Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: KJ69Ikg6CvKNk2mu2WdnMp4r+uu31U3NtzXIUsJQZt8=
Subject key identifier: 09:1C:FA:2D:87:C2:5E:67:28:F9:B8:22:BB:C3:0C:9D:25:55:87:D0
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 019F1A8D742B3DD1EA900FE36C732E6773B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 198B
Signing time: Tue 30 Jun 2026 22:01:45 +0000
Manifest this update: Tue 30 Jun 2026 22:01:45 +0000
Manifest next update: Wed 01 Jul 2026 22:01:45 +0000
Files and hashes: 1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: TjsO0X+crQ0wSPDBibQVhDm9uPbQYUoAfohsc0hzf4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:8d:74:2b:3d:d1:ea:90:0f:e3:6c:73:2e:67:73:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Jun 30 22:01:45 2026 GMT
Not After : Jul 1 22:01:45 2026 GMT
Subject: CN=091cfa2d87c25e6728f9b822bbc30c9d255587d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:c7:db:4f:ee:03:23:79:4d:25:f9:2c:c5:
ec:c6:90:45:17:dd:bb:bd:0f:3b:2c:16:91:ab:e4:
7f:66:e8:92:ee:28:c0:6d:d7:71:09:4a:eb:2c:25:
05:e8:54:1a:6b:44:68:03:69:1e:fd:9c:87:9f:bb:
89:75:1a:af:fe:de:4d:c7:cd:d9:92:fd:c5:6c:ef:
c1:19:57:63:c8:67:60:a6:92:d1:53:6c:99:a4:e1:
89:98:13:a0:6a:ac:cc:03:80:32:eb:ff:24:35:73:
05:61:68:23:f0:9a:46:e4:ac:d7:d6:c5:b0:a5:f4:
87:87:25:c4:d1:d3:53:16:3e:1f:3a:38:c1:a2:c8:
65:80:5d:80:c7:4c:94:cd:86:ca:1e:8e:17:6d:14:
43:a0:d8:11:2e:51:04:5c:21:94:8e:d6:19:4f:0d:
46:ae:0e:49:1f:83:19:0c:8b:c7:f4:9a:99:44:fb:
d6:d1:fa:07:3e:5e:e2:a9:5c:b3:ea:39:8b:75:2d:
e7:da:01:ee:7f:7b:c2:80:1a:2e:89:c8:a1:e3:d1:
b0:08:4e:e7:e8:f9:1d:d1:96:83:2f:00:c2:f6:e7:
df:9c:62:42:b8:35:ca:70:48:37:c3:c0:63:29:7a:
cb:07:e6:57:6e:e3:1b:8e:70:bc:4d:4b:79:26:9b:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1C:FA:2D:87:C2:5E:67:28:F9:B8:22:BB:C3:0C:9D:25:55:87:D0
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f4:12:cf:83:51:ba:70:42:4a:1f:9c:59:3a:1a:b7:aa:bc:
dd:db:82:a2:98:80:45:fd:88:a5:21:e7:83:72:12:07:e9:42:
bd:ab:7d:47:47:06:32:2f:b1:43:b4:9b:95:0a:15:0c:e5:0f:
f9:15:1c:f7:8e:b9:d3:63:3f:3f:84:8e:52:3d:ee:a1:6d:04:
26:10:50:16:ff:6e:41:4a:c4:69:b8:81:65:0c:18:ee:b4:b1:
27:98:96:fa:cd:af:12:f7:15:6b:01:62:45:49:c1:2b:7a:f9:
c1:cd:27:e4:a1:18:87:44:6d:8a:4e:73:5f:05:91:c2:c6:9c:
f1:97:ab:38:31:e0:10:24:b8:05:00:f0:a5:87:65:43:f8:d7:
06:fe:c7:cd:e7:4f:fd:32:15:f0:a8:26:7d:3c:a9:72:8a:90:
86:b2:6b:9f:d8:18:1d:43:e7:90:9b:31:6f:d5:22:91:51:26:
d8:33:cd:00:02:67:4d:13:32:e9:25:d5:e2:a9:ec:2b:13:51:
d2:9e:5c:2f:db:24:fc:1d:c0:54:03:35:97:33:c5:5c:51:4e:
55:0f:59:49:e2:ed:3d:7b:e3:ea:a2:3c:77:f1:d9:8a:9e:47:
94:cb:18:ed:88:d6:c1:bf:70:a5:54:8b:3f:09:e9:0f:36:2d:
e7:73:fe:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 04:37:58 2026 by rpki-client