Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: VAL9PzcxA/bKF/K0ovYjrfehNUjZzF9+gV84KnSiDa0=
Subject key identifier: DD:C3:FC:30:CB:8A:68:A0:DD:1B:EA:6F:06:07:1B:F8:FC:3C:D5:B9
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019FAB9A359E41CA2063D980A00F6D4C32D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 02:00:37 +0000
Manifest this update: Wed 29 Jul 2026 02:00:37 +0000
Manifest next update: Thu 30 Jul 2026 02:00:37 +0000
Files and hashes: 1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: A697ZEIsGKS59vmYCTEDVkODUVDMp9V3e/kpWLIP54k=)
2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:35:9e:41:ca:20:63:d9:80:a0:0f:6d:4c:32:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jul 29 02:00:37 2026 GMT
Not After : Jul 30 02:00:37 2026 GMT
Subject: CN=ddc3fc30cb8a68a0dd1bea6f06071bf8fc3cd5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:7a:d3:e2:b5:84:39:48:fd:ae:cf:74:3f:
fa:45:71:cf:34:23:e1:ce:09:47:71:5f:a8:59:e7:
05:6f:0e:5b:22:67:0e:56:55:94:82:85:ec:a6:ff:
02:43:b6:1c:cd:26:0b:16:16:e7:14:37:1f:39:2d:
1a:30:f2:1a:2d:96:b5:7f:99:05:60:21:ea:36:a6:
2d:47:b1:d3:91:72:c1:9a:0a:ba:e7:1d:7a:d1:80:
9a:6a:20:8f:57:21:ce:14:52:13:8c:07:f7:b8:57:
f0:4b:2b:92:3c:5c:aa:da:b9:aa:15:d8:e2:4f:40:
b3:88:97:67:3e:49:5d:e3:90:73:54:19:bc:20:7b:
0b:68:bd:d8:db:0d:08:37:43:e6:55:9d:b6:51:62:
19:7d:e6:2c:95:da:6c:99:b0:7c:bb:54:94:27:0a:
97:7c:c0:b3:d4:a7:9b:65:87:e3:be:49:14:5e:5c:
4c:1c:0f:12:77:db:89:b2:95:80:d7:73:a4:9a:b4:
fb:c8:60:d5:52:45:13:00:db:19:4e:bb:bc:c9:da:
ef:a8:97:eb:52:79:9f:86:71:81:9f:54:52:5f:18:
cd:ad:91:d4:e2:01:f2:7e:0c:b3:8e:41:7f:33:fa:
ef:46:15:3f:fb:da:a3:53:9d:d4:37:89:3f:ec:8a:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C3:FC:30:CB:8A:68:A0:DD:1B:EA:6F:06:07:1B:F8:FC:3C:D5:B9
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:87:cd:96:23:68:c3:3c:8a:2b:d8:26:be:bb:88:5f:43:
c3:0c:e4:9e:b1:fe:58:59:ab:0f:4a:1c:38:e9:a5:1a:34:39:
af:e8:6c:35:e8:5d:58:97:d3:8b:ec:e6:dd:df:15:f7:53:6c:
05:71:78:05:86:f1:4b:7d:e6:e8:dc:c1:b3:69:b5:ff:dc:0e:
d3:92:44:be:2d:cb:3d:2f:4e:f6:5b:fe:32:db:2a:92:57:92:
35:80:6d:a8:1c:f2:72:2e:b4:59:f2:37:02:9d:85:d8:b6:cc:
59:df:09:9f:54:e1:af:e1:ac:f5:46:2f:7a:a5:b3:79:30:4e:
56:f7:f8:03:ff:c0:54:a1:27:a1:39:4e:e7:5c:bc:85:9d:f5:
0d:55:ab:9b:c4:24:64:ba:2f:d7:81:c2:4c:1f:b2:8e:dc:03:
4e:c2:f5:94:31:21:78:06:14:8d:ab:3f:60:b1:de:e6:bb:f9:
14:e7:c1:4a:16:b8:a2:be:39:56:45:79:25:5a:3b:0d:5b:c8:
0b:e0:68:09:11:0c:35:43:13:2c:81:6c:c2:91:95:0d:88:e3:
3f:ab:60:25:28:dc:0a:9c:21:ab:e3:8c:f9:42:c5:30:38:a4:
43:bd:b8:81:ee:ca:e6:b4:c2:15:34:28:94:e6:9f:91:ba:16:
37:54:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:27:12 2026 by rpki-client