Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: fNDAVhT9Rbk4aO7avTQLxS9fwbO2yXv9NlyZe1ir+Kk=
Subject key identifier: CB:4E:CB:E2:DB:E5:F6:A0:D5:DE:52:41:DA:E3:6C:1A:D9:E6:34:63
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 019FABD16A131B46D99DA328ADDB9DA7048B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0F0B
Signing time: Wed 29 Jul 2026 03:00:55 +0000
Manifest this update: Wed 29 Jul 2026 03:00:55 +0000
Manifest next update: Thu 30 Jul 2026 03:00:55 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: VORLlmjgmNVXchdwva7sJlxl6QAlM4MRSWVMokc5OLA=)
2: gusOyZenv7586RqtEWmnhh7N0MA.roa (hash: 2ylZF1yMijEe2k4/d611VBCjiq1WUabPgeneyDm3vsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:6a:13:1b:46:d9:9d:a3:28:ad:db:9d:a7:04:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Jul 29 03:00:55 2026 GMT
Not After : Jul 30 03:00:55 2026 GMT
Subject: CN=cb4ecbe2dbe5f6a0d5de5241dae36c1ad9e63463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:8c:c4:57:d9:d6:b0:67:8c:c5:04:2a:56:
6f:cd:7b:9d:33:8c:f8:77:a9:d8:18:92:e4:49:69:
cc:98:96:aa:d0:92:03:ac:dc:1d:2d:c1:50:46:9f:
eb:13:36:7b:1e:28:ce:6a:6c:6a:95:15:14:c1:bc:
c9:20:8b:12:25:61:2b:55:55:8e:16:47:f5:81:41:
4d:79:ed:74:50:30:a9:b7:23:05:e3:1d:27:15:7e:
07:f9:27:de:06:10:5d:13:8c:03:65:9a:66:44:c0:
b7:04:eb:fe:73:69:95:bc:b7:b4:57:5b:53:06:3e:
18:48:2f:16:3c:a3:ff:04:bc:4c:c9:3b:1a:fb:37:
fe:c0:09:8e:8f:af:0c:26:2e:d6:d7:cb:7f:b3:d9:
80:4e:ae:f7:03:8e:2e:fc:3f:da:32:79:cc:4b:02:
9e:a3:0e:ec:3b:fe:e2:9d:b9:64:7c:43:34:40:f5:
0b:b8:09:52:3e:63:75:9f:dc:87:b1:a0:2c:36:28:
05:99:65:0f:cc:f4:5d:4a:5c:68:ac:82:35:c6:4e:
24:45:ef:6f:1f:db:20:fa:22:2b:01:d1:f8:5c:cb:
3e:df:fb:1e:ea:28:2a:22:e1:f0:ef:86:ed:32:40:
ac:b5:14:d0:78:ef:2d:8b:da:6b:db:21:37:c4:ca:
2d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4E:CB:E2:DB:E5:F6:A0:D5:DE:52:41:DA:E3:6C:1A:D9:E6:34:63
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7b:47:fa:69:47:11:31:90:a1:35:3a:61:06:e8:cd:93:ea:
b0:13:bd:99:a7:20:10:31:e1:d4:fc:48:25:d0:9c:33:8b:3e:
95:51:be:52:02:06:31:8a:05:2c:70:81:a2:50:ca:1e:0a:e7:
4a:40:b5:a0:38:a3:92:41:d9:34:5a:99:ce:b4:a7:72:40:11:
5b:b5:6e:23:d4:9d:62:9a:c3:57:00:be:bf:1d:ed:57:a4:c4:
b1:75:ea:6f:fb:b4:83:80:1f:bd:44:2c:5e:c4:26:00:9f:0d:
dc:4c:3d:df:ed:31:be:08:63:a2:09:3d:37:a5:a6:f3:e8:10:
24:d7:8f:91:1d:db:79:b1:4c:fd:cd:e6:ae:f7:73:9a:12:c8:
df:ee:65:c8:e1:8d:a6:e6:fe:e5:cc:28:cf:2b:63:2b:b9:04:
63:33:a4:00:ae:55:ab:ac:10:a7:02:bd:0a:c8:23:57:b8:05:
f3:72:7c:11:d5:04:97:1d:b2:12:98:3b:bc:a6:0f:65:77:b9:
47:51:51:d4:c1:da:e5:0c:07:aa:2c:ff:0a:14:5b:d5:8e:c8:
9f:51:37:91:69:39:98:65:37:7b:b2:2d:61:34:3f:8c:10:98:
a8:1c:94:f2:25:f3:0d:0c:bd:1b:dd:cf:26:1e:bd:d2:3f:40:
06:1f:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:34:19 2026 by rpki-client