Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: FY16efU4rPq7JXryOu9ALQ6bZ9uwm1uFcRVab34Q/1c=
Subject key identifier: 6C:4C:31:79:4C:F1:49:95:55:01:47:2A:14:D5:44:B6:AA:9D:2B:A0
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 019FAC07C0C8BCDE4C1C77E227E133DF86FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 1581
Signing time: Wed 29 Jul 2026 04:00:16 +0000
Manifest this update: Wed 29 Jul 2026 04:00:16 +0000
Manifest next update: Thu 30 Jul 2026 04:00:16 +0000
Files and hashes: 1: R833NOdXTD2aQWG3JavzKd06mys.roa (hash: fWZj94n90bNsji3CFK3WkNid37wFqWD8C1Qx/wwtaQQ=)
2: ZmLewUIWz9_zdShetR7Jdzl8lfo.roa (hash: fPaCPLobKeVWk/RzinoeDdlx4MxMtKzniHguRoc5v/k=)
3: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: v40k6la58JH5VBHgOPQaK/GBBZYWF/pR7BgpfMHrhgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:c0:c8:bc:de:4c:1c:77:e2:27:e1:33:df:86:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Jul 29 04:00:16 2026 GMT
Not After : Jul 30 04:00:16 2026 GMT
Subject: CN=6c4c31794cf149955501472a14d544b6aa9d2ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:51:9a:f3:78:37:e0:57:19:70:68:3a:9d:
93:fd:fd:e4:1e:28:83:49:1d:cf:87:8d:8b:c4:4b:
0f:21:53:a3:61:8e:47:78:6a:ae:41:da:61:6b:a1:
a1:14:8f:99:da:72:4c:f6:0c:29:9c:7f:07:48:c0:
a9:05:58:1d:ee:01:d8:a3:a0:15:72:3b:13:6c:a8:
b3:ec:f8:29:77:94:0b:65:bb:cb:dc:7e:53:96:25:
bf:6f:f8:80:9f:e3:7a:80:02:76:f2:0f:1a:dd:87:
88:59:2e:c5:28:1e:79:d5:e0:7a:7d:60:6c:1c:b9:
ed:f5:b1:c6:8e:e1:62:46:f7:fc:ae:16:8c:24:16:
d9:fc:38:a1:13:c2:f1:be:ef:0f:f9:93:ae:28:c6:
cf:23:4d:38:9d:f5:f3:e5:ab:e8:c1:a3:99:6b:8e:
bd:30:99:f5:ac:75:2f:34:63:82:df:9b:2c:78:4e:
31:13:c4:69:60:b9:b3:d7:f6:88:27:95:0b:35:29:
bf:01:76:73:f4:aa:06:12:ce:31:53:1f:04:cf:c7:
f8:f3:ff:4f:6e:c7:a3:d9:f1:69:9d:82:b9:31:3f:
41:21:f2:99:4f:1c:ab:46:ee:b5:7f:97:43:e7:c5:
2e:cf:52:b2:2f:1e:08:c7:93:49:6b:b8:42:4a:fe:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4C:31:79:4C:F1:49:95:55:01:47:2A:14:D5:44:B6:AA:9D:2B:A0
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:36:46:03:37:30:1d:f2:d1:04:a8:8e:c4:0f:c3:2e:1b:ab:
d6:29:ad:51:e1:cf:59:ad:2d:ce:21:b0:61:a0:df:8f:52:9f:
b6:a5:1d:01:6a:12:80:e9:7b:54:f7:2c:0a:ac:c0:90:b8:70:
58:20:12:01:ca:f4:a5:df:63:4a:0f:93:58:15:c8:1c:7f:61:
aa:8b:6e:b4:54:0c:28:f9:fb:7c:86:6f:48:85:88:60:1f:fa:
10:a0:e6:0f:f7:67:3a:d6:11:a5:14:91:2a:74:19:65:cb:7a:
6a:17:b1:b6:9e:ed:11:15:58:97:a2:52:1b:c3:27:ac:8e:78:
15:23:ee:4d:97:a4:c9:7e:93:1e:9d:f7:eb:57:7e:0d:fb:62:
7f:e4:a6:aa:73:1b:d7:7b:44:6c:fe:4f:f8:21:72:d9:01:f6:
f2:b6:6a:3e:a6:92:08:89:a8:74:6b:a1:61:bd:a8:4e:d0:a1:
5a:9d:ed:d9:4e:69:07:04:d3:4d:d1:94:72:1e:a4:4a:6a:06:
fa:07:cb:8b:84:a2:c1:48:a0:97:7f:ef:50:4b:ac:70:e5:46:
c6:bf:7f:24:fb:67:50:5b:96:fc:19:4a:78:7a:08:52:47:98:
a1:3d:3e:f3:6e:e0:1e:8e:88:b6:a2:69:47:9e:73:7b:9e:57:
70:a3:de:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:15:33 2026 by rpki-client