Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: bfYo5569AqeZA+ajOjLfL8yc+Qi3vn6TmFwH4trH/Zs=
Subject key identifier: 25:30:4C:A5:99:8E:41:89:A2:1A:E2:E7:3C:10:6E:E2:F9:DE:40:4E
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 019F3784BC3E97C6D9D4B2A3B12B2675D471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 1998
Signing time: Mon 06 Jul 2026 13:01:13 +0000
Manifest this update: Mon 06 Jul 2026 13:01:13 +0000
Manifest next update: Tue 07 Jul 2026 13:01:13 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: AkZqTG1Q4bl4efzAr3qtT3jS7o1OCsswd66TJQ4cuZE=)
2: h1p2BzAieyl1ApnxPEttQPuDtWU.roa (hash: T9Vp6UskSb/GKkOMqcCRytqZocUe4Mj13FcfGtvSquU=)
3: mYxTsBuptxg1kgWOtdboXauu4ak.roa (hash: V7RDvGZhHUFL2UFwaRSbcJfAdDyrvulCNCnMCGHUgPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:84:bc:3e:97:c6:d9:d4:b2:a3:b1:2b:26:75:d4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Jul 6 13:01:13 2026 GMT
Not After : Jul 7 13:01:13 2026 GMT
Subject: CN=25304ca5998e4189a21ae2e73c106ee2f9de404e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:70:8b:a7:a9:2d:d2:70:72:82:c8:7d:86:
d9:62:e4:4c:20:4e:be:35:8c:a5:e3:64:e2:6e:5d:
bb:8a:7f:49:3b:a7:31:72:d3:dd:f6:f1:e0:04:93:
db:2d:cc:50:09:b2:d6:e9:c7:85:c1:90:1f:57:13:
0e:97:ec:52:5b:f5:12:42:e7:61:28:73:ae:24:a5:
68:eb:26:0f:dc:05:fe:01:9c:08:dd:af:13:ca:c6:
c1:58:7b:27:18:7a:e1:55:1e:ee:a2:8b:8a:a9:87:
4e:96:e0:0e:3e:d6:c5:96:17:1b:81:bc:8a:09:03:
a6:41:e5:dc:1d:2b:71:f1:0b:c5:e7:0f:a4:b4:b6:
cb:b7:65:89:b1:1a:07:3d:d2:10:0e:41:f4:5a:32:
c6:28:08:91:7b:83:c0:21:d0:87:f0:87:fc:a9:91:
21:b1:0f:09:5c:fb:09:0a:16:a4:a6:7c:b4:92:a2:
3a:70:7d:6d:5d:9f:ef:8e:fb:26:4b:38:bf:f5:6f:
3d:df:05:78:3c:8e:c7:c3:78:2b:07:95:ca:eb:ee:
ae:b0:22:05:9e:97:ae:6d:9e:42:18:ec:19:15:7a:
39:e3:46:fc:85:e2:c4:e5:5e:17:4e:e4:77:73:b2:
04:e9:c1:8b:f0:1a:68:07:85:dc:29:07:2d:ac:62:
d1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:30:4C:A5:99:8E:41:89:A2:1A:E2:E7:3C:10:6E:E2:F9:DE:40:4E
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f9:0f:d3:72:85:9d:8f:8d:89:a7:78:70:05:bf:62:53:52:5c:
da:be:d5:3c:8c:c7:bb:c7:9b:79:8e:75:b5:aa:a2:1c:21:0b:
d3:45:83:2f:24:cc:c3:3a:4a:90:4f:2c:27:cf:11:28:a8:2a:
2d:d7:36:f1:32:ed:26:7a:64:e0:70:cf:b9:c4:23:32:92:43:
16:32:51:04:ad:db:5e:e5:c4:74:64:e9:ff:e1:bf:f4:ab:de:
bf:05:53:a1:93:4b:7b:94:78:6b:d4:fb:38:00:ff:ac:4b:ce:
1e:7d:71:e7:06:2b:ad:2f:34:c9:ae:31:63:50:f0:57:9f:5f:
b7:50:7b:21:1d:88:0e:a0:9a:3d:c6:3b:9b:20:e3:1a:e3:02:
6b:8c:dd:56:52:ab:75:ae:f3:65:db:66:1b:6a:a2:16:67:db:
ee:6c:cf:93:6f:a3:ac:0a:a6:f9:79:e0:01:d8:3d:b8:da:bd:
27:03:f2:4e:17:57:f0:e7:1c:21:15:b2:95:65:80:be:c1:cd:
a4:82:34:28:f1:c2:06:3b:56:10:86:70:82:37:fd:cc:ad:51:
5b:2f:89:b5:91:be:b7:37:1e:b0:12:db:fb:95:ca:9b:f6:75:
8b:2f:c0:3d:29:47:16:f8:05:4f:b6:86:73:da:bf:83:e6:18:
25:97:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:23:44 2026 by rpki-client