Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: QTjEIi0iV/Ks7kKKphCY4hKdJ0t9QjB1/IfKzOdV/Gs=
Subject key identifier: 22:33:CB:16:FB:D6:8F:B1:E2:FB:49:3C:C6:43:3E:42:4D:EF:20:23
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 019F9392292B9BEFFE7E5D32C508C9408BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 10B9
Signing time: Fri 24 Jul 2026 10:00:57 +0000
Manifest this update: Fri 24 Jul 2026 10:00:57 +0000
Manifest next update: Sat 25 Jul 2026 10:00:57 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: n2GTF523Vxl87UxMMcxqGYXbWjENP8+ox2hdDLp6j9U=)
2: yJkXqf-6_RxZaZzbiNXMwPnxvq8.roa (hash: asQ8pI3HwhkbEj1BiWlijSaj7X1D2Q245alm99XOvIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:29:2b:9b:ef:fe:7e:5d:32:c5:08:c9:40:8b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Jul 24 10:00:57 2026 GMT
Not After : Jul 25 10:00:57 2026 GMT
Subject: CN=2233cb16fbd68fb1e2fb493cc6433e424def2023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:77:2f:35:c7:34:62:bc:65:f0:7b:32:8f:
0a:2b:6a:06:aa:53:01:3d:b5:bc:fc:9d:8e:57:6a:
d3:fb:cc:2b:aa:bf:96:cb:ca:3c:a0:80:62:8b:e0:
5e:8f:46:5d:0b:f7:94:17:cb:e9:01:6e:fd:a2:b6:
8c:22:ba:76:59:b1:e3:95:0b:3a:a6:6a:19:86:16:
0b:61:3d:b5:dd:87:bc:b8:29:15:b2:c5:ef:28:40:
8a:5f:ee:07:6e:c2:22:11:ba:4e:71:94:79:28:94:
06:85:53:44:91:61:17:39:5c:91:4d:74:d4:84:18:
ee:38:23:5d:7e:94:d7:af:58:db:2a:25:ad:cb:4d:
b3:c7:d2:7b:95:d3:54:27:db:6e:1f:7a:84:ae:75:
b3:be:9d:08:30:01:b6:01:a4:55:72:54:bb:78:63:
c7:c1:79:f6:a6:98:8c:33:e4:97:7b:b2:57:4d:32:
60:31:77:58:9a:3b:ac:41:2f:81:c5:f3:15:4e:c3:
35:0c:55:fc:a7:c0:7b:72:01:e9:59:a6:45:15:70:
8f:48:1f:18:fe:c1:77:40:2b:8c:8c:b8:2a:71:bc:
a0:58:de:da:c9:8f:34:52:db:0e:84:42:dd:ba:65:
e7:0b:02:e0:8c:3e:be:4f:48:55:1e:23:b9:26:f8:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:CB:16:FB:D6:8F:B1:E2:FB:49:3C:C6:43:3E:42:4D:EF:20:23
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f7:96:4d:b9:6c:83:6d:9f:01:f6:72:cc:2d:4e:17:18:6e:
5f:4c:8b:ac:7f:c8:c8:8e:b3:0e:46:ff:89:a1:ee:a5:03:6e:
ce:20:71:2c:49:1c:d0:d0:6b:b5:20:c9:ac:c0:dc:f3:e3:05:
e5:31:19:97:33:e6:eb:76:2d:42:a8:ab:53:1a:5f:61:b4:0b:
84:d3:cd:9b:c5:9a:ee:fb:55:cd:bf:41:38:59:47:fb:e9:f7:
d3:7a:3a:49:41:d3:2b:82:2c:71:86:37:e1:a0:75:1f:93:d8:
b6:5b:fc:2b:8a:25:c2:7e:45:7d:d1:08:03:71:b1:16:8f:d0:
2a:04:de:b9:ea:06:6d:04:34:d4:b6:5d:39:86:e4:f3:13:dc:
07:4b:e2:0b:46:54:9d:54:a2:1b:75:e5:12:ca:19:ad:38:8e:
b0:61:14:68:d8:7e:dc:45:0f:fb:36:ef:f5:b4:a4:29:17:61:
e8:ff:24:07:1d:69:4a:ce:24:2e:13:b2:15:47:72:79:40:55:
e7:e8:5c:68:6d:3b:38:9c:c7:9f:41:79:3e:3f:b3:05:d1:3d:
b2:c5:3d:fe:c9:85:a1:99:e7:36:e7:50:33:92:28:ac:22:fa:
6f:e0:53:15:e1:3e:ac:c2:26:89:27:83:34:1e:22:45:1e:68:
ef:a3:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:16 2026 by rpki-client