Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: 2gAEbg7mcKUR8GAy8tTxCYVkvUPqWK6zDxOMlMOZJ2Q=
Subject key identifier: 02:57:2E:A7:EA:E2:3F:8F:05:F5:B6:E5:AC:9C:4D:98:8B:E9:92:4B
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 019F84FAF61E6A1BB8B0BF6FF952A26176F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 0C09
Signing time: Tue 21 Jul 2026 14:01:07 +0000
Manifest this update: Tue 21 Jul 2026 14:01:07 +0000
Manifest next update: Wed 22 Jul 2026 14:01:07 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: 5dXvB5ruNHEk4tBMUzYf0sSiaV2t7u5AqFITcTXluk0=)
2: rEklxLhJo9S4IBAy4se1tLI3lkE.roa (hash: xqvERQ2TneWjz4TWOCFTyowIh4LAz/S0+u0Tj5YT4tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:f6:1e:6a:1b:b8:b0:bf:6f:f9:52:a2:61:76:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Jul 21 14:01:07 2026 GMT
Not After : Jul 22 14:01:07 2026 GMT
Subject: CN=02572ea7eae23f8f05f5b6e5ac9c4d988be9924b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:72:29:dc:c2:7a:8e:24:91:99:da:6f:c6:46:
87:b3:3c:67:ca:2b:dc:99:63:ee:d0:38:05:66:87:
e3:37:af:ff:eb:b3:f6:31:9d:c0:a4:d2:39:99:d4:
bf:c0:c2:c9:6e:f2:83:fc:2b:22:67:77:c8:55:02:
29:83:58:ee:24:c5:49:90:8f:15:77:dc:c2:e5:9e:
d7:f2:8c:b2:ee:6d:90:0a:12:b9:53:0e:40:9b:a4:
ec:43:9b:54:88:de:6e:81:e7:9d:a6:f0:9d:8d:4c:
48:83:2c:7e:d9:52:68:dd:86:e4:98:1d:96:46:0c:
46:af:9d:01:05:45:dd:04:81:26:06:5c:3e:fc:b6:
9e:36:d3:25:dd:2e:1e:50:a1:2e:8a:96:14:5a:3b:
8f:c5:c4:0c:fc:ba:ac:cd:3f:1d:4d:d6:8a:97:1a:
54:ee:f3:a9:c6:13:61:32:53:1a:c9:87:88:2a:8b:
17:61:23:99:d1:5c:ca:14:56:31:7c:9f:9a:2c:29:
14:61:22:7f:bb:13:09:1a:f7:32:f8:61:59:03:cc:
d7:36:78:2e:52:39:5f:f2:74:37:a7:b3:72:7d:29:
34:0a:73:e8:04:cd:a0:f3:6e:12:a8:0e:7c:75:8e:
20:49:3e:a5:99:f5:26:17:4f:21:2e:50:4a:90:ae:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:57:2E:A7:EA:E2:3F:8F:05:F5:B6:E5:AC:9C:4D:98:8B:E9:92:4B
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e5:c1:23:ac:e4:21:a4:1b:fd:0b:93:84:08:1f:6b:6e:56:
0a:41:77:30:1c:17:d9:79:91:c4:83:e9:92:d0:19:41:5e:2f:
0a:04:b6:f0:55:b6:80:aa:27:47:9f:68:44:9d:43:36:61:46:
64:a0:ee:fc:30:c4:17:84:6a:d9:de:17:51:ea:8a:fe:6f:af:
f4:7f:7a:24:cd:0e:18:a4:56:f2:fa:5f:b5:d9:05:66:0b:2d:
3d:7f:fa:6c:24:80:b2:43:08:82:25:0a:3e:00:a0:61:40:22:
3f:c6:05:f4:1a:9a:56:30:0a:42:ba:30:09:a5:4b:19:54:87:
f4:de:a5:90:11:42:7f:59:62:d8:3b:2d:8c:a3:d7:dc:79:95:
3f:93:b3:90:f1:c2:ec:74:22:3c:4d:11:92:3f:37:72:6b:55:
c8:00:53:b2:25:9e:42:f4:2a:e9:80:c2:eb:1d:03:7c:89:a7:
77:57:ef:19:f5:28:21:5a:ce:68:08:1a:bd:7d:e5:97:b0:62:
9f:39:47:f5:99:74:64:b1:3f:a0:8e:97:da:f7:38:6b:eb:57:
6d:a3:0f:a8:cd:61:e5:cb:cc:f9:4f:a9:56:76:45:ea:07:a1:
32:ce:c5:75:36:20:f3:a4:ec:43:f2:0b:6d:5f:02:c9:23:5c:
61:e2:89:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:42:56 2026 by rpki-client