Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
File: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft (raw, json)
Hash identifier: ucmxQablzsInJW0WjAkMRpfzAsB6OwePeWSwIrVOpwg=
Subject key identifier: 59:D0:7E:6C:EF:13:83:2C:BF:FD:A9:D5:C8:65:1D:2C:CD:8F:4F:7D
Authority key identifier: 1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
Certificate issuer: /CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Certificate serial: 019F11C04BBECA3284984D6C0AE90749ECFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
Manifest number: 02AA
Signing time: Mon 29 Jun 2026 05:00:42 +0000
Manifest this update: Mon 29 Jun 2026 05:00:42 +0000
Manifest next update: Tue 30 Jun 2026 05:00:42 +0000
Files and hashes: 1: H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl (hash: lKfP76mDBi9pKHBf+8aBlkLgT6ZJ4+OJOAiE/Ld3fwE=)
2: XOOQ9FAgyADXPO_GL-32MuK-1-4.roa (hash: Rqa7wVCVV9KpfmZD61heEG7d6s4LvjlFlafZP5De1nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:c0:4b:be:ca:32:84:98:4d:6c:0a:e9:07:49:ec:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f539a614e0aa1cfa19fcf8ee0bfaa03463143c3
Validity
Not Before: Jun 29 05:00:42 2026 GMT
Not After : Jun 30 05:00:42 2026 GMT
Subject: CN=59d07e6cef13832cbffda9d5c8651d2ccd8f4f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:23:69:28:5c:97:dd:07:56:d6:54:13:c7:
b1:cb:a3:f5:51:1c:4d:83:ad:26:7d:32:e7:16:8e:
5c:bd:b6:76:df:be:4a:84:53:d5:e4:c9:18:b4:e9:
95:a6:83:58:e0:76:45:d6:c8:2b:79:f3:61:d8:35:
4f:03:50:f4:6b:af:7d:27:ec:0d:0e:8f:0b:2e:5f:
13:9e:84:9b:c9:29:66:99:ee:49:83:0b:13:e3:06:
fe:4a:c8:ef:06:9b:51:6b:3c:77:84:84:60:e6:fa:
f1:89:ad:87:63:b5:5e:47:76:24:b8:24:45:6f:a0:
55:f2:5a:b9:2c:90:da:ae:31:c1:2f:56:c5:54:26:
4d:25:90:0d:e5:d7:a9:b2:8a:1d:c1:9b:71:28:94:
0a:fa:d2:9b:34:e8:72:a2:b8:51:e7:eb:61:32:ce:
09:8c:9e:fb:47:a7:2f:8a:89:f6:7b:8e:62:6b:00:
d7:a6:81:72:49:8c:4c:c5:be:ad:74:88:87:45:87:
80:73:1f:af:11:e2:b9:4f:e5:04:8b:69:c3:a0:f2:
73:ed:c5:2d:65:ca:79:c5:1b:c8:30:fb:70:95:3c:
6a:d1:6a:ec:7f:8b:d8:13:ba:98:ce:fe:5e:4e:15:
a1:73:48:90:85:cd:ba:15:b7:f9:93:eb:aa:98:b2:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:7E:6C:EF:13:83:2C:BF:FD:A9:D5:C8:65:1D:2C:CD:8F:4F:7D
X509v3 Authority Key Identifier:
keyid:1F:53:9A:61:4E:0A:A1:CF:A1:9F:CF:8E:E0:BF:AA:03:46:31:43:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/927bf1-7999-43e1-b7f5-abe1e37925cf/1/H1OaYU4Koc-hn8-O4L-qA0YxQ8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:84:ab:5f:5f:c0:6f:65:7b:4e:e5:1e:70:e5:0c:eb:19:d0:
f3:66:97:c8:5f:93:e2:5e:7b:f6:66:4f:fb:f3:6c:fd:0b:bc:
c2:1b:a6:b6:1e:3d:1e:b6:c5:b1:82:43:30:d4:72:35:1f:b3:
e0:c3:91:9c:a2:01:76:51:11:c0:15:17:7b:bf:ce:c2:3c:b4:
35:4e:fa:f2:08:a5:29:14:e0:b1:9d:4f:91:3a:77:97:3f:06:
67:9c:f4:e6:f8:f9:46:ac:5a:5c:56:fd:60:48:b5:84:da:ed:
55:c7:0e:39:86:f2:01:b0:31:7c:3a:3f:1e:b6:87:c9:72:00:
59:d3:03:9e:33:09:2c:a3:19:d2:f4:bf:3b:8e:f1:7f:fc:9a:
e6:31:6f:d1:02:f7:72:92:d5:02:fc:47:dd:73:d2:f5:ec:08:
77:ea:42:31:e8:8c:ef:6c:a2:be:c9:a4:f2:e3:95:f3:f0:e5:
f6:1d:a6:b6:ed:cc:83:eb:28:28:b2:93:ac:2b:56:b9:fe:d4:
e0:16:f8:78:41:6d:4e:b2:44:c3:1c:9d:8c:37:8b:0d:b6:87:
9e:b8:6b:aa:71:6b:f1:8e:6b:6d:93:fa:ca:de:0b:8e:98:70:
95:f4:69:fb:d6:fb:18:c0:57:f9:58:5f:66:db:9b:4e:1c:5b:
73:f0:90:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:54:20 2026 by rpki-client