Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json)
Hash identifier: yVfjV2Wkb6iGFushjNECudjAkMBTTM/lKq7MRdhZY7w=
Subject key identifier: 77:B4:82:15:75:8D:FB:2F:A3:54:B6:59:1A:96:63:18:82:6D:CA:95
Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Certificate serial: 019FAAF5418C352FD18F4659807F5B0F3281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
Manifest number: 036C
Signing time: Tue 28 Jul 2026 23:00:27 +0000
Manifest this update: Tue 28 Jul 2026 23:00:27 +0000
Manifest next update: Wed 29 Jul 2026 23:00:27 +0000
Files and hashes: 1: H6uqUGEMkw_GDxczJD1M696P_zE.roa (hash: nWnw8H8sn82+YCkD2O0kI6uMQ5WeKNqhPpnI/ZrVopY=)
2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: yC246oFVyG8Yx25AbvBIHu85tLdkFCRbC+h2rYkzKBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:41:8c:35:2f:d1:8f:46:59:80:7f:5b:0f:32:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Validity
Not Before: Jul 28 23:00:27 2026 GMT
Not After : Jul 29 23:00:27 2026 GMT
Subject: CN=77b48215758dfb2fa354b6591a966318826dca95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:81:dc:37:ba:52:3e:ff:d1:9b:a1:48:41:01:
5b:0a:d7:6f:f5:b6:20:81:cc:12:47:c9:b7:78:fa:
ed:e9:d8:60:4f:41:b9:c3:a6:69:86:7d:c7:45:5e:
0f:cd:21:b7:72:be:68:5f:57:5d:80:6e:60:24:88:
91:99:04:d8:95:32:05:a7:06:70:96:05:6e:23:62:
fb:70:3e:61:1a:8a:29:01:b2:81:c4:95:56:64:6f:
40:a8:f4:c5:a6:f2:79:86:34:0d:0d:4c:87:6f:3c:
24:46:15:03:45:bb:3c:d3:36:7a:6c:cd:ba:03:37:
8a:a4:15:3d:56:c3:c1:a2:13:4e:19:59:d8:f8:e9:
dc:10:e3:67:3d:27:b2:ff:31:80:4f:c9:c2:ec:ed:
a6:2a:76:50:22:14:14:e0:a6:14:33:25:9d:c9:74:
c7:39:0d:92:96:7a:e0:0e:6b:0c:08:3e:52:31:f1:
b6:a1:58:41:29:5f:82:18:6b:30:a0:ce:05:60:fa:
ad:f7:7a:79:59:7b:ba:57:aa:fa:b4:61:9c:b1:b3:
6c:c4:54:72:77:ce:93:e2:3f:38:57:0e:98:d4:34:
d5:a0:4d:04:5f:ab:86:28:f8:35:07:62:71:32:a7:
fc:a0:5d:3f:79:5e:4b:22:62:e4:e7:a2:64:09:39:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B4:82:15:75:8D:FB:2F:A3:54:B6:59:1A:96:63:18:82:6D:CA:95
X509v3 Authority Key Identifier:
keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c7:fd:2e:ff:0f:e5:68:1f:92:2f:22:09:0e:08:5a:25:46:
50:f4:5d:89:f1:f9:dd:86:2b:2d:7a:95:ec:cb:c6:be:76:6b:
7b:24:df:8c:9b:33:68:0c:e0:c2:0f:00:69:a5:32:69:f3:e6:
e1:e7:d7:72:0b:76:df:82:be:6a:7b:c8:0b:97:e3:f0:11:0b:
2a:3e:04:a7:07:f6:88:c5:8a:13:f0:d6:34:8d:ad:5f:b7:31:
ae:b6:63:58:9a:2d:c0:d2:ef:f6:c4:16:77:61:56:05:e0:4e:
63:90:93:16:b1:62:e0:a1:46:47:c4:34:0c:71:7c:40:ef:d4:
0f:3e:3c:43:c5:69:46:a5:34:be:d1:70:84:c3:d4:07:7a:03:
27:1b:06:9a:4f:52:94:9e:91:f6:44:62:25:e8:bb:41:69:d8:
67:36:82:a8:4a:a0:a1:d9:ec:eb:c9:6c:be:f3:af:c4:46:ab:
8c:40:e3:7b:ff:b5:f0:18:3e:ef:25:b4:5a:dd:16:3e:d3:d3:
00:c9:27:0e:f6:47:38:ba:55:36:b9:7c:31:ea:d0:92:5b:a2:
a5:fe:84:2a:02:6f:10:26:be:ad:20:b7:ff:5c:b9:0a:10:9b:
cc:c5:bd:f9:8f:12:82:2c:fb:6a:7e:88:d9:df:6d:89:8f:48:
5d:a7:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:11:53 2026 by rpki-client