Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: NzzY7QoFKky6REEoK4N8THYs8H5Se1oYTLhjVEun79k=
Subject key identifier: 12:4D:BE:94:D0:18:4A:2C:90:8A:E4:74:11:F1:1F:42:31:3E:0D:FA
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 019F860D4197CF8722C2B73159EB40292669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 10CA
Signing time: Tue 21 Jul 2026 19:00:43 +0000
Manifest this update: Tue 21 Jul 2026 19:00:43 +0000
Manifest next update: Wed 22 Jul 2026 19:00:43 +0000
Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: QZL8TOx6hXri2uxlinnhQQNckmHGNOcRQVzMRL0yfqw=)
2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:0d:41:97:cf:87:22:c2:b7:31:59:eb:40:29:26:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Jul 21 19:00:43 2026 GMT
Not After : Jul 22 19:00:43 2026 GMT
Subject: CN=124dbe94d0184a2c908ae47411f11f42313e0dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:f9:ab:f2:2b:fd:13:01:fe:3e:d1:e6:62:
cd:83:84:61:51:f1:9f:9e:e6:17:e8:38:49:55:a5:
01:89:70:01:cf:ba:7c:25:4b:19:ee:6a:ff:fe:db:
0b:d7:75:5d:d5:ea:e2:a0:5a:83:05:cc:f5:e4:35:
88:18:2c:63:cb:aa:ef:96:39:38:6d:ec:82:11:db:
68:47:22:ac:7d:4a:12:94:4a:8a:c8:b4:0a:68:10:
ec:b8:5f:a0:c3:5e:3b:34:16:de:49:5e:91:51:dd:
54:42:5d:f6:65:1e:70:ff:39:6c:95:05:ce:5d:d0:
41:bb:b4:50:28:c8:28:5a:29:ea:14:41:28:dd:e2:
b1:16:85:b5:d8:5d:08:5f:ff:55:46:e1:20:18:28:
ba:37:cc:01:ea:23:2a:2c:11:f6:5e:02:e0:65:12:
ec:35:b5:9e:08:4c:70:f2:d1:07:e7:88:e9:b9:29:
8b:cb:9e:10:82:74:17:49:e6:64:73:bc:48:23:62:
3e:8d:4d:29:63:aa:65:39:13:1b:17:54:a1:8e:71:
2e:33:c5:ad:24:34:d5:b3:42:12:67:53:b6:55:70:
73:a1:b4:dc:cc:4d:07:93:aa:f3:c9:b1:ce:92:f1:
2e:6b:08:10:83:25:6d:3d:b1:3f:7e:8b:7c:59:c9:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4D:BE:94:D0:18:4A:2C:90:8A:E4:74:11:F1:1F:42:31:3E:0D:FA
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c7:b0:ec:09:b1:90:02:ae:20:64:46:59:14:47:18:23:90:
86:4d:92:b0:7a:af:05:21:41:18:0f:06:c9:43:a9:35:d2:29:
62:ee:a5:c9:56:88:df:eb:f4:3e:b9:19:8c:fd:bb:09:4a:7d:
58:2f:c9:b7:64:a0:2f:ee:f7:de:ff:2a:ae:b1:7b:92:f4:20:
83:11:ce:fa:b0:88:4d:02:66:0f:15:9e:ab:05:0b:e8:d1:12:
75:74:0e:7f:aa:43:fe:3b:ef:1d:57:d0:43:8e:72:d4:5a:5e:
06:a6:da:d9:c9:13:12:d8:71:9c:24:9e:b3:ab:f7:1c:3c:d6:
f1:ce:40:54:cc:1f:3b:e8:2f:7b:18:01:41:02:94:a2:0e:5f:
d1:00:63:4b:89:8f:e3:49:63:63:e2:3f:19:4d:3c:51:b0:9e:
0b:b5:da:e9:c2:12:7a:0f:43:08:2b:03:08:1a:1b:7d:da:16:
8a:95:79:cd:25:81:86:f6:0e:74:56:7a:f9:17:a0:c1:6d:56:
18:68:0c:21:19:e1:40:02:6b:de:f7:d4:4e:3d:01:ab:02:40:
7a:c8:61:10:8a:00:ed:90:17:3b:7b:a2:f6:02:f2:1b:8a:ce:
38:b4:64:58:b7:b7:8a:b3:b3:e2:46:bf:93:db:04:ff:e5:ed:
48:c5:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:23 2026 by rpki-client