Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: ByRKVTrezyJNtZdcRM9Fvdr48LDmCo597trQIExwONg=
Subject key identifier: 66:C9:B3:3A:82:30:54:BF:AB:81:3D:64:21:40:1C:36:BC:56:75:C7
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 019F90FF82DE37DC82EE76ADBCC61C06EC4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 1573
Signing time: Thu 23 Jul 2026 22:01:31 +0000
Manifest this update: Thu 23 Jul 2026 22:01:31 +0000
Manifest next update: Fri 24 Jul 2026 22:01:31 +0000
Files and hashes: 1: aMxhZsLMDx304AXjnZldJIQi_VU.roa (hash: nX4KFrnvKm65Zf0OrETssJJWMj+/5dAoLpEa4nDLRE4=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: gYdqlSEphqrhCK3NpLbyM9eTNmZNpTzVhocgoq9680M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:82:de:37:dc:82:ee:76:ad:bc:c6:1c:06:ec:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Jul 23 22:01:31 2026 GMT
Not After : Jul 24 22:01:31 2026 GMT
Subject: CN=66c9b33a823054bfab813d6421401c36bc5675c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:6b:2a:e7:c5:08:66:f1:c1:24:59:ac:7a:
a4:a3:76:08:ae:0f:31:bb:d2:e8:a3:28:07:dc:b8:
90:92:93:24:21:2b:9c:f8:c4:d9:c4:94:87:c6:d5:
cf:3e:e7:22:25:bc:68:6f:ad:86:ac:3c:dd:ed:4d:
75:f8:d8:fc:82:78:17:1f:24:f7:5b:07:a2:18:33:
27:aa:c1:78:dd:b9:48:3e:93:0e:c8:75:56:73:a3:
9a:84:be:27:3e:3c:76:48:d1:2c:a4:76:43:0a:c7:
32:6f:ef:db:a6:70:6b:fe:f3:f9:2d:d3:c9:5a:4e:
31:32:0f:de:fd:bd:32:86:1e:49:bc:cb:29:23:62:
b7:b1:0b:5c:26:4a:b0:29:c8:40:99:f1:13:11:27:
af:cf:7d:ec:22:20:17:1f:c5:df:fb:4f:6d:af:7e:
45:a2:3d:b7:5a:c2:5b:bd:5e:d8:c7:08:1c:90:04:
7d:a9:07:2a:ae:0b:af:9b:82:ad:60:f8:7d:7a:27:
2a:97:ee:7e:d9:21:16:fe:f9:00:0f:42:8d:ff:83:
c2:eb:c8:b2:f3:d0:81:b3:f3:a9:f6:66:cc:b8:fe:
be:9e:c5:5b:f4:53:b8:00:b9:e8:cc:08:fb:69:a3:
72:8d:0b:62:32:41:a9:6d:7c:c7:cf:67:08:64:17:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:B3:3A:82:30:54:BF:AB:81:3D:64:21:40:1C:36:BC:56:75:C7
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:42:97:c8:48:46:13:49:79:bd:32:e3:48:ac:e2:00:2e:a7:
8b:e8:e8:82:e1:91:1b:ed:0d:b9:31:17:7e:ec:56:ec:10:bb:
bb:f7:c0:ac:92:f4:22:bc:78:7c:2d:5e:8c:93:90:99:b9:59:
ed:cf:89:56:a7:e8:cb:d8:20:e4:0a:0d:59:e0:e3:83:9b:da:
4c:78:15:f2:f4:01:97:62:eb:53:3d:df:50:4e:51:a3:61:fe:
00:f0:39:9c:4a:2f:03:27:df:94:b2:86:08:db:f6:cd:10:4f:
15:30:9c:05:74:98:59:97:89:f9:6b:58:69:75:30:30:6f:c3:
50:cb:9f:26:c7:45:1e:17:06:8c:4f:ce:cc:78:45:84:4e:1e:
6d:f2:da:50:d3:cb:91:0e:5b:02:d0:3f:1a:13:f0:ba:d9:a0:
94:bf:dc:c0:e1:6d:db:6f:33:2a:23:76:33:b1:6e:c7:c2:32:
de:66:11:4b:49:b5:2e:2f:b4:5c:99:ff:3e:88:63:86:4c:51:
8a:df:97:bd:b1:1b:82:39:76:61:10:89:8d:f6:75:bb:d8:2c:
dd:89:21:53:c3:64:13:5d:b4:35:2b:b0:5b:34:e0:21:bb:d7:
95:f4:28:c7:96:48:60:ba:90:6c:5c:8f:c8:2c:de:2a:2f:44:
5a:23:b4:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/4LeN9yC7natvMYcBuxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQ1ZTNhNDA2OWQ0ZjVlYmQ1ZjZlNjQyMWQ4ZDNjYWJl
MzA5MjEwHhcNMjYwNzIzMjIwMTMxWhcNMjYwNzI0MjIwMTMxWjAzMTEwLwYDVQQD
Eyg2NmM5YjMzYTgyMzA1NGJmYWI4MTNkNjQyMTQwMWMzNmJjNTY3NWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulJrKufFCGbxwSRZrHqko3YIrg8x
u9LooygH3LiQkpMkISuc+MTZxJSHxtXPPuciJbxob62GrDzd7U11+Nj8gngXHyT3
WweiGDMnqsF43blIPpMOyHVWc6OahL4nPjx2SNEspHZDCscyb+/bpnBr/vP5LdPJ
Wk4xMg/e/b0yhh5JvMspI2K3sQtcJkqwKchAmfETESevz33sIiAXH8Xf+09tr35F
oj23WsJbvV7YxwgckAR9qQcqrguvm4KtYPh9eicql+5+2SEW/vkAD0KN/4PC68iy
89CBs/Op9mbMuP6+nsVb9FO4ALnozAj7aaNyjQtiMkGpbXzHz2cIZBe6QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbJszqCMFS/q4E9ZCFAHDa8VnXHMB8GA1UdIwQY
MBaAFIf0XjpAadT169X25kIdjTyr4wkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYt
NjMxOWJiMDc5YzQ0LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84YmRmZDMtZDVhMS00NWI5LTkyOTYtNjMxOWJiMDc5YzQ0
LzEvaF9SZU9rQnAxUFhyMWZibVFoMk5QS3ZqQ1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0KXyEhG
E0l5vTLjSKziAC6ni+joguGRG+0NuTEXfuxW7BC7u/fArJL0Irx4fC1ejJOQmblZ
7c+JVqfoy9gg5AoNWeDjg5vaTHgV8vQBl2LrUz3fUE5Ro2H+APA5nEovAyfflLKG
CNv2zRBPFTCcBXSYWZeJ+WtYaXUwMG/DUMufJsdFHhcGjE/OzHhFhE4ebfLaUNPL
kQ5bAtA/GhPwutmglL/cwOFt228zKiN2M7Fux8Iy3mYRS0m1Li+0XJn/PohjhkxR
it+XvbEbgjl2YRCJjfZ1u9gs3YkhU8NkE120NSuwWzTgIbvXlfQox5ZIYLqQbFyP
yCzeKi9EWiO0zA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:35 2026 by rpki-client