Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: S+ElCjc60VzzHUXVQ2OpGh/ZPiLXv0o3iYvU59QCDpQ=
Subject key identifier: BE:10:E0:F1:13:CE:5E:55:B1:79:2A:00:C4:83:3A:AD:1F:39:18:18
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 019F9F5F45A9F082762B3872D4FD14192230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: 0113
Signing time: Sun 26 Jul 2026 17:00:48 +0000
Manifest this update: Sun 26 Jul 2026 17:00:48 +0000
Manifest next update: Mon 27 Jul 2026 17:00:48 +0000
Files and hashes: 1: AhAcdKgAbaxev6WZheq94rPVhy4.roa (hash: jnz0tuvjSI9nchLY2GePdtWDuCFuuGK4nahWThqEMJU=)
2: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
3: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: HyD0ug87pCz8a7jDp6fauzMV2okqnpjqyZhMvIlmT5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:45:a9:f0:82:76:2b:38:72:d4:fd:14:19:22:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: Jul 26 17:00:48 2026 GMT
Not After : Jul 27 17:00:48 2026 GMT
Subject: CN=be10e0f113ce5e55b1792a00c4833aad1f391818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:46:b4:26:3f:4b:91:2d:40:b2:40:48:fa:
3d:9d:8b:3c:9f:1e:9b:9e:d7:b0:18:9e:8e:b1:55:
05:a7:05:75:57:8a:4a:c2:7f:68:b1:d0:44:7f:e6:
a9:90:1c:4e:91:84:5c:ff:5c:57:60:5c:e4:99:c8:
32:0e:a0:4b:49:29:31:18:ff:30:56:81:2b:4e:43:
ae:e3:9e:e5:29:a3:97:7f:d9:22:82:19:85:1a:4b:
f4:af:2c:db:f7:98:aa:e6:aa:ef:3c:b6:a5:d2:d1:
cb:d8:a2:57:e3:5c:4c:eb:6e:e4:e0:a0:31:29:df:
9e:9c:5c:57:83:a4:1d:d6:50:53:cc:ac:24:aa:63:
f6:93:15:ac:f8:ef:ff:15:c3:1a:d1:a6:9d:5b:ce:
e8:8e:23:70:bb:8f:c1:db:11:af:30:32:f9:bb:14:
c4:7a:8f:4c:2f:4e:b3:ec:6e:96:01:b2:de:28:db:
d3:97:b1:27:92:64:51:c0:91:c0:f3:c3:ab:da:f3:
be:56:6b:0e:e0:85:b8:ca:d5:05:8a:2e:50:bd:c8:
89:97:c8:5f:b7:5a:0b:37:f2:1d:03:26:14:4b:58:
cc:8a:de:b2:54:02:61:01:31:ef:d6:d0:78:b7:6a:
34:d4:40:43:48:ec:7e:16:68:c9:b2:83:38:f9:30:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:10:E0:F1:13:CE:5E:55:B1:79:2A:00:C4:83:3A:AD:1F:39:18:18
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5e:5b:af:63:0a:23:83:d0:ab:4d:ad:24:7f:90:8f:1c:e0:
e5:52:a3:b4:0f:f0:63:ba:7e:ab:77:ae:64:a0:b3:59:62:84:
f8:3f:b3:ed:76:12:84:49:ac:59:f2:6e:87:e3:45:9e:6e:1b:
04:71:1b:92:b0:92:0f:ed:97:b2:11:7c:91:ec:7d:50:ef:19:
01:07:91:78:82:5f:02:d3:48:ba:ec:a9:5a:47:f5:e2:69:92:
66:f4:a9:46:fe:53:7d:5b:e4:d6:58:50:7e:eb:c3:20:67:b0:
83:3c:58:be:7d:c8:a7:9c:86:5d:75:ef:f4:02:85:1f:7d:87:
f8:91:6b:ce:a7:c7:64:7b:f0:05:59:90:b6:2a:6b:9c:93:08:
c7:14:e9:2f:4b:e8:4a:0e:d6:b5:fc:34:4d:68:4f:ff:29:ee:
9a:3f:45:a0:f1:f1:25:56:5c:77:72:f0:7a:5c:59:1f:3d:01:
fc:91:9e:08:50:95:07:db:c9:95:66:c5:8f:2a:2b:4a:68:f3:
85:3a:b9:aa:bd:de:c6:e8:c9:d7:01:6f:12:fe:04:03:48:03:
af:d4:03:1f:48:5d:4f:83:a7:bd:a1:39:c5:15:d5:c2:71:db:
86:a0:2f:83:54:68:25:19:4b:1d:b5:22:91:bd:ea:0a:29:46:
f2:5f:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:55 2026 by rpki-client