Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
File: h-2cuDQKwglaTLBSjl6i9zjOpnI.mft (raw, json)
Hash identifier: MQUKI61JPXjIxcuLy+7Ywitb4gzRv9Jl3Y2cbJsBeRc=
Subject key identifier: CA:18:2E:75:C4:BB:DD:B8:B3:17:84:DF:50:EA:43:84:6C:E6:F2:9E
Authority key identifier: 87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
Certificate issuer: /CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Certificate serial: 019F90FEDBB7A1750F71FF43CE5FA5E8E9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
Manifest number: 0792
Signing time: Thu 23 Jul 2026 22:00:49 +0000
Manifest this update: Thu 23 Jul 2026 22:00:49 +0000
Manifest next update: Fri 24 Jul 2026 22:00:49 +0000
Files and hashes: 1: ClXL4dT4GSld8lEfAWyCYr5cI3Y.roa (hash: gOfRKf6V+xV3ZsFtbBW86oarsiPBo5VFvmb0v2OnPU0=)
2: h-2cuDQKwglaTLBSjl6i9zjOpnI.crl (hash: SteeGxENJAReWRNttk/5jdRy5x2mmova7d+DQM+tCEc=)
3: vT00UMTKIHLp4hINXZvd81w31H4.roa (hash: QI91nZrYvdKW6PkjSidpqTabE42DmbX4YNbp5QsN850=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:db:b7:a1:75:0f:71:ff:43:ce:5f:a5:e8:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Validity
Not Before: Jul 23 22:00:49 2026 GMT
Not After : Jul 24 22:00:49 2026 GMT
Subject: CN=ca182e75c4bbddb8b31784df50ea43846ce6f29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:79:69:e0:0f:1a:cf:ac:0c:9f:73:e7:a5:
d5:6a:ae:60:44:96:10:66:5d:a8:3f:cb:93:c5:06:
00:35:f1:03:86:33:e8:d7:56:8f:59:06:02:aa:5f:
89:88:10:af:03:27:f0:4d:8e:96:3a:3a:93:bf:b5:
8e:ed:eb:7e:61:ce:8b:76:f2:95:e3:48:a4:45:84:
21:78:b4:b6:af:e4:6d:d0:fa:cd:bb:0e:55:ff:3e:
5c:48:ef:b1:91:12:c1:77:c0:57:dd:0d:ed:57:08:
b1:79:e6:21:95:bc:7b:0a:ea:8a:66:28:23:3a:00:
2b:fb:1c:c2:90:0c:96:43:af:c3:7f:e4:16:22:60:
29:79:9b:52:d6:e6:a6:e1:6f:be:69:f9:20:17:f7:
1c:9d:e6:d0:f3:ba:09:b7:38:bf:25:10:3a:99:2e:
b6:73:5e:31:fd:78:15:af:56:a6:ca:7f:89:ae:6d:
be:88:32:da:ec:cd:0b:54:43:da:1e:54:8c:66:a0:
04:31:35:a5:32:6a:55:44:28:8a:79:d7:bf:97:23:
28:80:57:53:47:ea:cb:8b:8a:de:70:3b:65:4d:83:
1b:ec:d1:da:5f:f0:8d:6d:03:cf:e4:73:e8:87:6c:
34:a6:f8:3f:66:ee:74:77:d1:53:91:b2:93:9a:45:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:18:2E:75:C4:BB:DD:B8:B3:17:84:DF:50:EA:43:84:6C:E6:F2:9E
X509v3 Authority Key Identifier:
keyid:87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:54:d8:29:57:5a:af:62:60:a7:70:85:ac:22:b1:81:a3:56:
9a:55:ef:1d:c4:12:24:80:65:6b:6c:39:ae:46:0b:7e:b1:fd:
fc:15:7e:43:d6:cf:85:41:46:b9:5c:05:50:73:45:c5:d3:2c:
e2:32:29:62:0d:ba:b7:2b:46:88:e4:57:48:5c:f7:7f:6c:13:
36:93:74:df:3d:17:b1:f5:49:84:ba:be:c5:f1:f9:44:32:cd:
b6:06:5d:f3:e8:6f:84:60:9b:f0:d9:1d:f5:ab:af:56:a9:a8:
50:a7:e3:2e:14:c8:f1:32:e8:3d:30:76:46:46:41:45:b7:53:
ad:17:bb:34:19:ab:10:9c:83:cc:dd:8c:cb:e8:a6:9c:e4:64:
74:d6:72:66:95:dc:0f:71:f0:80:e7:2a:6b:03:6f:6f:1d:04:
65:b1:ed:af:0b:c9:26:82:d4:4d:8b:a9:a3:93:82:c6:3e:25:
d7:4f:4b:4d:26:ec:80:46:49:26:18:d7:e1:57:d0:fd:72:c7:
e3:33:6c:7b:05:4a:d0:83:b4:09:9a:c2:5d:ba:7a:20:40:ba:
10:9f:c3:7d:7c:da:5a:48:54:f2:a8:8d:7f:d8:55:85:e0:59:
bd:ba:61:22:16:f4:c8:ef:4d:e7:c9:b5:32:ef:8d:1e:3e:ae:
94:81:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:47:29 2026 by rpki-client