Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier: oujvvw5lfr+M5vufpVNCYQ0x8wm20CyZkoMPL4lfqtQ=
Subject key identifier: 7B:C8:E5:02:81:EB:68:DF:44:E8:58:0B:BE:2E:71:09:53:54:30:4D
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 019EECD8CF91D80D529A0E29E8C8DE385ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number: 0625
Signing time: Mon 22 Jun 2026 01:01:32 +0000
Manifest this update: Mon 22 Jun 2026 01:01:32 +0000
Manifest next update: Tue 23 Jun 2026 01:01:32 +0000
Files and hashes: 1: DEFfBNh248XHDVu-BwTd6VMfFV8.roa (hash: 1e5rZ3fBzGEwRGyr2Q3kLvg86EH9L/cUWkBLg+rj2hY=)
2: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: gUtRqCzdV/Soj/gEeJYcIVThWjT5Kr4aJknFLwUMslE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ec:d8:cf:91:d8:0d:52:9a:0e:29:e8:c8:de:38:5a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Jun 22 01:01:32 2026 GMT
Not After : Jun 23 01:01:32 2026 GMT
Subject: CN=7bc8e50281eb68df44e8580bbe2e71095354304d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:40:f0:08:a9:34:ca:fa:56:8f:ae:dd:98:
93:d4:a8:23:fe:05:09:84:8b:e8:8a:31:37:d5:19:
91:09:0b:51:e9:56:21:2d:e6:61:40:21:3b:e9:97:
55:4b:35:62:b6:5b:5f:ba:de:90:32:c1:34:11:da:
7b:a1:ae:4f:ad:6a:49:4a:9e:4a:1d:26:89:b3:8f:
95:2f:4b:cd:04:23:39:ed:d0:da:96:e0:f0:1a:37:
e4:ba:66:32:81:e5:e1:9e:1f:e0:a4:fa:46:b3:70:
0b:8b:ec:75:1d:4f:9f:72:25:4b:eb:a4:b5:dd:70:
9e:3f:e2:9d:37:62:e9:1c:bb:13:63:9d:d9:7e:a6:
5e:74:5a:ae:86:5f:89:ae:2b:06:07:7b:df:09:5b:
1a:89:e9:e6:88:bb:87:e5:76:61:f7:0e:9d:b7:08:
d5:05:da:af:a9:0e:39:c3:08:3b:81:c3:38:06:ab:
c9:60:50:d0:cf:0e:d4:f0:28:96:d8:f0:f9:e4:b5:
7d:91:3f:6e:21:76:21:ce:b3:5a:02:1f:f8:fd:05:
a9:44:9d:ea:df:d2:ee:d9:fa:01:f3:49:c9:99:e9:
de:eb:35:3e:6b:8f:cc:a4:38:ff:d0:a5:66:32:16:
f6:ca:c8:74:49:53:af:9b:22:51:0d:74:c2:4d:86:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C8:E5:02:81:EB:68:DF:44:E8:58:0B:BE:2E:71:09:53:54:30:4D
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:dc:e2:2f:97:9e:c1:67:ca:f4:3d:e8:72:26:20:58:5c:3e:
71:6e:5e:9a:c8:2b:ae:24:b4:2d:8b:b2:41:28:5d:96:b7:55:
39:a5:52:5b:1f:9e:4f:78:bf:a5:59:94:66:dd:3e:96:60:35:
7d:59:0e:14:23:04:33:8a:af:36:4f:eb:d4:97:14:50:b5:51:
2c:21:4a:ee:dd:51:7b:74:b5:95:54:98:b0:22:67:1f:db:a2:
95:df:be:f5:35:9b:19:46:79:bc:8b:7d:31:62:0c:f0:14:91:
a6:32:d1:8b:bd:17:5d:23:ab:27:2c:b0:05:1e:c6:a7:17:28:
fd:36:b2:2c:a9:ad:ef:cf:83:6c:aa:2e:a3:ab:d5:55:34:9b:
6a:32:bd:1f:ed:4d:4c:2f:fd:3f:51:3c:cb:3e:6e:48:f3:97:
85:bf:10:d1:23:d9:62:81:1b:de:fc:ad:8f:a6:73:d3:63:d7:
44:23:b7:37:86:b0:ff:2f:9f:4f:1d:36:7a:31:ba:6e:0b:39:
99:8f:e7:92:3d:1b:49:4b:12:9e:46:f9:20:20:35:b3:3b:e4:
c7:af:2a:b3:12:32:f9:d0:80:de:58:f1:e7:1d:89:61:a2:1d:
27:91:d4:3b:db:4c:8c:4b:33:ab:26:25:4b:8f:27:98:a5:9f:
bb:08:8f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 08:32:17 2026 by rpki-client