Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: wWyqfNWdaharIRF3RLmnW0ksrcT2E8yuoksHyqu0Hvk=
Subject key identifier: 51:DA:0B:57:A5:34:DC:62:D9:B0:B2:19:7B:4C:E5:FE:43:64:3F:A2
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 01A01F42ADB92BDDE4FD8E13B93B27FDE022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 1A10
Signing time: Thu 20 Aug 2026 13:00:58 +0000
Manifest this update: Thu 20 Aug 2026 13:00:58 +0000
Manifest next update: Fri 21 Aug 2026 13:00:58 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: QxCJGTaSXOTrJ9Uk5S1J764YzVUe104IfVFMrSkF66Y=)
2: h1p2BzAieyl1ApnxPEttQPuDtWU.roa (hash: T9Vp6UskSb/GKkOMqcCRytqZocUe4Mj13FcfGtvSquU=)
3: mYxTsBuptxg1kgWOtdboXauu4ak.roa (hash: V7RDvGZhHUFL2UFwaRSbcJfAdDyrvulCNCnMCGHUgPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:42:ad:b9:2b:dd:e4:fd:8e:13:b9:3b:27:fd:e0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Aug 20 13:00:58 2026 GMT
Not After : Aug 21 13:00:58 2026 GMT
Subject: CN=51da0b57a534dc62d9b0b2197b4ce5fe43643fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:80:40:ef:57:6c:10:a2:85:cd:83:05:43:
66:a9:74:12:a7:f8:3b:f2:ce:23:17:5b:b5:21:85:
cf:8d:e1:0f:32:48:4c:27:3e:95:08:69:28:a7:9b:
33:ec:a6:6e:34:f6:75:89:67:5c:a0:4f:8e:c3:f1:
85:d1:25:a4:7b:ba:cb:65:fc:ed:5f:cd:82:29:bf:
8c:6f:21:a6:a1:9a:e4:db:43:1a:37:38:d1:d8:52:
e9:c1:c7:ae:06:57:d2:20:dc:0f:1f:0f:cb:35:f8:
24:2e:58:eb:70:31:bf:3d:72:a7:af:c5:6f:c2:87:
6e:88:d2:66:21:c0:c0:e9:1d:67:e5:ce:8d:fd:76:
8e:8b:18:08:00:77:23:cc:b6:b1:6a:55:e0:08:7a:
4c:85:3d:79:a1:41:4e:e4:02:13:88:7c:c3:6e:9b:
26:3a:41:4c:fe:ac:48:46:d8:0c:48:16:4a:8e:91:
58:1d:65:a2:4c:da:af:1a:74:69:ae:33:c6:ff:e3:
4d:b3:74:fb:4d:15:21:3c:20:61:07:5c:84:8c:64:
d6:98:2a:02:74:da:fd:1b:c3:72:d3:55:82:0d:84:
16:e5:db:47:1e:75:0d:22:d0:78:bf:4f:ea:ae:47:
44:3f:e7:23:65:51:89:83:da:50:e7:95:80:c0:a6:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DA:0B:57:A5:34:DC:62:D9:B0:B2:19:7B:4C:E5:FE:43:64:3F:A2
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:66:89:46:b9:d0:8c:b5:ff:08:b0:b9:bc:60:25:af:c8:3b:
65:4b:68:f5:3c:4e:f7:f1:ad:b9:cf:9e:6e:2e:c3:ee:49:aa:
e3:bd:8c:6a:64:ae:80:35:7b:57:77:21:aa:42:1a:42:72:f0:
33:1a:9e:31:5e:ac:3b:59:0d:5e:4e:39:21:e1:38:c4:84:31:
53:4e:17:bf:a2:28:b3:2e:60:64:36:f4:1e:a7:79:44:0a:e2:
4a:1c:8b:67:e4:d6:75:2f:62:0c:81:72:95:49:24:75:ad:19:
66:4d:47:ef:a3:40:90:d6:f6:7c:0d:f0:e6:92:3d:3f:fa:8b:
97:3e:72:64:9b:81:d8:32:f7:e9:20:4f:7b:b5:1d:89:78:3f:
c1:ee:75:1e:78:7a:f5:c0:12:6b:38:4c:ed:03:46:45:bd:2e:
f1:2b:16:15:3d:e1:dc:a0:ca:7d:b8:f4:32:8f:62:45:12:94:
df:f1:38:2b:44:dc:60:f2:91:f1:d8:4d:58:b9:95:86:6a:86:
1f:6c:d2:de:80:a5:2a:34:f3:82:9c:68:9b:9a:25:1e:24:ec:
ce:fa:83:b0:c2:83:c7:a9:18:1e:7b:80:a8:92:93:b7:fc:ad:
4c:5c:75:59:be:1e:db:d7:4d:4b:a9:3c:f8:93:27:2b:60:ef:
b8:aa:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:45 2026 by rpki-client