Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: E8+VvzS/W2l+UrAfrPkZ70WJkqk+xbDGaqFZl9cXXWo=
Subject key identifier: EA:5C:22:4F:03:79:09:9D:F0:DA:BC:A4:26:0B:B1:D1:6F:46:67:B2
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 019FA1848962E29B6C2C10AF880B0C7449F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 09A0
Signing time: Mon 27 Jul 2026 03:00:45 +0000
Manifest this update: Mon 27 Jul 2026 03:00:45 +0000
Manifest next update: Tue 28 Jul 2026 03:00:45 +0000
Files and hashes: 1: FC-j2DCq34hCFuPalVqFP_Va_c4.roa (hash: jfYCQqEdA0WNXwP1ahEI1VJ/4GR5skI19EQziW64bRA=)
2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: 4x1phVjzGxwGgm2TW72a2UflpU4uuwHRQPj2p2eLUm8=)
3: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
4: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:89:62:e2:9b:6c:2c:10:af:88:0b:0c:74:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Jul 27 03:00:45 2026 GMT
Not After : Jul 28 03:00:45 2026 GMT
Subject: CN=ea5c224f0379099df0dabca4260bb1d16f4667b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:36:04:29:1c:42:26:40:f4:e4:b4:46:9f:
40:67:56:a9:fa:e0:4e:7b:54:02:28:b6:72:6d:3b:
a2:36:93:10:8c:02:25:cf:29:cf:c1:a9:67:2e:bf:
d3:0e:af:84:34:dd:10:eb:bc:62:56:43:d4:ee:c8:
73:c1:39:a9:42:46:95:10:e9:a8:c2:53:52:2e:87:
83:bd:14:a9:5a:da:e6:0e:db:46:4a:a9:9c:aa:93:
20:2e:1d:4b:c8:56:02:49:ba:50:01:84:2a:49:ef:
cd:ee:04:19:fc:40:90:73:4f:5b:da:d8:a6:de:99:
74:69:c3:a6:4a:0f:a7:df:0a:8c:14:05:b7:aa:f6:
31:4a:1a:d8:ad:e1:6a:47:fa:59:2b:75:e5:ab:ce:
ed:14:21:24:8b:c9:31:c8:5f:fb:65:e5:6f:6d:8a:
f4:6b:0d:04:1a:8d:d1:83:82:66:fc:f5:89:e0:91:
6e:81:90:9d:8d:93:11:a5:08:87:6a:b6:b8:ac:a3:
6c:e9:a2:b1:f3:98:e1:e6:38:dc:c9:21:ea:d4:9e:
59:fc:c9:17:ab:5c:65:c6:e2:b5:83:1c:88:67:eb:
b1:88:33:25:67:21:ff:d3:19:52:9f:3b:5c:39:a9:
60:64:59:81:cf:78:43:3b:44:4b:53:ee:89:a8:9b:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:22:4F:03:79:09:9D:F0:DA:BC:A4:26:0B:B1:D1:6F:46:67:B2
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:2f:81:84:74:68:3d:e4:5a:2a:83:3e:e8:59:a3:3c:06:23:
7f:3b:ea:23:d1:b2:a9:ac:47:ec:a7:87:e4:a0:a1:13:03:38:
5c:43:41:35:b3:6f:cf:26:2a:68:74:60:d0:71:ec:32:c0:c3:
0b:ee:ce:d2:03:71:2f:1e:a0:7a:ce:2e:2f:13:1f:25:74:1d:
1c:d0:7c:58:b8:62:06:fc:96:b2:5a:50:3e:7a:f7:a0:12:35:
3b:15:e3:fa:dc:02:78:f7:f6:f5:0e:2e:7b:1d:de:35:81:51:
b5:10:f5:7a:7c:84:bf:86:5f:b2:36:7b:70:4b:1a:44:f2:77:
a7:12:1d:f9:88:32:e8:37:02:68:f8:e4:cb:73:0e:4c:37:52:
5b:36:d4:a9:e6:7e:9e:80:09:44:14:25:0f:ec:37:33:60:36:
8f:dc:bc:22:66:30:33:88:10:7b:7f:ca:36:c6:b1:a3:a6:e1:
03:94:80:1f:bf:56:40:20:92:16:e6:ef:83:c8:11:0a:52:fa:
53:cb:27:6b:1a:bc:3e:a7:e5:28:9b:a0:d2:7a:77:cc:c8:05:
74:cd:75:f1:c1:b2:eb:44:30:ab:ca:20:b3:b5:d9:17:a6:d1:
fd:4c:ca:b6:50:55:84:5d:be:15:e3:b4:2f:ef:de:c0:9e:2f:
f7:bd:f8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:07 2026 by rpki-client