Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: PLN4Y5pTfZARR4J8AJGhZCgjjeDMBG3oBxeEfPEtRlc=
Subject key identifier: 1A:5D:51:85:BE:72:5A:C8:9F:27:03:66:FC:04:DE:8A:BE:F4:9E:1B
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 019FA2605043850F3A5D5401BD65B8A00D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 0976
Signing time: Mon 27 Jul 2026 07:00:48 +0000
Manifest this update: Mon 27 Jul 2026 07:00:48 +0000
Manifest next update: Tue 28 Jul 2026 07:00:48 +0000
Files and hashes: 1: 0H6DHWgUAtXOivju56hFgL-nhGw.roa (hash: I9m54I/Z01Nh505kPQQ4RFFg0741LI/tIETTjmBrhnA=)
2: 1wi2b2zvXYOQb6fb9ZGQlqgjTV4.roa (hash: /WLcLqxm8e7HJSestWXx0nHEBjwh3y9r5DzebbE7Z0Q=)
3: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: RBhgwABygMje7rWGs8egBujQXbzmSm8tMUePVVnkHeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:50:43:85:0f:3a:5d:54:01:bd:65:b8:a0:0d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Jul 27 07:00:48 2026 GMT
Not After : Jul 28 07:00:48 2026 GMT
Subject: CN=1a5d5185be725ac89f270366fc04de8abef49e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:fb:5a:92:1a:d9:c4:5a:e5:81:3a:ca:4c:
6f:7b:69:8a:39:e8:57:bf:99:c9:8d:ee:be:16:28:
fb:92:2e:af:d8:b4:03:a7:43:eb:e4:15:79:0a:bd:
f0:27:60:6f:ad:00:7c:e4:56:b0:ae:5a:90:85:e3:
7a:80:70:9f:b3:ab:40:42:a2:98:01:15:bf:dd:5c:
56:81:9c:bb:cd:15:e1:8c:5c:31:ec:13:b7:31:e8:
69:6b:4e:1d:56:9b:e7:27:4e:cc:1e:4d:ea:ae:96:
e4:a3:8f:fc:40:47:70:ce:67:c3:44:c4:bf:88:01:
7c:3f:fe:e2:10:9a:32:19:2b:91:8a:3e:16:bc:60:
2c:3c:26:6a:e3:7b:86:44:0b:c3:64:59:3f:8c:d6:
26:6f:8d:b9:9a:3a:3b:66:71:54:b9:8b:33:60:cf:
ac:38:a7:98:2c:aa:bf:5f:ca:86:8a:e6:c7:78:c2:
d9:0e:b2:48:65:58:38:2c:64:04:70:81:8b:d7:56:
a5:69:fe:42:6a:10:63:2c:df:e7:e0:ae:d8:6f:01:
4a:05:00:6c:7d:81:ac:f2:5c:9e:97:4a:29:c1:db:
1c:14:83:0d:42:47:24:1d:cd:fa:d0:b1:1c:41:8d:
bf:12:33:13:cc:9e:a2:1a:29:c0:04:c5:da:23:e8:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5D:51:85:BE:72:5A:C8:9F:27:03:66:FC:04:DE:8A:BE:F4:9E:1B
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1a:81:8c:08:10:bc:51:82:e2:e2:e4:3c:1e:5f:3f:06:c8:
18:f6:d8:bf:42:57:88:81:7d:fd:c8:28:86:91:ff:cc:de:e0:
73:f9:73:12:3e:00:3b:59:4e:1f:7c:21:cd:18:49:35:5b:70:
c2:e6:e2:7b:2b:65:f7:fb:5d:ad:a1:4c:b7:42:07:2d:c0:07:
9a:95:67:67:bb:2c:96:1a:ff:8e:d6:03:23:8f:8e:e0:ec:1a:
78:1b:f8:03:69:24:df:aa:ab:53:cb:9b:c6:d6:c7:34:d2:fe:
54:84:da:00:c7:76:ee:0c:c1:b4:f1:7d:bf:bf:67:95:74:a0:
96:4f:ef:02:cd:1d:33:9e:27:93:a0:e6:3d:ee:54:23:e2:a0:
e1:ae:a3:67:d1:09:e6:cc:66:ea:e1:2e:7a:5c:79:7d:5f:45:
ed:65:c5:91:3a:ad:de:d9:9e:b4:3a:d7:c8:bd:c8:c3:23:54:
cf:3d:d0:2d:ce:56:db:7d:0d:9a:77:4e:0a:0d:2c:a7:0c:60:
36:f6:b7:45:f6:83:80:0b:dc:e8:f9:39:83:47:e0:90:8c:af:
25:39:e1:3d:5f:26:a9:87:96:48:f1:48:ed:21:6b:10:a2:52:
fb:b7:e3:19:e1:d5:6d:ef:40:34:42:d4:39:52:f8:bd:10:c1:
69:e3:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:58 2026 by rpki-client