Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier: fN2NwGfQjdDER/39/0n0GFDm7mQuVPG6tRVUHBhmQV8=
Subject key identifier: C1:A0:FE:C3:BA:26:1F:BC:7D:66:9B:34:AD:32:99:FD:82:96:C2:05
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 019FD6F3E709788B7CA9D3D89282A47C6C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number: 069F
Signing time: Thu 06 Aug 2026 12:02:16 +0000
Manifest this update: Thu 06 Aug 2026 12:02:16 +0000
Manifest next update: Fri 07 Aug 2026 12:02:16 +0000
Files and hashes: 1: VyqoHcr9KS4JWHhnv-VcHDSTVnI.roa (hash: f/9yzBcEtFBgSdEpSUnnTNXHMDiqI8UyOIQTZBjvt7A=)
2: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: ugat32dfgnA98HEzpi1iwexM3TT4irRl4IR2YevX1bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 12:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:f3:e7:09:78:8b:7c:a9:d3:d8:92:82:a4:7c:6c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Aug 6 12:02:16 2026 GMT
Not After : Aug 7 12:02:16 2026 GMT
Subject: CN=c1a0fec3ba261fbc7d669b34ad3299fd8296c205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:3b:87:62:14:e3:b0:6e:d0:e7:2f:3f:79:
09:06:aa:e9:20:10:d0:6e:bf:56:80:69:18:05:c9:
2e:95:2a:f2:47:f2:dd:96:c2:36:c9:f0:33:b6:31:
27:02:02:94:06:f1:0b:3f:7c:bc:1c:78:a6:32:35:
cd:41:10:b6:06:c6:0d:9b:59:23:1c:3d:33:eb:1c:
4c:e8:99:74:9b:ca:7e:e5:ab:ce:e3:ec:cb:fd:e6:
73:0b:46:99:a4:da:90:30:07:67:58:98:e0:b4:28:
5a:29:63:1e:4f:c6:5c:36:8f:59:cf:68:40:ab:34:
3f:bc:d5:1f:43:25:04:0d:38:6d:92:4a:1e:72:25:
5e:0b:b4:3f:80:cd:c2:56:38:65:9b:5e:7a:6c:72:
4b:d0:1a:70:08:08:13:28:b7:93:9e:4f:20:cd:47:
30:a2:96:8c:4b:ff:86:41:89:9a:30:86:be:89:7d:
41:ea:92:a4:82:94:b9:e4:29:6e:e5:29:e3:bb:ab:
1c:e5:eb:a2:bb:11:3a:bf:82:80:f7:f8:8c:5f:5c:
4c:60:9d:c3:e2:21:aa:91:65:c7:14:0e:7e:64:6d:
cd:67:68:dc:74:61:d3:fa:08:e1:49:75:b6:3a:f5:
15:f0:f5:64:11:96:3d:c5:fc:e5:0b:3d:45:b2:d8:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A0:FE:C3:BA:26:1F:BC:7D:66:9B:34:AD:32:99:FD:82:96:C2:05
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1f:68:96:f0:2b:22:df:de:9a:d5:2a:68:0f:e8:c1:f1:26:
1c:d2:9b:9a:08:ae:45:42:39:26:21:36:2d:49:51:39:51:29:
f0:80:62:1c:b6:4a:51:7b:3c:2e:a9:9a:7a:36:35:da:69:5e:
77:a9:2c:67:e3:ca:ad:6f:79:b2:40:cd:f3:40:35:40:38:2d:
8c:11:f2:5d:b3:74:53:39:2c:bf:21:84:10:27:8b:f6:56:e2:
f3:b8:3d:bf:a5:b5:ff:c0:e4:85:41:cd:c3:f4:44:9e:a0:e4:
29:f2:5d:f7:9f:d4:b0:ab:56:bc:87:83:8a:b5:7d:6e:11:48:
c4:89:0c:bd:64:97:45:6b:24:8a:87:2e:38:54:eb:4d:57:79:
68:e7:28:ed:40:e2:cf:67:6b:29:ce:0b:d5:df:38:1c:a0:ed:
7f:ae:b5:d0:a7:e5:0b:43:fc:8a:b3:42:73:78:2b:f6:14:69:
bd:0a:28:85:c5:0c:90:e2:d9:52:60:0e:ed:dd:7f:c1:fd:81:
24:6d:2c:49:a2:56:8e:6d:d3:db:05:8d:55:b0:57:16:77:a0:
f4:ed:5f:22:01:96:50:b6:aa:b5:4f:8b:eb:d5:78:92:f7:c3:
9a:41:e6:49:77:54:cb:3f:50:5e:a9:17:ab:39:d1:d9:60:4c:
18:c6:bd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 17:33:49 2026 by rpki-client