Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: MNnlC6OsHzsKYjhxcc/EBwD2guch0b6aGThqhK6vwbI=
Subject key identifier: AF:88:6F:91:64:FD:95:F3:65:33:7D:6C:1F:A1:79:E2:3B:BE:29:FD
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 019F9FCD5E5AB42811A1ADBB75D8F58E35A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 0C0C
Signing time: Sun 26 Jul 2026 19:01:04 +0000
Manifest this update: Sun 26 Jul 2026 19:01:04 +0000
Manifest next update: Mon 27 Jul 2026 19:01:04 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: OoS0yvWXX3dxLfY2bk/A2jXzUXgULVMn77nkOjDOcFw=)
2: ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa (hash: NyeDj2CCt8I3KwuYf4K9J8j74vTWf4ATwXYKw7Y/SY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:5e:5a:b4:28:11:a1:ad:bb:75:d8:f5:8e:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Jul 26 19:01:04 2026 GMT
Not After : Jul 27 19:01:04 2026 GMT
Subject: CN=af886f9164fd95f365337d6c1fa179e23bbe29fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:f5:d2:e9:4f:df:54:e4:8e:cc:36:92:ec:
18:f0:aa:f2:f7:e1:63:dd:dd:05:0f:33:cc:fd:c1:
c3:cf:e3:26:d0:69:d4:9b:e6:bc:ce:38:ea:09:f4:
24:74:1e:92:9d:a9:07:3a:38:2b:40:c6:08:91:cb:
c6:0a:6b:39:98:fc:01:a1:16:f2:5f:5a:b5:0a:00:
4f:98:e2:fd:50:8a:a7:9b:db:fc:08:c9:fc:96:f9:
f3:b4:9f:18:c5:f5:79:1e:4b:c4:fa:f3:a4:5b:cd:
fe:42:16:53:ec:7a:e9:1f:48:df:d1:8b:49:fd:1a:
4e:41:79:23:ee:c5:c6:10:2b:06:30:58:00:9b:aa:
a4:54:f9:27:fd:64:89:7f:70:76:db:89:b1:59:8f:
06:6c:05:a5:fe:2e:80:ae:c4:ea:60:4c:e4:73:a4:
30:42:88:42:a5:bc:c1:dd:c8:07:14:23:16:18:b6:
1d:74:a6:e8:c0:9c:11:57:f3:25:27:f2:4b:8b:dc:
59:fd:a9:f0:9a:8c:2e:a1:e8:56:8e:20:03:03:83:
73:8b:22:d5:f6:4b:b3:71:e8:bb:64:f5:93:74:38:
7c:12:9c:25:cf:49:c4:9d:c4:bd:ea:de:95:1a:02:
11:42:38:14:9c:84:aa:e8:aa:2a:97:cf:e2:1f:3c:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:6F:91:64:FD:95:F3:65:33:7D:6C:1F:A1:79:E2:3B:BE:29:FD
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6f:fb:39:5e:a3:24:3b:d6:2f:c2:d7:d5:de:61:a6:e2:50:
57:c0:94:7c:da:16:7f:cd:65:53:df:23:4c:62:e1:7c:5f:5b:
78:8c:0b:a8:84:60:43:3c:64:93:58:7d:0d:ed:be:c6:9d:6a:
5b:b2:c1:33:86:0a:e0:b3:a6:b6:c0:20:02:89:e9:1f:37:63:
56:b4:06:45:02:be:76:ae:a9:f2:e0:b4:d4:f0:e7:db:f7:f2:
f7:a5:4f:70:1c:ca:85:61:c7:95:a8:cd:34:3f:04:f1:ee:f1:
80:bb:3d:8b:f5:d3:fc:8c:31:ba:e4:8c:d3:88:89:c1:fa:5c:
19:6c:af:b6:8d:c3:86:d2:b8:49:a3:3d:fc:10:d3:d0:1f:3f:
7d:f1:2e:43:02:a5:64:77:d2:0f:60:6b:60:ae:d4:80:d8:b1:
9c:df:2f:93:f1:f7:ad:23:06:fc:c2:c9:c4:52:ed:75:ec:87:
a3:8c:36:d9:d9:cf:f0:15:14:d3:77:58:d4:dd:e3:ea:28:c1:
93:d1:ce:17:aa:7e:5c:1d:d2:dc:8e:28:c5:04:f0:3d:8e:3a:
eb:43:71:28:24:bf:b4:64:a8:09:71:fa:d8:33:8a:71:4b:3a:
7a:1a:de:64:83:ab:f2:25:03:d3:70:f5:e7:70:58:c3:00:4b:
31:f5:ed:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:38 2026 by rpki-client