Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: XET7g4t+565C6hS9epueNI3NNE40MM9zVe94PGHMGjI=
Subject key identifier: 90:0D:8B:8A:42:0A:5D:FA:5C:4A:C5:C4:12:97:6B:7D:1C:D4:BA:B6
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019FA0038D9098A772028668F6871BF4CA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 19D1
Signing time: Sun 26 Jul 2026 20:00:14 +0000
Manifest this update: Sun 26 Jul 2026 20:00:14 +0000
Manifest next update: Mon 27 Jul 2026 20:00:14 +0000
Files and hashes: 1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: pcBGQMxWR+wUP1aZUQ8jkzOyqyPN/GsugJ0yknKBOVs=)
2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:8d:90:98:a7:72:02:86:68:f6:87:1b:f4:ca:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jul 26 20:00:14 2026 GMT
Not After : Jul 27 20:00:14 2026 GMT
Subject: CN=900d8b8a420a5dfa5c4ac5c412976b7d1cd4bab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:10:87:d6:f4:4e:5b:5e:a1:35:2e:0a:15:bd:
2f:7a:38:c0:34:d8:28:15:8e:26:ff:9f:24:11:cb:
db:d1:db:f8:ed:9b:e5:85:d9:72:42:2e:bd:3a:50:
16:c8:25:bd:1b:05:27:14:52:24:d1:0d:a9:9e:eb:
43:0a:37:76:a0:15:00:e9:9b:e3:ec:4a:52:e5:e5:
06:a6:a3:cb:c8:a5:fc:ab:48:43:b8:3c:6d:6a:bb:
16:e4:a1:f2:23:06:31:9c:29:ee:3b:b8:14:3e:6f:
6a:b7:74:bd:cb:77:a9:46:3b:f6:66:f9:b1:c8:c0:
9e:74:75:f5:7a:1a:0f:eb:8a:7d:58:ad:1c:71:7c:
bd:e5:14:5e:83:e4:47:42:0d:21:c7:f0:ff:a8:e2:
16:a9:c7:5f:d3:cf:e9:1c:3e:c0:eb:39:7b:0e:2c:
5b:86:2e:8d:19:de:b1:6a:3e:09:c8:6f:00:90:dd:
39:bb:00:48:25:3f:2e:4a:ee:27:5e:46:d4:ae:d2:
49:69:8b:cb:66:1f:d8:72:b7:17:24:23:64:97:30:
76:79:0a:88:aa:30:a3:27:e6:52:a5:d0:f8:45:54:
7b:32:ad:83:ae:05:d2:a7:8a:05:c5:59:41:ad:0a:
bb:f6:7b:2e:36:6b:e3:d7:e2:bb:ba:47:4f:aa:2a:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:8B:8A:42:0A:5D:FA:5C:4A:C5:C4:12:97:6B:7D:1C:D4:BA:B6
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:0b:0e:05:6d:01:58:56:e0:16:85:15:ca:72:c6:a8:ef:
38:18:b8:62:2a:c3:9a:f4:2c:44:3e:95:81:a5:95:e1:6b:d1:
44:53:d3:79:ca:a1:d1:ac:49:ec:b5:11:ac:2b:09:46:f5:a0:
7b:e2:e5:7c:b8:be:f1:c6:e9:72:b3:59:93:57:f4:e9:4e:e1:
67:17:5b:d8:9f:bd:9a:cd:b7:37:09:35:88:a3:2f:6a:6e:b7:
60:a7:f7:39:52:07:bd:79:c2:bf:b9:a8:cd:43:72:fd:cf:c6:
af:8f:5c:34:e1:7f:d2:9d:59:01:65:b3:8b:42:bf:be:22:61:
eb:f7:b7:3c:08:12:6c:a2:d0:6e:93:f1:da:57:f2:a2:89:8c:
19:a7:da:30:b0:de:2a:52:76:b4:7f:92:0a:06:76:15:6b:e1:
dc:c1:11:52:81:b9:4b:8c:8a:b0:5f:5c:84:18:21:c5:73:57:
b9:9b:4e:99:68:51:c1:3e:28:9e:42:7d:07:44:e5:47:64:e8:
ea:74:bf:3e:fd:22:5a:c3:da:52:7a:77:c1:66:d6:2a:84:98:
d7:f9:ee:7e:99:f5:bd:25:89:50:cc:05:e4:d5:20:e1:94:11:
91:41:6f:17:6a:af:13:0c:31:20:db:fd:8a:d0:0f:a7:b6:15:
86:ca:b0:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gA42QmKdyAoZo9ocb9MoBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OWI1ZDdiNTc1OTQwOTkzN2M1YzJjMjJmMGFkYmU4ZTgz
MmEwNWQwHhcNMjYwNzI2MjAwMDE0WhcNMjYwNzI3MjAwMDE0WjAzMTEwLwYDVQQD
Eyg5MDBkOGI4YTQyMGE1ZGZhNWM0YWM1YzQxMjk3NmI3ZDFjZDRiYWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RCH1vROW16hNS4KFb0vejjANNgo
FY4m/58kEcvb0dv47ZvlhdlyQi69OlAWyCW9GwUnFFIk0Q2pnutDCjd2oBUA6Zvj
7EpS5eUGpqPLyKX8q0hDuDxtarsW5KHyIwYxnCnuO7gUPm9qt3S9y3epRjv2Zvmx
yMCedHX1ehoP64p9WK0ccXy95RReg+RHQg0hx/D/qOIWqcdf08/pHD7A6zl7Dixb
hi6NGd6xaj4JyG8AkN05uwBIJT8uSu4nXkbUrtJJaYvLZh/YcrcXJCNklzB2eQqI
qjCjJ+ZSpdD4RVR7Mq2DrgXSp4oFxVlBrQq79nsuNmvj1+K7ukdPqio0kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJANi4pCCl36XErFxBKXa30c1Lq2MB8GA1UdIwQY
MBaAFIebXXtXWUCZN8XCwi8K2+joMqBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgt
NWEwNmY3ODg3ZGJkLzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi80ZjliODItZjFiMC00ZmU0LWE3OTgtNWEwNmY3ODg3ZGJk
LzEvaDV0ZGUxZFpRSmszeGNMQ0x3cmI2T2d5b0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwALDgVt
AVhW4BaFFcpyxqjvOBi4YirDmvQsRD6VgaWV4WvRRFPTecqh0axJ7LURrCsJRvWg
e+LlfLi+8cbpcrNZk1f06U7hZxdb2J+9ms23Nwk1iKMvam63YKf3OVIHvXnCv7mo
zUNy/c/Gr49cNOF/0p1ZAWWzi0K/viJh6/e3PAgSbKLQbpPx2lfyoomMGafaMLDe
KlJ2tH+SCgZ2FWvh3MERUoG5S4yKsF9chBghxXNXuZtOmWhRwT4onkJ9B0TlR2To
6nS/Pv0iWsPaUnp3wWbWKoSY1/nufpn1vSWJUMwF5NUg4ZQRkUFvF2qvEwwxINv9
itAPp7YVhsqwiA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:42:44 2026 by rpki-client