Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: yWOreIawoT2B/Q4/wyagxRCOECC4SDDWrY9i9hzkhJY=
Subject key identifier: 14:E3:FB:FC:18:1E:FB:AC:7D:66:AC:DA:2A:03:ED:E1:F0:7D:FD:25
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 019FA116E7139A95B8A4328EB5DF3DE02E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 01:01:00 +0000
Manifest this update: Mon 27 Jul 2026 01:01:00 +0000
Manifest next update: Tue 28 Jul 2026 01:01:00 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: J7fQK2HVDK6wrIa3qDa29xI3Z4By3GxlODAHLnekJ3c=)
2: WbZZ0bsB0Dkjf22adEANEIVciOI.roa (hash: +91x+OdHLOJGO9VKUPZYkd68HxtgAtv1r1GZzY3/TUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:e7:13:9a:95:b8:a4:32:8e:b5:df:3d:e0:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Jul 27 01:01:00 2026 GMT
Not After : Jul 28 01:01:00 2026 GMT
Subject: CN=14e3fbfc181efbac7d66acda2a03ede1f07dfd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:21:ad:2b:07:97:b1:73:04:1f:8b:d1:c0:3c:
3e:cb:b9:ba:4a:8b:ed:91:21:bb:7e:f3:ff:a0:b7:
19:74:88:1c:4c:f8:d1:c9:d8:f4:52:e9:73:9c:a1:
73:32:6d:3e:f5:ba:cd:0e:a1:de:ba:45:c2:63:f6:
af:29:ce:49:81:c7:5e:f7:de:31:a2:7f:b1:a4:ed:
67:9c:3a:bc:ea:c3:a6:e0:cf:58:66:57:33:86:39:
b0:88:9e:bd:56:bb:af:ea:43:99:ae:47:29:7d:e0:
2f:fb:44:31:31:14:ac:a3:eb:39:35:1b:c7:f4:b3:
d0:1f:72:24:61:3b:18:34:80:d9:5d:62:67:8e:b3:
e0:08:77:d1:64:33:d3:ce:10:26:92:69:b2:b3:6e:
83:43:ae:43:84:49:04:0e:18:77:c2:99:25:07:f9:
fd:14:99:c9:e5:2f:d6:82:a3:6c:22:db:81:21:ef:
c3:01:e1:2c:89:f2:7a:bb:7a:b2:68:94:3e:00:96:
ea:ec:50:49:c3:61:0a:c0:2f:ab:56:10:17:c7:b9:
0b:3f:08:a0:5d:13:68:1e:55:c3:99:ea:9b:61:09:
1b:26:ce:27:35:07:78:42:94:3f:3f:c3:22:ef:b8:
b1:1e:66:00:9b:08:1c:08:bf:1d:a5:3b:47:80:54:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E3:FB:FC:18:1E:FB:AC:7D:66:AC:DA:2A:03:ED:E1:F0:7D:FD:25
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:28:23:cf:67:1a:40:b4:05:88:3b:bc:27:8c:eb:a1:d0:d7:
cb:64:91:d3:ba:f2:f2:a4:2a:8d:de:a0:1a:94:ff:34:7d:28:
6b:90:b4:bc:06:c6:e6:c7:22:e0:f9:0a:e7:13:aa:7e:ab:94:
bb:df:6e:be:3a:25:a1:aa:5a:bd:1b:66:92:1b:e8:88:12:bd:
c4:2f:8d:f3:32:54:ca:70:22:44:c0:5d:c6:ab:a8:a0:06:73:
8b:a9:00:fb:1c:8a:eb:7c:dc:9e:bc:ff:59:98:12:de:b9:63:
e4:7e:84:f8:9c:4e:8a:d5:3d:ec:43:34:b6:87:81:1d:ac:87:
f6:75:0c:e0:59:9b:00:ab:0f:d7:f5:cb:7c:8a:18:a7:f5:35:
ee:ff:32:e2:53:97:7c:ec:c0:a5:6b:1b:d7:1b:92:79:8e:ef:
fa:9a:95:e8:a9:56:8f:c8:b8:95:97:87:f1:32:58:a1:71:59:
45:33:ce:9d:7f:08:8e:87:8e:60:b5:81:c9:6e:4d:d6:04:d6:
be:4b:bb:53:6b:b6:18:9a:ba:db:85:8a:1d:f8:60:7a:c4:3b:
f2:6c:6b:6d:a5:4b:c7:aa:bf:f1:27:97:a1:5a:80:89:60:c1:
79:70:16:7c:b4:3e:6f:d4:45:65:47:7a:46:c8:4c:9a:57:7c:
40:75:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:12:41 2026 by rpki-client