Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier: h+gfIKsi0NHZqLvu6jltGRb+PngIM6SsjT4xhIk2rm4=
Subject key identifier: B3:F5:A8:8D:18:B3:46:97:6C:FC:37:AD:D7:95:4C:7F:33:D7:5F:21
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial: 019FA1F2DED9715CE87974D0A3A9F9FEE0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number: 1289
Signing time: Mon 27 Jul 2026 05:01:16 +0000
Manifest this update: Mon 27 Jul 2026 05:01:16 +0000
Manifest next update: Tue 28 Jul 2026 05:01:16 +0000
Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: NirkIKmVyWDh/5Pttv72Mv1wLzpIiphcnSzXgR1smnc=)
2: Vf77xukhBIpUTcfDdQGILMMSa4Q.roa (hash: tmWyKSyKboTPLB52PoBpJE8efgve3egkhQ+0cqtz0+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:de:d9:71:5c:e8:79:74:d0:a3:a9:f9:fe:e0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Validity
Not Before: Jul 27 05:01:16 2026 GMT
Not After : Jul 28 05:01:16 2026 GMT
Subject: CN=b3f5a88d18b346976cfc37add7954c7f33d75f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:19:40:4b:a8:5c:d0:07:43:e8:d8:19:f3:
c9:b2:50:e6:ea:5b:02:61:47:e6:f5:1b:2c:41:c3:
5f:36:5b:b7:ad:cc:76:ae:07:c1:fd:10:56:0d:d4:
65:bf:07:68:0a:17:11:eb:03:fc:7c:a1:b1:fa:ab:
03:5d:1f:7c:3c:02:bc:3d:40:5c:59:2f:e3:a3:a7:
01:6e:93:10:e7:08:22:82:44:be:77:df:78:8d:6d:
90:83:62:64:b8:7e:76:56:28:88:a0:50:4f:45:04:
01:d6:ee:3c:5a:85:55:f0:75:61:68:89:47:72:9c:
5c:20:5d:00:38:0f:f4:50:3b:c7:70:4b:20:e4:dd:
3c:88:57:81:88:27:89:67:98:ce:a9:3c:02:91:9e:
92:75:7c:d5:8f:20:bb:3c:af:a0:4c:6f:f5:3d:07:
69:a0:08:ec:d2:89:a3:1b:65:45:d1:a0:82:47:9f:
92:c6:29:45:2b:89:64:52:6c:8a:b4:a8:a8:aa:f4:
6e:8f:c0:9c:fa:e4:02:73:e9:00:55:f9:30:56:aa:
2c:63:4a:af:16:3e:6d:d7:31:8b:6e:87:dd:27:1e:
f3:c0:1f:d2:38:e5:ff:4f:19:3b:9f:57:f2:d8:cb:
e6:1e:6a:a0:66:12:03:57:d8:11:e1:5a:7c:00:93:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F5:A8:8D:18:B3:46:97:6C:FC:37:AD:D7:95:4C:7F:33:D7:5F:21
X509v3 Authority Key Identifier:
keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ba:34:6c:3f:aa:eb:01:d8:7e:1f:58:2d:f8:a4:60:d6:47:
b3:8e:a8:12:8e:52:7a:13:aa:84:2e:cf:60:a6:06:eb:60:bf:
5c:29:a4:4b:8c:5d:85:33:2e:2a:19:ad:97:c9:4e:ef:ec:0a:
10:5a:dd:47:18:96:f6:a8:09:34:c8:d6:11:29:dd:0c:85:5d:
21:d6:dd:00:5e:3b:0f:6f:23:ee:fb:b4:12:b3:e5:56:df:4e:
ad:6a:e0:1c:72:36:30:27:1c:f9:b2:bb:3e:81:00:ff:73:4a:
4e:4c:b9:fa:68:12:45:ba:84:c3:d8:50:8d:e5:6f:c5:9b:7f:
36:ca:09:40:57:bd:96:52:2d:45:ff:d4:e7:3c:ae:f2:49:19:
96:ac:7e:b5:0a:c8:c4:12:62:1b:e5:b4:3e:41:59:52:8e:0f:
f2:97:1c:7c:93:a9:b8:27:13:54:ef:a2:f1:b6:bd:dd:82:ef:
53:85:6e:ef:04:49:0f:72:c5:1c:1f:71:a4:58:83:f1:85:9b:
03:6e:b5:02:1f:cb:ca:2f:df:10:d7:59:9f:53:86:8d:62:b1:
c3:4a:bd:0b:29:4c:76:7a:5c:1d:9e:40:54:e1:50:3b:c7:ec:
72:6e:86:68:9b:8c:79:87:32:a5:33:96:b4:17:23:4f:8f:84:
19:3d:06:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:57:34 2026 by rpki-client