Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: Jb08bcLnxK8D6YIN8PvAtanM/Xt3P92meyQGt4Jdu6U=
Subject key identifier: BE:5D:C3:62:5B:7E:F0:29:3A:76:F8:06:F1:6F:5A:2D:83:E1:43:05
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 019F837A97A15B16CB34C388D06A1BE39B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 156C
Signing time: Tue 21 Jul 2026 07:01:17 +0000
Manifest this update: Tue 21 Jul 2026 07:01:17 +0000
Manifest next update: Wed 22 Jul 2026 07:01:17 +0000
Files and hashes: 1: aMxhZsLMDx304AXjnZldJIQi_VU.roa (hash: nX4KFrnvKm65Zf0OrETssJJWMj+/5dAoLpEa4nDLRE4=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: 9bPd4lwclHvS7XOgsTKkdiYYL1R7XasRetw5coNs/uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:97:a1:5b:16:cb:34:c3:88:d0:6a:1b:e3:9b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Jul 21 07:01:17 2026 GMT
Not After : Jul 22 07:01:17 2026 GMT
Subject: CN=be5dc3625b7ef0293a76f806f16f5a2d83e14305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:a3:69:00:34:be:08:52:bd:c6:7f:84:ed:
ff:86:c7:4c:a0:a0:03:47:99:c8:de:6f:d2:1a:dc:
bd:e2:06:d5:dc:db:d2:15:d2:d1:31:64:53:0f:fb:
db:b3:b8:f9:f1:cd:49:f8:62:ce:e3:54:b1:bc:af:
25:3f:dc:da:6f:3b:44:03:ec:d3:06:1f:72:c2:dd:
c8:e9:4f:ad:42:c2:e8:fa:b5:d2:44:6b:d2:a9:43:
3d:0c:52:8b:9e:b4:0e:88:e6:ef:6e:01:83:c2:b2:
a1:e0:5b:11:7a:2f:87:9a:7e:ed:97:f7:00:2f:ce:
e0:85:35:26:bf:85:22:07:f9:a1:e0:60:1b:df:b0:
f9:b7:02:17:99:11:64:84:88:26:68:28:3b:4d:f0:
aa:dc:11:2e:87:6f:46:08:16:58:84:09:95:d2:29:
b4:76:b4:1b:cf:5d:f0:cf:06:a3:0e:f0:6d:1f:b6:
fe:37:e0:f2:56:cf:e2:15:e0:e6:15:18:53:26:71:
38:c9:7e:05:65:30:87:8a:4c:04:3f:5b:61:fb:66:
cc:9e:fc:f3:76:32:ab:42:75:91:96:88:14:bb:97:
ea:65:84:02:3d:6e:88:4e:16:51:6d:3c:5f:16:31:
4c:66:7e:4b:d7:b8:a4:b2:6e:90:4e:ba:c6:27:54:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5D:C3:62:5B:7E:F0:29:3A:76:F8:06:F1:6F:5A:2D:83:E1:43:05
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:52:21:70:cb:e4:87:d6:dc:89:ff:24:f0:6a:ab:4c:12:f8:
f5:63:72:4e:75:04:89:13:e8:40:79:37:6c:01:16:d5:96:be:
ed:39:b2:13:8d:34:2b:d0:28:a4:3e:66:5e:9b:62:b1:59:77:
08:7f:d3:1b:cf:e8:e3:d7:b4:cc:a3:5a:06:ae:c9:b7:19:cb:
3f:f1:d3:bb:58:b8:19:7b:09:e6:cd:d4:b9:e6:6d:56:5f:bb:
ee:a5:00:67:80:64:97:83:76:0b:2d:9c:22:cf:40:5a:65:4f:
bb:be:61:9c:3f:2b:57:5c:4f:3b:b5:10:1f:fd:56:ed:79:ec:
26:6f:41:7e:e8:2d:16:5f:97:11:5e:12:d4:08:60:85:38:9d:
ef:dc:7d:c7:14:b9:ee:4d:45:e3:2d:e1:2c:ad:71:18:40:28:
99:83:b9:7a:6e:b8:4c:ec:62:b3:92:08:6f:94:0c:16:4e:b8:
16:55:9f:66:1a:75:45:72:ff:88:1b:d1:e6:10:be:d8:90:76:
df:25:a5:40:19:ab:55:af:f3:32:fd:b1:60:ee:c2:53:b1:8f:
74:80:4e:75:74:4d:0c:17:7d:ac:6d:8b:27:be:3e:88:c4:fc:
a2:6b:d0:8e:bb:c0:7a:3d:6b:57:a0:29:e9:73:c0:ca:0d:65:
f8:56:56:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DepehWxbLNMOI0Gob45sDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQ1ZTNhNDA2OWQ0ZjVlYmQ1ZjZlNjQyMWQ4ZDNjYWJl
MzA5MjEwHhcNMjYwNzIxMDcwMTE3WhcNMjYwNzIyMDcwMTE3WjAzMTEwLwYDVQQD
EyhiZTVkYzM2MjViN2VmMDI5M2E3NmY4MDZmMTZmNWEyZDgzZTE0MzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l2jaQA0vghSvcZ/hO3/hsdMoKAD
R5nI3m/SGty94gbV3NvSFdLRMWRTD/vbs7j58c1J+GLO41SxvK8lP9zabztEA+zT
Bh9ywt3I6U+tQsLo+rXSRGvSqUM9DFKLnrQOiObvbgGDwrKh4FsRei+Hmn7tl/cA
L87ghTUmv4UiB/mh4GAb37D5twIXmRFkhIgmaCg7TfCq3BEuh29GCBZYhAmV0im0
drQbz13wzwajDvBtH7b+N+DyVs/iFeDmFRhTJnE4yX4FZTCHikwEP1th+2bMnvzz
djKrQnWRlogUu5fqZYQCPW6IThZRbTxfFjFMZn5L17iksm6QTrrGJ1SRxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5dw2JbfvApOnb4BvFvWi2D4UMFMB8GA1UdIwQY
MBaAFIf0XjpAadT169X25kIdjTyr4wkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYt
NjMxOWJiMDc5YzQ0LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYtNjMxOWJiMDc5YzQ0
LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1IhcMvk
h9bcif8k8GqrTBL49WNyTnUEiRPoQHk3bAEW1Za+7TmyE400K9AopD5mXptisVl3
CH/TG8/o49e0zKNaBq7JtxnLP/HTu1i4GXsJ5s3UueZtVl+77qUAZ4Bkl4N2Cy2c
Is9AWmVPu75hnD8rV1xPO7UQH/1W7XnsJm9BfugtFl+XEV4S1AhghTid79x9xxS5
7k1F4y3hLK1xGEAomYO5em64TOxis5IIb5QMFk64FlWfZhp1RXL/iBvR5hC+2JB2
3yWlQBmrVa/zMv2xYO7CU7GPdIBOdXRNDBd9rG2LJ74+iMT8omvQjrvAej1rV6Ap
6XPAyg1l+FZWVw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:00:57 2026 by rpki-client