Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier: f9qNoHa4rSVuvadFCNcxPzEkUWOuBn/G4O1wSaHyuog=
Subject key identifier: 5D:63:FF:1B:4E:DC:D9:4A:10:A7:23:6E:C5:48:D5:AE:46:C7:7B:ED
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 019FAA50C6D18113FED846B2D30EA39A7E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 20:00:48 +0000
Manifest this update: Tue 28 Jul 2026 20:00:48 +0000
Manifest next update: Wed 29 Jul 2026 20:00:48 +0000
Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: qqaT5+fgq/PjWwM0kGw/jFgoBLgzAFUDGF23aGxFuIQ=)
2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=)
3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=)
4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:c6:d1:81:13:fe:d8:46:b2:d3:0e:a3:9a:7e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jul 28 20:00:48 2026 GMT
Not After : Jul 29 20:00:48 2026 GMT
Subject: CN=5d63ff1b4edcd94a10a7236ec548d5ae46c77bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:37:bd:25:29:26:89:1b:c4:ec:bc:d2:ba:
cc:2e:e3:6a:5b:a6:b9:61:c2:f8:e9:3b:e9:18:b1:
b9:4c:d2:92:74:a7:ea:69:b7:c2:4c:f1:7f:43:fe:
e7:40:3a:b6:8b:7d:71:49:a0:eb:8c:6f:d7:b0:40:
1a:ac:a2:3c:2d:34:90:a4:af:05:a0:4a:33:f3:02:
27:39:50:9e:4d:36:45:1f:bb:6a:4b:6c:cc:80:5b:
b6:0e:1c:a8:21:06:99:84:8c:37:c6:bb:6e:f9:94:
bc:4c:11:b4:08:30:58:6b:59:f1:61:61:17:98:8e:
d7:37:c4:23:33:f8:4f:39:78:76:c8:79:66:7e:ba:
ce:7c:54:b8:54:02:83:57:71:0a:2d:d9:59:be:b6:
ee:2b:7c:05:6d:9b:56:b1:75:15:6e:d9:3f:3d:b3:
9b:33:83:73:42:a5:08:5a:d4:87:0d:f6:1f:29:41:
ed:f0:2e:30:43:b8:2c:bc:9f:a8:77:01:09:26:6a:
99:c9:7d:fa:7e:7f:e3:1f:6b:26:ce:c1:74:b1:0c:
89:50:1c:9c:21:c7:ce:5d:6a:95:19:61:a5:5f:16:
0e:31:67:e6:87:f5:da:4e:4f:76:3a:63:07:21:20:
ea:a3:43:ac:4a:9e:e2:75:d4:a5:6b:c0:84:67:34:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:FF:1B:4E:DC:D9:4A:10:A7:23:6E:C5:48:D5:AE:46:C7:7B:ED
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:bd:d1:29:fa:2b:58:80:40:bb:a1:2d:30:57:24:07:b5:40:
98:fd:62:f2:d9:0b:f8:cb:84:cc:a2:9d:9a:9a:96:ac:e0:8c:
b5:fd:8c:8c:98:9c:d0:f0:55:f2:6a:30:d2:b7:b6:3e:e6:6f:
6a:24:cc:ab:4f:76:9f:b6:b2:c0:e6:d0:99:8e:4a:90:6c:16:
3b:18:2e:5c:29:06:a7:9c:e4:e7:e6:55:1f:fd:10:6b:b5:c5:
7e:a3:22:6c:71:ed:4f:2b:9d:ab:95:5b:08:24:4e:3f:2b:9e:
88:5d:cd:7f:cc:55:a6:0d:29:a9:53:2b:87:85:97:cd:c8:8d:
7d:6a:4a:06:64:ea:6d:d5:f2:a9:dd:e4:b4:b2:d7:c4:6e:c2:
bc:13:f3:8c:66:b8:0c:7d:ed:51:35:5f:95:6e:76:d4:77:42:
40:94:b7:0f:fb:d9:b7:07:cf:10:c7:13:24:ae:d1:4b:ab:c9:
72:62:09:ef:7e:0d:b7:62:4b:db:24:77:97:0a:15:f0:cc:5c:
d6:59:91:7e:39:1f:6b:35:54:42:c8:b2:8e:90:bb:9f:2b:93:
89:38:b5:72:1b:41:b5:29:51:c8:38:5b:e1:8f:52:3a:d4:ee:
8b:1f:98:33:d4:f9:ac:eb:37:00:0a:07:b3:81:8f:ee:1b:74:
1d:45:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:03 2026 by rpki-client