Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: Q0RnwddXYxNHHtDPkXuaIP3KjeB8L1EA5bqeqivnPZY=
Subject key identifier: 00:85:D4:5B:44:CD:83:41:F8:80:3D:22:07:AB:B6:93:A8:BE:A7:11
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019FA03AB76B34DD301B775C47B2ED16DE71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 0251
Signing time: Sun 26 Jul 2026 21:00:30 +0000
Manifest this update: Sun 26 Jul 2026 21:00:30 +0000
Manifest next update: Mon 27 Jul 2026 21:00:30 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: ckqx6TQWNFoyjnfyr4s/kDBlgG676PG3WttF4dSmQZ4=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:b7:6b:34:dd:30:1b:77:5c:47:b2:ed:16:de:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Jul 26 21:00:30 2026 GMT
Not After : Jul 27 21:00:30 2026 GMT
Subject: CN=0085d45b44cd8341f8803d2207abb693a8bea711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:3c:b5:19:f8:1b:b9:d3:e9:15:6f:6c:ba:
a5:a0:20:34:6c:4d:bc:86:d4:05:f8:70:71:48:03:
d1:f8:d9:79:13:de:f4:56:20:c9:e5:ab:eb:18:80:
1d:08:66:81:a3:41:2d:c7:c4:67:1d:5b:9c:7c:7a:
de:8b:f3:8d:b5:39:b7:c7:4f:8d:94:a6:07:38:13:
ce:20:d2:a5:6c:f7:0f:17:d7:72:d2:15:96:1a:6a:
88:db:c1:c2:ec:63:7a:82:c7:98:58:81:3e:90:98:
63:57:e7:56:8b:25:4f:79:98:00:a9:5e:66:50:de:
28:4b:24:c0:f9:a6:92:82:37:06:ef:14:30:02:9c:
fd:29:b2:16:2f:b4:13:71:22:3c:5d:fa:8c:1a:4b:
0d:a1:49:83:f2:16:66:29:60:ee:98:ad:ed:d8:62:
40:3f:44:50:ad:3c:e1:12:ea:59:47:0d:47:a4:eb:
97:45:3b:84:bc:7f:4b:11:5a:e6:90:59:7d:13:3b:
c0:b7:1b:41:76:df:ec:49:9b:fc:74:17:f0:64:29:
e3:d6:0a:f2:b6:72:f8:65:95:26:0d:30:59:63:43:
e7:56:8f:5c:be:9f:b6:0c:30:58:ec:10:31:ae:19:
7b:28:20:ce:29:16:5b:70:de:da:0d:24:72:60:30:
a3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:D4:5B:44:CD:83:41:F8:80:3D:22:07:AB:B6:93:A8:BE:A7:11
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d2:e6:1c:70:ed:95:65:9c:49:cd:c5:0b:80:09:ce:80:a1:
dc:2a:51:0f:99:5e:c3:11:d1:1b:bc:9b:76:c8:34:70:03:76:
24:b3:26:af:cd:db:5b:54:90:7b:14:8c:e4:d9:e5:56:99:df:
cf:a7:9d:61:92:ad:0d:a2:16:ed:fc:d5:70:e0:28:18:02:d0:
e6:cf:5b:77:7a:55:7b:5e:0a:e5:af:97:69:31:ad:12:63:e8:
4b:e5:84:18:18:d9:3c:d8:7c:34:43:bf:53:81:0a:72:15:aa:
3a:7d:3c:75:68:8f:cd:74:a2:f4:cb:24:36:dc:22:ae:57:4b:
ee:ac:d6:85:4d:9c:f1:85:39:6d:72:9d:16:f6:ea:d5:6e:d4:
71:5b:26:f4:13:be:7c:29:5b:6e:61:45:06:75:df:4b:d2:cb:
c6:d6:6f:2f:bd:b5:26:5d:c4:cd:73:44:fa:f0:4b:d5:af:d6:
aa:03:c9:61:8c:23:5d:bc:40:d6:68:14:2c:88:9c:ca:b4:7f:
b1:c9:0a:12:af:4c:64:84:dd:a2:48:2b:24:c6:f4:f7:e9:aa:
a7:e5:5e:03:00:d5:5e:67:d6:80:07:50:10:ec:a9:1d:3d:ed:
08:4c:6d:06:77:01:71:77:46:5c:16:bf:82:f6:10:4b:a1:4b:
85:8e:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:19:01 2026 by rpki-client