Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: /Gy9CUhOHJJzxLFAueZPkUk6A/W290vwt2CCLPGBgn0=
Subject key identifier: 9C:0C:08:0B:09:0B:34:30:E7:F1:89:78:20:15:BB:C3:6D:FA:8E:ED
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019FA0E01848887F0CDABBC0576977C6A38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 1458
Signing time: Mon 27 Jul 2026 00:01:08 +0000
Manifest this update: Mon 27 Jul 2026 00:01:08 +0000
Manifest next update: Tue 28 Jul 2026 00:01:08 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: OkBP/+JaDUkJxsxHldke0T+x8rRr0n47OHBOffXI2go=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:18:48:88:7f:0c:da:bb:c0:57:69:77:c6:a3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jul 27 00:01:08 2026 GMT
Not After : Jul 28 00:01:08 2026 GMT
Subject: CN=9c0c080b090b3430e7f189782015bbc36dfa8eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:62:85:a8:7a:a9:23:51:a3:d5:2a:26:7f:
78:dd:51:57:cd:d9:f2:ec:d9:a9:a8:47:d5:7a:34:
c8:98:d8:a1:87:22:b7:f7:43:16:25:97:79:23:76:
94:74:f3:fe:45:68:ef:9b:e1:6e:02:7e:1d:a5:1a:
60:94:9b:98:74:47:c2:96:a1:4e:6a:54:6e:c8:e2:
ec:bd:17:83:f8:c8:8f:11:6f:84:7e:00:e5:31:dd:
2c:84:cf:b7:89:74:8c:b0:65:6b:bf:a9:bb:eb:17:
65:0b:b9:c6:3f:9e:78:08:93:71:a2:61:74:8a:58:
36:4e:73:ea:d9:35:68:a4:ea:11:e1:9f:5e:86:3d:
d9:d9:15:43:3e:75:57:b0:b9:37:f9:aa:72:d1:5d:
aa:7f:16:6a:31:95:d0:11:fb:b0:01:f0:5c:24:ac:
fd:a1:9e:0e:d7:be:42:47:04:b9:4b:da:c0:49:b0:
f5:14:21:5b:f3:53:18:82:85:9a:fe:2c:3b:bd:10:
9f:02:5f:ab:c8:cb:26:fd:37:10:19:89:b4:de:67:
48:bc:1d:fd:de:60:72:e5:24:ce:2f:50:f8:ee:1d:
b1:13:97:ce:0c:eb:1a:63:4d:99:76:2f:fa:53:89:
71:3b:c1:f6:88:a8:3f:87:c5:c4:f2:15:b9:5f:08:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0C:08:0B:09:0B:34:30:E7:F1:89:78:20:15:BB:C3:6D:FA:8E:ED
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:35:cf:a5:8c:d2:6d:6e:22:87:5d:e4:8b:26:d3:34:0f:84:
c5:6d:b6:9e:9a:89:66:03:77:f3:7f:7d:81:31:0d:45:e7:62:
4d:2e:3b:af:cb:bf:c8:55:4f:a7:44:c1:6a:5b:3d:c5:77:64:
4e:f5:ac:49:3c:b5:21:88:d1:54:d7:da:b0:4f:1f:c7:7f:84:
20:02:7a:c4:6f:32:ed:5d:c7:ae:07:df:23:49:a1:29:36:bc:
34:cb:17:8b:63:42:be:de:41:66:b7:d4:44:26:bf:75:73:91:
49:55:0b:c9:4c:a1:57:69:39:94:6f:19:c6:65:b6:de:61:c8:
f0:06:a3:24:a6:62:73:90:4b:6a:03:12:b2:44:2f:0c:2f:32:
dd:94:4b:c1:6a:5e:40:a5:88:39:25:cf:b4:8a:74:25:36:01:
fc:2d:e3:9f:7a:51:54:fe:37:4d:04:c6:c9:33:fe:0a:dd:38:
47:5d:63:07:32:cb:97:89:17:31:60:f1:a4:b9:d7:09:4f:56:
4a:51:ed:65:dc:94:8a:28:6e:25:f8:30:b3:ab:eb:03:b6:24:
39:9e:09:f8:10:78:64:e7:52:f4:f6:f3:c2:1d:07:a0:63:5a:
80:99:7f:af:cc:f8:88:28:97:6b:c5:c3:ca:10:0e:11:43:9d:
00:2c:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:04 2026 by rpki-client