Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
File: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft (raw, json)
Hash identifier: 5hr07EZatXl98R75Xxi51E13UZmrQjB0/48EczO8tCo=
Subject key identifier: C0:E4:8A:DE:5B:BE:77:99:61:24:18:5D:00:B0:A2:2A:94:8A:22:41
Authority key identifier: 1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
Certificate issuer: /CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Certificate serial: 019FA2CE15B4840732ABF3E06DD8F312552E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:42 +0000
Manifest this update: Mon 27 Jul 2026 09:00:42 +0000
Manifest next update: Tue 28 Jul 2026 09:00:42 +0000
Files and hashes: 1: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl (hash: tb0NfaDheHDLMEnuOSe+q/+OS8e5hLT8SIBFCG5h4m0=)
2: V9X49EieL5muWb2FuiaJlUR-F0M.roa (hash: KCwcP0n4ZTZ4GNIBxxk+6aPghXeAJv53hQU1wGojBWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:15:b4:84:07:32:ab:f3:e0:6d:d8:f3:12:55:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Validity
Not Before: Jul 27 09:00:42 2026 GMT
Not After : Jul 28 09:00:42 2026 GMT
Subject: CN=c0e48ade5bbe77996124185d00b0a22a948a2241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:ea:59:c4:95:58:df:1b:1e:a1:62:cf:0c:
c5:05:7f:87:4a:6b:ae:b5:38:4f:75:7d:3d:54:12:
43:ee:4f:86:b9:bd:1b:f6:f7:50:d6:6f:67:66:2d:
6a:54:6b:d5:d9:c6:72:be:b4:1d:c4:18:7f:19:ab:
05:bc:7f:66:4d:29:97:87:94:1b:3b:d8:b6:43:35:
2a:7d:1d:ba:03:d3:8f:73:cd:c7:d9:5f:4e:f5:34:
d7:b8:20:8b:d5:e3:f4:0c:fc:f0:ee:d1:d6:98:54:
1e:b4:90:3c:45:7a:84:a5:7c:d4:75:23:66:2f:ad:
a8:f7:b5:dc:8f:cb:b7:80:b5:5b:a3:6b:57:bc:4a:
bd:fd:98:cb:53:07:0c:ae:af:d4:07:ce:3b:21:71:
b3:b1:b3:8b:9d:d0:81:74:a4:08:a9:48:c8:47:4a:
50:c4:79:18:ac:34:58:e2:84:5b:1f:2e:7a:35:0e:
c2:34:48:ea:21:31:02:39:8a:95:00:e6:30:e6:c9:
6f:ba:28:6d:fe:2c:ca:9e:7f:d8:8e:98:9e:38:ca:
d9:92:ac:8a:56:86:71:f3:3a:fd:c2:5c:4d:86:c8:
54:5d:1d:50:bf:14:92:4e:5f:4a:e5:a3:1f:de:d5:
80:75:e7:da:7f:d9:bd:89:89:a8:3a:9f:63:26:ee:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E4:8A:DE:5B:BE:77:99:61:24:18:5D:00:B0:A2:2A:94:8A:22:41
X509v3 Authority Key Identifier:
keyid:1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2d:a9:57:65:6f:09:d5:45:44:4e:17:d9:34:3b:38:25:22:
87:c0:93:ea:e3:74:36:8d:5d:34:69:59:6b:8d:43:0c:82:d5:
42:6c:06:3c:84:71:4a:10:e5:52:bc:9d:01:75:5c:47:6d:38:
cf:a9:3a:5c:1c:0a:95:c1:7a:0b:4f:c5:a2:dc:ee:ea:fb:bb:
31:fb:f0:34:20:c1:6b:06:fd:06:e4:8e:c6:33:0c:50:43:e6:
a1:a2:22:f1:7b:53:1b:d0:26:a3:8a:8f:e8:e8:d7:22:35:60:
d5:0b:11:c7:39:65:8a:17:b0:17:39:5c:f8:c9:20:49:09:33:
55:82:49:b5:93:b3:36:a1:7e:a1:3b:61:0f:77:5a:58:81:ab:
e6:dc:56:34:12:f3:ff:ff:30:db:80:03:14:54:b3:26:99:0e:
77:2d:9d:20:8e:c0:8f:20:e0:06:a0:00:a3:76:21:96:39:71:
17:3d:09:7a:7f:41:5d:5c:59:d9:12:a0:1d:4a:6e:35:37:38:
58:c4:2c:43:45:92:38:cb:35:93:60:52:76:7e:ff:a9:0a:e5:
c6:78:62:88:9a:3f:ae:c3:6b:a8:d8:6d:15:5d:7b:a0:ab:d1:
7e:80:29:19:94:13:a5:6f:d6:65:88:61:18:14:7b:1d:89:2c:
0a:20:f3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:14:16 2026 by rpki-client