Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: AFstm2mo5YUYiakhTs/IqMLXg+gsSUEZM0QHORQV9C0=
Subject key identifier: 33:F5:8C:8E:75:92:71:35:97:8A:33:17:D5:53:3D:52:AD:7D:5B:6E
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019F42760554FC94FF393EA19A4840A00E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 199E
Signing time: Wed 08 Jul 2026 16:00:58 +0000
Manifest this update: Wed 08 Jul 2026 16:00:58 +0000
Manifest next update: Thu 09 Jul 2026 16:00:58 +0000
Files and hashes: 1: Kj2nJpqI7GEu-K-TsbARVzYFqTM.roa (hash: l5siJkXM+WfWhL0L8OL/uvl+AJmTO8+Cpk3bOaW4F7E=)
2: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: T9z+pOhkKuy4OAkB333HA2bydE2abIopzrGmDYV0md4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:76:05:54:fc:94:ff:39:3e:a1:9a:48:40:a0:0e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Jul 8 16:00:58 2026 GMT
Not After : Jul 9 16:00:58 2026 GMT
Subject: CN=33f58c8e75927135978a3317d5533d52ad7d5b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:2a:78:12:8a:de:a4:a9:f4:fb:98:ad:f4:
19:4b:85:01:a7:f4:22:d4:6a:e3:51:56:b6:0f:0a:
72:e8:19:37:50:57:25:87:50:fd:63:16:e2:7a:1b:
13:ab:b7:b2:5c:35:84:df:b2:bf:b0:f3:0c:7c:55:
a9:5f:ec:be:4a:f5:2d:a4:41:17:4b:99:66:d8:88:
56:a6:c8:29:41:c2:8f:ca:5f:49:47:62:03:20:41:
90:9a:2c:98:9b:db:e9:99:b1:b6:13:52:61:3e:a3:
26:c1:94:b6:71:c7:0d:17:1c:6f:5d:67:c9:03:0d:
0b:0a:90:7d:d2:db:81:87:81:ca:5c:0d:d9:20:b0:
0b:10:60:c1:d5:dc:5c:f7:e3:3f:b9:df:79:c5:78:
84:24:87:26:cf:bb:c2:85:67:f2:02:c1:7c:08:46:
34:9e:bc:ca:fe:1c:1d:29:c6:88:b1:5c:e7:aa:84:
c6:84:91:fa:ee:b6:3e:f6:f8:3d:75:9b:b4:9a:f2:
e9:19:c6:ba:34:5a:36:4f:ab:52:f8:b0:11:e4:9b:
77:22:d2:e7:1c:9d:27:59:fc:52:be:5e:fb:a0:e1:
34:57:9e:57:b8:19:eb:79:f2:8c:ee:2c:15:28:42:
68:2f:7e:12:94:d3:91:5e:a2:52:cb:6b:b8:95:17:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:8C:8E:75:92:71:35:97:8A:33:17:D5:53:3D:52:AD:7D:5B:6E
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ff:cd:34:f8:a3:df:5b:4a:a5:7f:a9:c3:93:6c:f6:ce:e5:
c5:fa:ef:6b:f6:86:7e:f3:f2:c7:ec:7a:b8:56:5d:8a:30:de:
67:9e:19:f1:68:ea:f3:ca:ba:94:30:9e:37:a4:4b:09:30:34:
f8:3a:3d:46:e0:d0:68:e9:1e:2d:de:91:92:c8:58:77:97:4a:
15:93:74:7e:8b:84:8a:2b:f4:d6:2c:7f:b2:7f:00:90:98:fa:
4e:18:34:d2:ee:cd:f5:cc:6b:78:17:59:33:3a:85:a7:b4:f9:
17:18:6e:62:0b:ae:5c:04:88:c6:f7:ac:38:cb:4b:65:34:e1:
94:25:67:18:c6:df:2f:a2:f1:e9:de:73:20:9b:3d:bd:8b:bc:
b5:d4:ff:97:5c:0a:c7:22:6d:4a:ba:1f:ae:db:69:c0:e6:bd:
5f:22:20:c1:30:0f:bb:e5:47:33:17:aa:7c:9e:b7:44:66:47:
2a:59:eb:2c:d5:bc:d3:ed:cf:0b:0f:e9:a9:ed:5a:9c:97:9a:
76:38:11:bd:73:c1:5c:c3:42:0d:19:9a:be:0b:32:ec:fc:ce:
ee:d7:0c:b3:b1:f0:18:14:e8:04:9f:5d:3a:88:dc:54:e2:1b:
6d:00:2a:b6:d3:5f:e7:4f:eb:0b:a7:8b:15:6a:30:18:bc:ac:
fa:5a:4e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:01:20 2026 by rpki-client