Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier: FU5NxN1d8or11dbqrgniKa1U+A9stmkp+ge/NR/GWik=
Subject key identifier: 66:30:4D:EB:68:7A:5B:3E:72:95:4C:04:C6:D7:49:60:73:29:48:6B
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 019F9D706CBA31537000258D2AA94E0FCF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number: 0D55
Signing time: Sun 26 Jul 2026 08:00:18 +0000
Manifest this update: Sun 26 Jul 2026 08:00:18 +0000
Manifest next update: Mon 27 Jul 2026 08:00:18 +0000
Files and hashes: 1: 3I57kWj-MwOuWGgEJOOA7NVOnaw.roa (hash: u4MWGRCWmsfLRNP506Vpdbs2aaAzu9zhtPD+IDIYvpU=)
2: CnF9cjlgaGUvfor-A11xEctTpak.roa (hash: lSwL0usE/Gb/GkCss8GSY6ht7fo/KB8MqQdEL3prjBY=)
3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: Qqq9Hgnn1wacCJ27x/vRLM9q+cm2TxySKcSnCQzmqKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:70:6c:ba:31:53:70:00:25:8d:2a:a9:4e:0f:cf:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Jul 26 08:00:18 2026 GMT
Not After : Jul 27 08:00:18 2026 GMT
Subject: CN=66304deb687a5b3e72954c04c6d749607329486b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:a0:c3:3c:87:9f:56:82:1b:84:68:ad:90:
55:45:35:0b:47:77:24:61:e6:07:90:e5:fa:c3:79:
6b:fa:ce:b8:98:f4:6e:17:33:3b:92:ee:ae:ac:53:
c6:c9:c1:fe:da:16:a6:6a:24:2b:b5:f3:b3:ee:09:
15:d2:29:70:a3:2a:a5:5a:32:cb:3c:91:4f:4d:c0:
ce:1e:69:9b:6d:2a:c5:7f:08:a4:82:f5:f1:28:4d:
06:97:09:05:dd:01:82:d7:12:29:c7:98:82:1b:18:
7a:41:03:3d:51:68:5d:79:58:a8:fd:3c:63:2d:78:
90:26:59:3c:0d:d7:cb:d7:16:13:4c:36:4f:74:48:
7b:b5:74:48:17:8a:fc:6b:3d:ce:37:c5:47:20:e9:
49:a1:08:7e:b2:c2:27:a3:12:ef:cb:67:94:4f:a4:
d5:df:b8:4e:a9:77:1f:06:d1:98:41:ff:12:73:1b:
b8:de:68:eb:04:15:b2:c6:ef:46:c1:cf:64:b3:c1:
13:28:0a:97:61:9c:07:fa:23:3b:e9:eb:3b:6a:1c:
27:9b:f6:34:97:47:2c:19:a3:56:0e:b1:d9:92:7b:
c4:0c:69:3a:dc:88:08:2d:62:0a:bb:6a:b3:2a:68:
e3:cc:dc:56:a6:a2:7a:55:83:47:11:64:04:c1:37:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:30:4D:EB:68:7A:5B:3E:72:95:4C:04:C6:D7:49:60:73:29:48:6B
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d5:73:8c:26:51:01:3e:30:d3:36:01:8c:a4:59:19:58:5a:
26:5c:10:5f:40:d6:05:de:41:9d:26:7f:9c:22:85:31:3c:74:
5f:7b:2c:74:74:cf:f9:e4:57:81:74:5a:ee:f5:89:57:d7:7a:
ea:87:92:76:85:d4:d3:b0:d7:9a:ee:c9:38:67:b3:8d:4d:19:
fc:c8:60:31:08:d5:be:98:8d:13:60:27:d0:05:4f:18:33:a4:
e8:3e:81:74:54:ec:31:ad:c7:d6:64:85:80:7a:f3:a2:c5:5f:
12:0e:9c:1f:04:d6:53:ec:d4:12:f7:e7:ef:84:e9:2f:4f:41:
0d:b8:12:0c:24:cd:ba:6e:1a:81:d6:f3:ab:71:80:2e:b6:d5:
e2:59:10:a4:c2:7a:4d:53:91:78:07:d3:c4:53:3f:b0:8d:35:
69:e5:5f:e7:25:f1:c5:6b:0a:7f:82:c8:36:3a:89:c8:75:8f:
dd:4e:9a:1e:c9:0e:65:e0:77:0e:64:d4:17:5e:9b:0e:36:7f:
5a:3f:2d:37:8b:fd:e0:c7:16:00:cb:14:5c:83:4e:1b:1a:f7:
c2:53:fe:41:21:ca:55:ad:e5:d4:05:1e:6b:be:62:f9:3e:99:
ed:d0:32:95:17:12:b8:bd:ba:37:2b:0d:82:e7:d3:8f:5b:a3:
19:9b:07:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 09:42:39 2026 by rpki-client