Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: jg7dRwPBNiTg+1tSTzly7fgfKYT58meQf0sOK6kJXQ4=
Subject key identifier: 6C:0A:2B:88:9D:6E:1D:EB:4A:1B:70:EA:BF:74:0F:2E:E1:74:1F:2C
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 019FA071EEA279E7941458A3202A9F250E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 19CD
Signing time: Sun 26 Jul 2026 22:00:48 +0000
Manifest this update: Sun 26 Jul 2026 22:00:48 +0000
Manifest next update: Mon 27 Jul 2026 22:00:48 +0000
Files and hashes: 1: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: 2hVWMXPH/+8X4bPZexr9e5O0wU/YUykEzxQ8KmNRLOk=)
2: xxEAYZPjZGUFGslrurHMaeLtIsA.roa (hash: r31Amyvct5exQwmbmgPrj5bGx7+Kws5esYO/01oko3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:ee:a2:79:e7:94:14:58:a3:20:2a:9f:25:0e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Jul 26 22:00:48 2026 GMT
Not After : Jul 27 22:00:48 2026 GMT
Subject: CN=6c0a2b889d6e1deb4a1b70eabf740f2ee1741f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:33:04:70:27:a7:df:2c:9d:65:90:73:42:
d6:97:9d:db:a9:48:a0:08:9c:a5:7e:fc:a1:fa:0e:
85:e7:ee:d2:ed:8b:a5:17:7d:40:ec:8c:53:01:99:
8c:a7:0b:d3:e1:b2:d2:41:e4:41:7c:28:de:a9:f0:
19:74:28:2a:90:72:cb:a9:af:a3:a0:21:da:2a:a4:
d6:5c:ff:9f:0b:d8:49:6c:68:68:03:4b:70:96:85:
74:17:c5:27:69:cc:e0:10:55:9d:6c:cc:7a:57:4f:
8f:14:53:43:72:ae:76:56:e8:ea:d8:eb:28:9a:62:
41:18:02:a2:8f:52:94:d0:06:92:68:38:77:04:30:
2d:e9:d7:06:e0:c7:97:7a:12:1e:0f:41:50:50:48:
4f:30:33:c9:6a:68:6c:aa:74:21:82:75:10:26:56:
67:ec:20:37:ef:a7:64:4b:53:f4:d0:ae:76:dd:40:
8d:de:e7:68:83:13:d4:1b:24:d7:d5:3b:7f:e0:3c:
ea:c9:09:7c:8c:3e:3b:74:d8:14:3d:71:71:01:73:
4b:9e:09:6d:44:af:e4:1a:bb:e1:c9:48:2c:f9:c8:
5d:e9:a2:86:78:69:24:dc:8c:1c:a8:a8:2e:50:b2:
03:19:aa:cb:a1:a3:c0:ab:72:db:2d:5a:49:08:dc:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0A:2B:88:9D:6E:1D:EB:4A:1B:70:EA:BF:74:0F:2E:E1:74:1F:2C
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e4:4e:f4:0b:73:4c:72:e5:c4:22:41:35:02:3f:31:4a:0e:
51:79:17:d1:61:78:81:a6:21:a0:a9:e1:ce:f6:f3:ac:4c:f3:
ec:19:31:99:ec:a7:98:c3:b7:95:50:73:f2:db:34:b7:b3:24:
a1:08:89:2e:3c:9b:d0:99:98:6d:42:ac:70:a1:d9:4b:c9:d8:
00:f8:ef:c5:66:22:93:43:05:a9:bb:8c:03:93:52:61:04:e3:
15:ce:ef:e8:87:36:8e:a9:3f:33:04:9d:33:73:cf:0e:5e:91:
64:91:0d:43:3c:2b:22:0e:1f:c9:dd:33:ab:71:14:18:61:d6:
40:ce:5e:98:59:98:ea:1c:b4:66:6d:1e:02:9f:a3:81:13:95:
89:da:2a:99:24:52:41:12:49:7e:44:d5:58:30:88:2e:d3:08:
47:46:34:71:bb:a7:f6:fb:b6:18:42:de:16:6a:90:2c:8d:ff:
e1:b4:84:ea:4d:3c:49:f8:ee:ab:52:fe:89:76:0c:32:ca:58:
b3:68:78:39:85:d4:e2:32:ba:10:b6:a8:6d:2c:89:a7:b5:5c:
1b:d0:72:6f:cb:3d:04:ad:b8:be:cb:f3:33:50:f5:ad:79:09:
fe:9d:66:e3:69:91:08:51:8d:86:77:7c:a8:0f:44:92:c5:e2:
3c:e5:74:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:37:58 2026 by rpki-client