Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
File: H_oFe7xNCbnGccQ_-W81wA3p-7s.mft (raw, json)
Hash identifier: PHxFR4BKtSKYlF1ZdhEMBvPdOVb8IUFuWgGWb9wT/oY=
Subject key identifier: 6B:12:EA:70:96:75:F1:3B:74:B8:A4:28:31:9B:64:7A:B3:A0:FB:1C
Authority key identifier: 1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
Certificate issuer: /CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Certificate serial: 019F84FA566298A9D9A69B3901AC3516BC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
Manifest number: 70
Signing time: Tue 21 Jul 2026 14:00:26 +0000
Manifest this update: Tue 21 Jul 2026 14:00:26 +0000
Manifest next update: Wed 22 Jul 2026 14:00:26 +0000
Files and hashes: 1: H_oFe7xNCbnGccQ_-W81wA3p-7s.crl (hash: DmkfJB8THn+x5u/kPkycOBZf1UxU6kjpF//atQZIxYA=)
2: TvRQaRsziqrRJCQCiUQYjyKVrn0.roa (hash: mrwUynV6T3tedBWfd3iohzz+A8WkbO6ygpgXbd4vXq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:56:62:98:a9:d9:a6:9b:39:01:ac:35:16:bc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Validity
Not Before: Jul 21 14:00:26 2026 GMT
Not After : Jul 22 14:00:26 2026 GMT
Subject: CN=6b12ea709675f13b74b8a428319b647ab3a0fb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:dd:33:2d:75:c4:2e:c4:dd:29:61:21:a7:
fc:55:9b:8a:93:82:ab:da:3f:1c:a0:1b:67:23:06:
78:15:0a:f6:b7:7c:36:7e:f1:bb:0e:50:ab:37:d6:
f0:52:49:20:24:ff:87:7d:49:c0:b9:3c:91:fb:ed:
0d:4c:ad:fd:59:06:f2:6a:4a:9b:3c:ae:d6:cc:68:
8f:c1:7d:d6:91:56:ea:57:fd:6d:2e:e4:d8:9b:05:
69:8e:04:80:c7:ec:0f:70:5a:77:25:e5:71:3a:38:
d1:6a:86:a3:f8:13:15:97:3d:86:58:04:9e:0a:ef:
24:f5:eb:24:17:21:f6:30:34:06:0a:85:54:64:38:
61:ac:00:ca:4c:33:5d:06:30:25:93:82:6d:9e:c6:
c0:51:81:cf:10:f1:15:d5:a3:a1:37:43:3c:65:13:
5b:58:cd:f6:df:f7:90:8c:67:e1:7a:56:8f:14:d8:
3a:d4:f0:5f:b1:39:82:25:80:6b:26:a7:8f:4b:20:
a3:d9:f4:09:20:71:81:35:21:8a:cf:69:08:6d:bf:
a1:c2:84:8a:46:6c:6b:74:8c:8a:a2:91:b0:91:fc:
2a:4f:ab:fb:4e:f4:d1:20:1a:5e:2c:f1:3d:72:ec:
01:a5:e2:b3:ec:cd:41:4a:0c:f8:b8:17:80:c7:a2:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:12:EA:70:96:75:F1:3B:74:B8:A4:28:31:9B:64:7A:B3:A0:FB:1C
X509v3 Authority Key Identifier:
keyid:1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4d:af:33:b1:d5:02:7a:d8:b5:a6:90:c2:bd:89:ce:1e:c5:
fb:b6:5f:54:c3:7f:07:99:65:1c:33:f0:d8:81:6f:0d:1c:c6:
b8:2d:85:d0:18:02:03:95:89:ab:df:cd:d1:7e:ba:c1:1f:6e:
09:3d:e0:ea:74:8a:71:44:55:7e:5a:65:6c:81:02:d2:63:83:
7a:bd:f4:4a:b8:17:ad:d3:39:45:04:3d:54:1b:57:a1:90:37:
dd:89:15:c4:de:fc:e0:f0:68:0a:5d:fa:8c:04:b8:5a:67:0d:
6f:79:de:6d:01:2c:ce:65:c4:bc:49:96:26:d8:36:20:f7:c7:
d2:94:32:41:3a:05:d2:6c:f6:75:65:74:7f:5e:ef:ab:7e:f5:
94:8d:c6:ab:70:60:8d:0e:ec:92:f1:6f:77:9a:d5:1e:f2:52:
2f:f3:1d:9b:6f:10:9d:cc:72:a3:20:78:19:6a:43:33:d3:7b:
c3:f3:a4:03:58:69:b6:31:43:52:8b:f8:90:21:06:87:22:6e:
c7:db:e1:5c:ef:e1:ba:17:34:25:b9:33:32:d1:23:8c:b5:19:
18:cb:4f:99:4d:0d:ea:df:cd:a7:27:29:51:7a:50:42:1c:02:
ae:2e:e9:db:89:c3:ad:a0:af:de:6a:10:ef:85:09:25:1b:61:
49:d0:c8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:43:47 2026 by rpki-client