Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: Jxy43U/8aDWSPIjSye4u5PJw3x60rbYtsxkDdBBibtA=
Subject key identifier: F4:B3:84:CD:9A:3D:49:5F:A1:AA:C2:0E:CF:DC:6F:3B:BB:D2:12:06
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019FA1F213EEB4A28FA6482123F0EE295D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 05:00:24 +0000
Manifest this update: Mon 27 Jul 2026 05:00:24 +0000
Manifest next update: Tue 28 Jul 2026 05:00:24 +0000
Files and hashes: 1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: 73fT1wjefrUFEDg8tISjZXqnMU7p3JkA4wOIE816d1Y=)
2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:13:ee:b4:a2:8f:a6:48:21:23:f0:ee:29:5d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jul 27 05:00:24 2026 GMT
Not After : Jul 28 05:00:24 2026 GMT
Subject: CN=f4b384cd9a3d495fa1aac20ecfdc6f3bbbd21206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b2:55:54:94:d1:e4:7b:83:96:67:4e:15:41:
15:e8:63:20:74:01:97:e5:2b:f2:2c:46:9f:fc:ba:
bf:8a:f8:52:bd:73:21:bf:f3:63:15:bf:80:7f:a4:
4f:03:a3:cc:22:86:b5:69:c7:5e:e0:06:b9:05:eb:
58:54:f7:4d:6a:71:19:05:d9:bb:7e:a1:63:f8:25:
43:f4:5f:c6:da:e1:89:f4:9b:84:24:50:95:a0:62:
02:7e:55:8f:dd:eb:08:18:80:c2:40:72:cc:ff:94:
e6:0b:64:fe:9e:db:95:26:e1:a1:07:5f:f1:28:65:
15:72:78:4f:30:34:d4:c3:8a:94:e5:12:4e:56:aa:
bb:6b:e4:c7:f8:3b:62:fd:4b:e3:b9:fd:90:61:03:
7c:e7:50:26:26:8d:9d:e0:6f:da:34:bd:94:dc:a3:
b1:6e:ef:f8:22:43:12:13:f2:de:63:8e:27:f9:fb:
75:00:57:0b:6a:22:60:fe:93:54:3a:78:15:c0:70:
10:39:90:79:a1:86:d1:4e:f1:71:a8:d4:56:a2:d7:
ce:8e:b3:33:c8:27:a9:3e:b4:99:9b:65:a8:8b:f2:
a6:c5:b2:a3:0b:0d:97:94:6f:09:81:57:7c:43:d5:
1c:65:a7:84:6b:62:fa:82:55:fe:7f:91:8f:6a:c9:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B3:84:CD:9A:3D:49:5F:A1:AA:C2:0E:CF:DC:6F:3B:BB:D2:12:06
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cd:de:22:27:1b:9d:41:74:4f:6e:38:25:9a:cf:90:41:8a:
7d:eb:48:7a:d8:ab:e9:a7:a5:98:b7:63:d9:73:a0:b9:54:e9:
af:52:ee:1b:3d:b9:83:be:5d:53:2b:3e:02:8c:0a:c1:ad:52:
53:56:e3:5f:9d:b2:9a:58:c5:5f:89:ba:12:f3:a9:6f:0e:fb:
9d:0c:7b:14:7f:15:19:94:86:e2:0c:bb:02:63:48:ba:d4:e0:
6c:7f:4f:08:79:47:cf:cc:09:e2:5a:0f:09:b3:03:e1:b1:d8:
6b:25:7b:59:f4:cb:bf:f4:12:c9:5c:14:45:aa:51:f1:a4:84:
90:8f:29:28:77:d5:b4:10:a1:6e:c6:dd:77:a5:d1:94:3e:a1:
d6:0a:9b:a2:60:f4:55:20:fc:b1:e8:c2:ae:cc:08:2f:f5:c7:
df:8e:1f:f1:8e:d3:37:db:1f:2c:f6:7d:36:db:f1:41:08:6e:
75:87:54:dc:bb:82:ce:c9:0d:c0:69:67:8f:6b:20:d1:59:16:
63:34:c5:2d:95:0b:6f:04:88:b1:10:1e:28:52:f6:5b:17:79:
f7:74:9f:6a:56:b3:7b:93:13:b1:ad:31:7a:bb:32:b7:55:4a:
c3:df:9e:c0:16:1f:5d:31:28:95:ca:97:6e:18:71:f5:30:23:
0e:e5:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:17 2026 by rpki-client