:e1:
8e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:02:0F:FD:30:08:FD:C4:A1:33:76:25:8F:3B:A9:5E:8C:9D:63:8C
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:be:3d:a1:c7:66:a7:44:dd:29:fe:92:7f:61:81:ae:16:df:
9c:33:c3:f2:5f:c5:ae:71:0f:83:ec:c7:c3:62:a9:01:97:7b:
35:15:91:2c:25:ca:7d:48:08:7e:bc:ef:a6:a6:59:93:77:d0:
34:5c:a4:9d:b2:fe:96:1d:bc:eb:1f:e4:ae:57:26:b4:44:7b:
94:05:84:1e:13:8c:30:5c:f1:e1:2d:4b:e3:45:2e:72:48:52:
be:32:d6:6d:ae:e5:34:dc:64:60:4f:8f:bb:ad:37:b9:45:d0:
02:9b:15:57:83:ef:cc:cb:f8:98:8e:99:c8:83:59:55:7a:b6:
e9:ad:e1:25:88:99:dc:fe:78:77:f6:8d:fe:d9:53:33:c0:a0:
6f:be:27:16:f5:0b:1f:3f:c3:cf:86:c8:81:ac:4c:8c:10:65:
02:af:78:4b:cc:11:3e:48:9a:9d:e0:8e:be:cc:ec:9a:04:d4:
d0:ac:18:e4:78:86:9a:01:2e:b0:73:b8:d9:e3:e0:5b:06:06:
28:56:91:81:a6:13:d8:10:82:c9:26:82:7b:f4:c6:2d:8a:6a:
aa:3a:b6:72:f0:a4:bb:8b:b5:e8:3d:f7:4d:74:38:61:72:53:
f8:5b:b5:44:de:61:f1:75:57:59:42:99:51:90:30:01:0a:ef:
79:2e:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:55 2026 by rpki-client