Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: NIO9REf54V+prcTcrLdKYx65/AU2wBJihd9eSt309/0=
Subject key identifier: 14:1F:CF:D3:86:7A:BC:5A:52:C4:1F:F9:1A:5B:B3:DC:95:D7:6E:83
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 019FA907BDBFC92BE90DAABC867A4034FC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 14:01:24 +0000
Manifest this update: Tue 28 Jul 2026 14:01:24 +0000
Manifest next update: Wed 29 Jul 2026 14:01:24 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: qFI6KhtjNfoUOBDm/YMb2XZ/vN+keJnZ0qLn5RSPnsg=)
2: x-xatRQzbMJq2QoB7VpakVl_dyQ.roa (hash: FUFQzFRUVGUSKSoKEZzjy+oCv2v1jEvkTjPlxRoTw4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:bd:bf:c9:2b:e9:0d:aa:bc:86:7a:40:34:fc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Jul 28 14:01:24 2026 GMT
Not After : Jul 29 14:01:24 2026 GMT
Subject: CN=141fcfd3867abc5a52c41ff91a5bb3dc95d76e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:e6:ba:c3:ff:f9:bf:fe:70:99:0f:ec:d4:
6f:b7:a0:b3:bc:f2:34:8b:fc:f9:fa:a0:03:cb:90:
20:df:e3:a5:d5:cd:dc:56:60:af:de:d9:66:83:5a:
59:72:e4:7c:38:08:0a:aa:af:72:39:f8:17:09:2f:
41:23:2f:96:24:41:44:8b:fe:05:69:b3:c4:4d:8d:
cc:69:e4:59:a8:35:ca:97:26:53:6e:b2:55:fd:a3:
a8:87:87:02:f3:41:1a:84:eb:41:c8:49:53:99:e3:
a4:4f:a9:13:27:5a:de:38:16:cc:eb:7b:be:f7:e0:
25:07:3c:d1:9d:e5:79:26:32:d1:d1:7b:c7:c0:74:
ce:e7:37:c4:5c:52:aa:d5:5a:9a:6c:41:74:47:0d:
e5:60:ae:72:b4:82:80:d0:4f:53:ae:68:1e:63:8f:
73:2c:08:0f:6e:a4:d2:bf:e7:a1:f4:3f:0c:9d:99:
0e:99:6a:0a:b5:c0:b2:fb:58:f5:f0:e6:6d:e2:8f:
c8:f5:78:e3:37:83:40:57:73:7f:f6:af:35:2c:c8:
9e:6e:4a:1c:8d:22:4e:1e:ea:45:44:45:93:c7:8c:
99:4f:d3:f2:f1:01:6f:ff:59:6b:49:78:7f:25:ea:
a4:2f:66:d7:a1:de:61:7e:19:1b:0e:4d:f3:ff:0c:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1F:CF:D3:86:7A:BC:5A:52:C4:1F:F9:1A:5B:B3:DC:95:D7:6E:83
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:39:a9:0b:d2:f6:19:b6:c8:0d:3d:6b:60:06:6b:92:a0:39:
d5:0e:b6:ec:ba:fe:84:99:b9:9a:0e:0e:e3:7d:ff:97:5d:e4:
9b:6e:9f:28:9b:f0:d8:51:f9:e0:32:0e:95:4e:0a:6f:1a:e7:
a5:eb:09:03:39:04:b7:ef:77:6e:0b:a6:cc:e4:7a:71:44:a7:
38:57:b6:52:fb:93:b7:c3:52:f1:c6:38:45:2a:d9:da:82:a4:
b1:38:95:5c:33:03:8a:e0:64:ac:32:d0:df:d6:a5:8e:c1:39:
83:79:d0:34:7c:46:ef:5e:cb:f3:28:88:3d:08:19:02:a5:c2:
f2:47:77:f1:a9:c9:94:e6:1b:e8:11:59:3f:2b:46:f3:16:75:
d2:3d:c2:4e:45:2a:f3:ee:d5:5d:7a:d1:91:36:9b:71:b2:c4:
ae:d6:bd:b5:1f:1b:30:d4:eb:05:d8:2d:bb:57:ec:4a:17:14:
3e:6a:26:ee:77:eb:05:e8:be:ec:92:78:98:bc:ce:48:ac:4f:
c7:a7:72:f4:f7:d0:57:6e:c9:aa:c2:57:aa:f3:1f:f2:24:6a:
54:e5:2c:cc:24:f0:45:61:65:56:08:a2:d0:d7:16:c0:68:51:
7f:aa:3d:f0:e3:5a:d6:5d:0c:fe:bb:77:47:fc:6e:b4:64:1d:
a7:f9:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:48 2026 by rpki-client