Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: hHo3kdJslvzMcpE8kOGhSK5N6XyLoi8NpNHlc1slXZw=
Subject key identifier: AC:3B:23:F9:35:DB:D4:37:8F:E2:07:A4:13:FF:F3:1F:EA:1E:F2:19
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 019FA1BB723BEB7DDE8F76FCC89617DB3E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 04:00:43 +0000
Manifest this update: Mon 27 Jul 2026 04:00:43 +0000
Manifest next update: Tue 28 Jul 2026 04:00:43 +0000
Files and hashes: 1: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: Om2HZZZkfFdRDchi82Udt1CMrsb83y0sMqtE7KW74M0=)
2: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (hash: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg=)
3: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (hash: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:72:3b:eb:7d:de:8f:76:fc:c8:96:17:db:3e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Jul 27 04:00:43 2026 GMT
Not After : Jul 28 04:00:43 2026 GMT
Subject: CN=ac3b23f935dbd4378fe207a413fff31fea1ef219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:4d:f5:b4:48:bb:7e:4d:0f:15:bd:68:2f:
d6:1f:1e:85:2c:76:6d:80:af:24:11:3b:a1:46:5e:
6f:35:19:b4:e0:11:3e:b7:71:ce:18:69:65:7b:05:
85:8a:f6:f1:e7:27:6c:a9:f4:b8:b6:13:88:21:51:
c8:07:be:6e:f3:31:7b:66:12:54:f0:b9:99:44:6d:
f1:1b:38:88:01:f2:76:2f:53:64:4f:41:af:5c:55:
26:bf:7f:3d:89:b2:bc:9c:e0:83:08:3d:80:4f:9c:
a4:80:87:cd:34:87:8b:4c:01:a0:5b:36:22:97:2e:
50:54:03:82:d8:31:0c:1d:25:1a:31:48:34:26:08:
eb:79:2d:7e:8f:a8:30:c8:0b:d1:42:96:5d:16:98:
38:87:bd:a2:65:51:fa:fc:ef:8b:b9:4e:62:28:4a:
9c:51:5c:50:e9:6e:40:75:42:e2:94:9d:a5:03:b2:
7a:e6:e9:32:c0:13:14:0d:ca:7c:60:1d:88:85:89:
50:ae:62:29:47:a9:bd:2c:23:95:c4:01:26:55:07:
0d:c0:00:56:de:56:94:82:77:68:58:1d:a4:8f:34:
1e:40:4f:7d:4d:83:f1:79:ee:79:4d:22:6f:2b:d3:
0a:58:52:5f:0a:40:24:0d:d1:5f:1d:52:cc:b8:68:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3B:23:F9:35:DB:D4:37:8F:E2:07:A4:13:FF:F3:1F:EA:1E:F2:19
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1a:43:87:6a:85:00:8c:db:45:e3:90:0d:ca:59:6a:ab:ea:
53:05:8e:5f:af:b0:37:69:40:8e:df:7e:f8:50:6f:d3:b4:56:
88:e9:38:04:e5:b8:72:26:12:26:de:71:89:b6:57:11:55:57:
ac:a3:f9:53:43:ef:a3:a3:5a:28:fb:07:70:90:14:be:57:b6:
f9:2b:32:71:86:3f:d9:d9:b2:87:5d:e8:2a:5d:be:8f:d0:ad:
a5:d0:65:69:39:da:d0:4d:5c:9b:18:5a:ba:e1:23:81:c9:52:
6d:0a:23:c8:fb:f4:c6:01:83:02:0a:8d:77:af:c7:a6:6a:ab:
cc:64:e5:34:62:ed:f3:1c:0e:5c:28:31:7e:e7:a2:df:38:94:
7f:a1:f1:97:8f:5d:f7:0b:85:e5:b0:9a:68:e2:a0:a5:aa:4d:
2d:59:41:5b:d6:88:98:4c:a1:ea:22:eb:28:e2:23:d3:9b:04:
73:69:67:6e:90:d2:70:60:d8:1d:90:e6:54:42:19:ec:61:48:
f2:c4:45:43:b6:e1:09:a4:6c:84:7a:57:d5:de:24:02:f7:52:
39:6c:83:57:cc:74:0d:1d:fb:9e:5d:68:10:31:19:83:be:28:
49:ba:4e:c2:91:b9:15:32:18:8b:db:b9:c6:67:ea:f7:b0:29:
0a:69:0b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu3I7633ej3b8yJYX2z6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDVmZWY2OTJiNGMyZDIyYmRkMDMxZmFiZmE3MTEwYjdi
MzZlODEwHhcNMjYwNzI3MDQwMDQzWhcNMjYwNzI4MDQwMDQzWjAzMTEwLwYDVQQD
EyhhYzNiMjNmOTM1ZGJkNDM3OGZlMjA3YTQxM2ZmZjMxZmVhMWVmMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYFN9bRIu35NDxW9aC/WHx6FLHZt
gK8kETuhRl5vNRm04BE+t3HOGGllewWFivbx5ydsqfS4thOIIVHIB75u8zF7ZhJU
8LmZRG3xGziIAfJ2L1NkT0GvXFUmv389ibK8nOCDCD2AT5ykgIfNNIeLTAGgWzYi
ly5QVAOC2DEMHSUaMUg0JgjreS1+j6gwyAvRQpZdFpg4h72iZVH6/O+LuU5iKEqc
UVxQ6W5AdULilJ2lA7J65ukywBMUDcp8YB2IhYlQrmIpR6m9LCOVxAEmVQcNwABW
3laUgndoWB2kjzQeQE99TYPxee55TSJvK9MKWFJfCkAkDdFfHVLMuGj+fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw7I/k129Q3j+IHpBP/8x/qHvIZMB8GA1UdIwQY
MBaAFB/V/vaStMLSK90DH6v6cRC3s26BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2Qt
NTEwMWJlNWRkNjE1LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80OGUxYWUtOTBlOC00ZTQyLWFmM2QtNTEwMWJlNWRkNjE1
LzEvSDlYLTlwSzB3dElyM1FNZnFfcHhFTGV6Ym9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhpDh2qF
AIzbReOQDcpZaqvqUwWOX6+wN2lAjt9++FBv07RWiOk4BOW4ciYSJt5xibZXEVVX
rKP5U0Pvo6NaKPsHcJAUvle2+SsycYY/2dmyh13oKl2+j9CtpdBlaTna0E1cmxha
uuEjgclSbQojyPv0xgGDAgqNd6/HpmqrzGTlNGLt8xwOXCgxfuei3ziUf6Hxl49d
9wuF5bCaaOKgpapNLVlBW9aImEyh6iLrKOIj05sEc2lnbpDScGDYHZDmVEIZ7GFI
8sRFQ7bhCaRshHpX1d4kAvdSOWyDV8x0DR37nl1oEDEZg74oSbpOwpG5FTIYi9u5
xmfq97ApCmkL9Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 06:06:59 2026 by rpki-client