Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: BvEaJPqpVAjsYiqCRoOFN/rZtUqE5ZRaSQUS0vbxMZk=
Subject key identifier: 07:52:72:54:69:0B:5B:73:70:41:84:F3:47:7D:12:80:2E:BC:24:B6
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 019F85D764E521EC57DD9A8908D59E2D0BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 1653
Signing time: Tue 21 Jul 2026 18:01:53 +0000
Manifest this update: Tue 21 Jul 2026 18:01:53 +0000
Manifest next update: Wed 22 Jul 2026 18:01:53 +0000
Files and hashes: 1: NejKy8jZv7LHCtY85OZ0XTQsrYw.roa (hash: 6i32lnkgvTEvsNHdmqz1vGOoJv3YKsgonD5vJZrkPQ0=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: 7hRvOMQ0ieME0z63fS47pJlMs6KE4HUg2+8lfhLaRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:64:e5:21:ec:57:dd:9a:89:08:d5:9e:2d:0b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: Jul 21 18:01:53 2026 GMT
Not After : Jul 22 18:01:53 2026 GMT
Subject: CN=07527254690b5b73704184f3477d12802ebc24b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:ff:d2:cb:3e:7e:ad:1d:7d:bd:b9:22:c9:
8f:3b:c4:a9:6f:9c:08:1f:9c:e3:96:81:4d:67:73:
f6:25:f0:32:a4:86:c2:91:d2:ea:f5:0f:12:22:dd:
42:f9:3c:ed:56:df:60:29:e0:41:4e:93:ab:ef:a7:
28:98:e3:f2:02:a0:0a:38:ac:f2:bd:25:c2:1b:40:
37:44:8a:99:8a:82:31:a0:3b:d2:0f:03:6b:82:b6:
29:3b:e8:3b:3e:ed:c6:a0:ee:d4:79:fb:8c:78:94:
f9:f1:f5:bd:54:e7:c6:76:69:90:13:c1:22:b4:44:
1a:46:f6:44:81:0b:29:d9:17:a4:30:40:2b:d3:75:
86:cc:1b:88:42:88:06:b1:8b:02:66:89:c0:06:c2:
88:2e:27:ba:4d:5f:2d:3a:4c:ec:01:10:92:bd:fb:
3e:d5:de:87:00:4f:24:a4:bf:3b:46:17:03:f8:87:
cc:45:de:be:8e:76:dd:06:a5:f7:6f:8f:71:ea:d1:
f1:64:50:02:68:76:c0:ec:68:11:d8:92:38:5f:e3:
02:2e:42:bc:b2:9f:27:23:a9:78:16:6e:64:77:ac:
9a:fa:71:58:77:46:eb:7b:d4:bf:26:3d:69:f7:c5:
39:ca:16:d1:e1:07:0b:c5:78:60:8c:7d:7e:b1:c4:
d4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:52:72:54:69:0B:5B:73:70:41:84:F3:47:7D:12:80:2E:BC:24:B6
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9d:8d:4f:86:b7:ef:65:95:1f:ab:c0:e2:6b:32:0a:57:8d:
db:02:e7:06:69:ee:18:70:f9:e0:a3:f1:76:ef:9b:ae:d2:a4:
31:c5:0f:36:63:20:52:13:2b:71:ac:b8:c7:f6:7b:da:25:01:
7b:f1:30:3b:8a:57:56:d1:bc:bb:2e:34:07:7d:57:6d:3a:6d:
19:a0:82:9f:53:2a:ef:eb:d7:a8:18:a4:03:ad:0e:06:fa:fc:
b4:0a:0e:77:02:5c:51:19:6b:10:7f:5e:f4:1a:b4:82:57:42:
bd:27:dc:af:78:66:b8:c8:48:01:d6:6e:a0:fe:89:1e:4f:d3:
79:e9:68:e4:9e:a9:da:f7:aa:67:ee:72:3c:ef:83:bc:8e:55:
c8:6e:df:45:a0:e4:10:cb:a5:fd:f4:bd:5c:88:d7:2a:86:89:
44:38:b4:6f:47:4b:1a:f2:a0:34:ab:67:bc:40:d0:48:5c:fd:
8f:47:21:99:7c:f1:9e:91:4c:5e:ec:45:d2:ac:50:b1:20:b5:
eb:57:d8:21:01:a0:4c:05:a8:14:20:12:38:5c:6f:21:8e:5e:
11:e8:dd:35:83:89:67:27:af:eb:86:bf:a5:a3:47:4a:32:96:
15:cf:1f:e5:21:31:e2:65:2c:d3:ae:39:3e:2e:32:d3:b0:b8:
6b:1f:bc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:50:30 2026 by rpki-client