Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: +nvr5qjgZ/btO3jQuLTqovi0ezFMh+HxsaXpL3wgzGE=
Subject key identifier: 34:7D:A5:54:D3:44:E7:08:FE:FC:5C:71:3D:CF:F7:CB:0F:95:33:C2
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 01A06DCBB921A1E2C2FC908140491CC69EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 1142
Signing time: Fri 04 Sep 2026 19:01:02 +0000
Manifest this update: Fri 04 Sep 2026 19:01:02 +0000
Manifest next update: Sat 05 Sep 2026 19:01:02 +0000
Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: 3Ajnv670iYQULfaZTol9ay3wpjEC/IcpZZF89cjajGo=)
2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cb:b9:21:a1:e2:c2:fc:90:81:40:49:1c:c6:9e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Sep 4 19:01:02 2026 GMT
Not After : Sep 5 19:01:02 2026 GMT
Subject: CN=347da554d344e708fefc5c713dcff7cb0f9533c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f8:a0:f4:95:54:06:d9:ef:c7:ca:86:5f:a0:
aa:d9:a0:36:46:27:27:af:7b:a9:92:d0:f0:51:ac:
21:4f:7c:67:e5:16:d1:79:48:9a:40:32:fe:26:4b:
20:d9:7f:a2:a1:2a:7c:d2:36:9d:57:49:ca:69:2b:
9a:21:36:84:b6:71:26:89:47:bc:ee:c0:62:32:5d:
8a:65:aa:48:69:10:85:7e:c4:91:77:4f:2d:5a:d4:
3d:ef:0e:90:ab:c8:3b:1c:65:2f:42:cc:1c:c9:ab:
f6:58:e2:17:e7:f1:86:4b:51:f5:06:81:e4:e2:75:
3e:91:44:b8:91:bd:15:13:38:f3:03:34:3d:bc:19:
06:60:d4:f9:ad:ee:8b:5e:52:ab:6b:42:38:00:8b:
1f:69:13:dd:2d:ab:a7:00:2d:9e:87:4e:5a:78:01:
15:9f:ea:77:f6:5f:97:cf:c3:4f:bc:84:35:52:2b:
bc:8d:8b:1a:ed:bd:dd:c4:b3:49:66:88:63:86:7f:
e4:f9:ad:fb:4c:12:d9:fe:36:12:ba:31:57:c7:dd:
a2:b0:e5:82:09:bc:aa:66:92:4d:7c:39:9c:08:44:
a5:7f:3d:8a:c7:ed:42:3d:54:80:a5:6d:c4:da:50:
57:aa:46:87:14:c3:90:9b:66:1d:d4:fd:3d:7b:8f:
b4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7D:A5:54:D3:44:E7:08:FE:FC:5C:71:3D:CF:F7:CB:0F:95:33:C2
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:86:08:d1:38:6e:bc:a2:08:c8:ef:7b:38:e3:13:69:52:57:
7c:92:24:1d:fd:14:4d:d6:cc:85:48:39:bb:72:14:e9:be:08:
50:ef:53:a1:44:0a:e7:a8:98:80:f1:93:41:32:69:17:45:d2:
01:09:b4:c6:6b:9b:fa:d8:e0:e8:d2:87:65:a8:d3:24:36:f7:
9f:a6:c0:86:2e:b3:d2:27:29:07:e1:2d:be:4c:da:06:32:0a:
d4:6b:b5:ca:1d:6a:f4:53:c1:b5:ca:67:12:d1:28:f8:9e:83:
72:2a:aa:c9:df:a0:01:70:fe:6a:11:1d:36:b5:cb:95:57:e4:
a3:4e:3a:41:24:a8:9f:36:89:4d:1b:59:7a:4d:b5:d7:55:0a:
54:f9:6c:74:cc:60:d7:e5:06:31:35:3e:e9:0b:94:a1:1a:00:
27:a9:42:81:ae:11:1f:a0:ce:ef:fd:31:b6:a5:80:b9:02:cc:
28:7e:62:2e:8d:3b:90:56:0b:fb:2b:c4:83:51:51:8b:3c:69:
bb:73:a2:db:ed:d0:ba:6b:94:42:94:2e:6e:0e:38:e0:d7:86:
2b:e4:25:4c:2d:9d:79:ef:43:a8:53:b0:36:46:da:81:02:84:
f7:f8:71:e1:f2:f6:09:5d:35:55:83:12:60:b6:48:85:b8:c8:
ee:6b:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:46:57 2026 by rpki-client