Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: 3Nl7T8KzLD8gutTlJP+8hHuaBKj9387gsn5KnIX4Auo=
Subject key identifier: 32:B1:25:30:A8:EF:0A:C3:85:3E:6C:94:12:43:A1:12:47:33:9F:01
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 019FAAF53A5670159D4B34AC5EC71B1ACA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: 0119
Signing time: Tue 28 Jul 2026 23:00:25 +0000
Manifest this update: Tue 28 Jul 2026 23:00:25 +0000
Manifest next update: Wed 29 Jul 2026 23:00:25 +0000
Files and hashes: 1: AhAcdKgAbaxev6WZheq94rPVhy4.roa (hash: jnz0tuvjSI9nchLY2GePdtWDuCFuuGK4nahWThqEMJU=)
2: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
3: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: OIwBt6Fui+aLc1o4kQsoz6ppbVQ9sDVlzp52v/JBxMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:3a:56:70:15:9d:4b:34:ac:5e:c7:1b:1a:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: Jul 28 23:00:25 2026 GMT
Not After : Jul 29 23:00:25 2026 GMT
Subject: CN=32b12530a8ef0ac3853e6c941243a11247339f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:ef:ad:b9:b5:2b:2c:ba:3d:14:e9:dc:47:
6a:9d:13:bc:9a:28:ee:0b:d5:8a:cf:24:cc:eb:47:
56:eb:c8:54:df:0c:97:34:19:1f:80:c8:a3:64:ea:
7b:91:88:ec:f9:3c:eb:93:3d:1d:43:84:ee:40:80:
09:85:bb:53:a8:db:f0:01:de:23:d9:f6:06:d0:d3:
48:fa:e9:a9:bc:8a:f7:6a:c0:60:7b:e2:45:1a:0a:
13:6c:a4:01:1f:ee:f5:94:b1:94:db:46:99:06:75:
3f:c3:4e:56:7b:d9:96:fe:e4:00:19:58:c8:90:a1:
17:62:98:ec:21:10:2b:79:e7:62:e8:b4:0d:70:cb:
31:45:30:e7:e1:2e:00:23:4a:11:89:c9:14:70:21:
0d:cd:04:45:03:36:45:dd:b9:87:7c:c9:5e:0a:75:
3e:2f:13:2c:4c:84:16:34:23:d9:1a:55:66:30:95:
bc:22:b0:54:9a:13:07:06:d4:3f:68:d8:09:14:89:
df:15:d1:b3:bb:aa:55:ba:22:78:fb:8c:50:f9:f9:
71:bd:fc:72:b3:93:bb:77:0d:31:5b:b0:f8:d8:c6:
08:63:24:99:d9:85:29:d9:cf:88:42:4e:16:d1:97:
7f:48:57:3c:de:9a:fb:84:28:67:56:aa:9f:18:9a:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B1:25:30:A8:EF:0A:C3:85:3E:6C:94:12:43:A1:12:47:33:9F:01
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:65:b7:bb:3b:17:b6:3d:28:45:e1:45:eb:44:7c:db:4d:64:
5d:ac:0f:58:60:e7:88:ad:ab:a5:55:a6:de:3b:8c:46:82:c7:
e7:ff:a4:bb:c6:02:78:f6:ff:f1:10:19:06:ac:66:ba:d4:b5:
31:17:95:b9:0e:06:07:b3:db:a2:c9:20:29:c6:56:48:18:5c:
8c:91:7d:ad:ad:83:d7:0e:c9:84:80:c9:df:22:8c:3d:4d:d7:
a6:65:da:e3:5f:2c:41:b7:31:f4:c7:9f:f1:85:59:49:27:a7:
61:6b:d6:7f:7f:9d:05:72:27:44:cf:0e:19:b0:07:84:d4:59:
af:96:b0:ce:f0:ce:ae:20:69:53:61:6c:85:44:84:3d:7c:d6:
d9:30:dc:c9:96:2b:5b:0c:8f:a4:fd:7e:40:2c:6a:b1:38:d0:
6e:84:c2:40:ea:48:e2:ec:c5:6b:ec:ec:b0:15:02:b2:74:88:
4a:7c:04:39:e6:a9:6a:0f:9e:80:8c:ff:fb:b0:08:49:30:cc:
eb:b5:6d:8e:70:d6:4e:38:f9:0b:42:ba:2b:5b:34:1d:ba:31:
26:7a:cf:bf:56:46:bc:ea:fd:31:48:07:b2:bf:05:28:6f:0c:
d0:62:d0:1b:f5:59:fe:ff:5a:74:a3:ae:d6:89:dc:0d:43:ce:
99:1b:92:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:53 2026 by rpki-client