Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: kQMGfycqz7ssprEbfV1q2vM4X+xNYfiWCPUK/Sup5ag=
Subject key identifier: 78:EB:DF:2F:C0:0A:8A:DF:7E:0A:01:CF:F6:88:6E:41:6D:63:10:F2
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 019FA93E68F573CC961D039A28B0BB34F0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 09A4
Signing time: Tue 28 Jul 2026 15:01:07 +0000
Manifest this update: Tue 28 Jul 2026 15:01:07 +0000
Manifest next update: Wed 29 Jul 2026 15:01:07 +0000
Files and hashes: 1: FC-j2DCq34hCFuPalVqFP_Va_c4.roa (hash: jfYCQqEdA0WNXwP1ahEI1VJ/4GR5skI19EQziW64bRA=)
2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: yarOG0VQF6F6J/RDiy6zMuX8VMBs7B96622O/yv47bg=)
3: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
4: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:68:f5:73:cc:96:1d:03:9a:28:b0:bb:34:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Jul 28 15:01:07 2026 GMT
Not After : Jul 29 15:01:07 2026 GMT
Subject: CN=78ebdf2fc00a8adf7e0a01cff6886e416d6310f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:77:e4:1b:c5:83:ca:45:b8:13:20:f0:37:
a7:b6:91:70:00:04:0b:56:ba:38:04:77:65:ed:7d:
7b:68:81:f3:72:c6:e4:6d:bf:ee:b0:2d:61:2d:96:
0e:e4:fe:a8:05:68:e3:07:37:7e:58:5e:60:c3:2f:
b9:36:51:e3:2a:29:90:8f:a1:2f:9c:06:24:c6:25:
da:3e:82:d8:81:d4:8d:b6:73:e2:c5:ed:67:a1:48:
41:6c:df:23:4a:fb:28:12:0f:16:9d:8d:50:0b:c9:
17:2a:92:ed:e2:50:68:ea:04:d4:ea:61:83:36:d5:
5a:79:df:54:15:84:1b:ea:f5:25:80:ab:35:eb:dd:
e3:ca:04:70:3f:70:ac:b0:e5:60:f2:cd:be:95:15:
de:98:1a:3e:82:9d:76:15:84:02:d3:2b:85:4e:f7:
e1:58:db:7c:b3:d1:1b:14:5a:9c:77:15:bf:9d:f5:
7d:28:71:f1:90:48:b2:2f:c7:72:5c:57:6b:4c:80:
fc:e7:0a:09:bf:b9:12:a1:96:62:f2:73:8c:ce:d7:
78:e0:c5:46:be:d1:2a:2a:17:f0:bb:38:1e:7c:d7:
44:22:a6:6b:89:cd:c0:32:fc:e3:70:9b:9f:41:bf:
d3:34:34:39:71:a2:4d:b0:41:a8:b1:13:4f:72:bb:
65:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EB:DF:2F:C0:0A:8A:DF:7E:0A:01:CF:F6:88:6E:41:6D:63:10:F2
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7e:63:6a:16:35:88:cc:a4:1c:c1:1d:13:25:0b:52:75:c8:
c5:d4:5c:84:e9:7b:15:f7:f0:b8:f8:18:6d:e8:b1:9d:e2:f6:
35:6b:6c:15:5f:5e:d1:b4:12:ff:c7:43:5f:db:86:81:fe:ad:
80:61:1b:34:dc:92:f5:a2:39:9c:32:77:0a:6e:af:2f:e7:df:
6f:7e:db:28:23:ae:0d:fa:34:08:11:ac:bb:7f:21:5d:7e:f4:
11:94:2f:51:9b:aa:d9:59:2c:6c:84:0e:35:16:2e:9a:84:2d:
05:3a:70:15:27:cd:46:6a:a1:b6:35:7a:50:44:53:a5:24:77:
44:8c:fb:c7:e5:9a:3a:36:fa:65:a3:fd:a3:17:98:a9:2d:6b:
1e:b6:4c:78:ce:5d:31:3c:7a:ab:fc:92:ba:a2:f1:09:14:9c:
ae:23:d3:b4:55:08:fe:18:52:e6:3f:ee:d2:07:2a:c4:fc:5c:
44:91:18:61:b5:d5:d1:ae:86:3d:51:e0:ae:58:cb:b3:02:58:
5f:08:88:7b:85:d8:1c:b5:7a:da:9c:10:40:28:f0:87:ee:d4:
45:93:74:af:63:9e:f9:be:c0:15:8a:2e:cf:7c:a7:02:5f:e2:
bf:ab:60:e6:f8:72:14:1f:b6:fb:ab:23:ba:67:a2:be:11:29:
5c:14:a7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:08 2026 by rpki-client