Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: z2U7MiABurQO1dthZhNDMvrl04UvcOgnK14a8xcIEHA=
Subject key identifier: 12:10:E1:AE:6E:5E:1A:39:EB:56:A5:E4:78:58:FE:8F:7D:33:C8:17
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 019F8F7E4B45A93E5BC7F329BD1AE109C401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 0959
Signing time: Thu 23 Jul 2026 15:00:46 +0000
Manifest this update: Thu 23 Jul 2026 15:00:46 +0000
Manifest next update: Fri 24 Jul 2026 15:00:46 +0000
Files and hashes: 1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: Lz8WA/TJ7o9Giw1YkMA6mwbMkscPbOufC+IJlvgFO2o=)
2: HvbqYPMAVepvi6ZtkrW2fUxUxMM.roa (hash: kj2P3vyd4ShtsXAZbQsRTziSHIgT6QC6RQY8zqv9EFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:4b:45:a9:3e:5b:c7:f3:29:bd:1a:e1:09:c4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Jul 23 15:00:46 2026 GMT
Not After : Jul 24 15:00:46 2026 GMT
Subject: CN=1210e1ae6e5e1a39eb56a5e47858fe8f7d33c817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:4c:7a:ca:a3:46:20:aa:71:20:0a:5c:e7:
56:f0:dd:be:fc:ca:fa:ec:af:ed:45:d7:1d:fc:7e:
b1:bf:fb:33:2c:ce:cf:6b:55:97:31:72:64:f6:04:
0d:b4:99:60:df:71:74:50:b3:5d:93:aa:de:14:fc:
d6:e5:c6:82:02:0d:1a:fe:87:7d:81:f1:bc:ee:11:
40:d4:d8:9f:d2:2c:b2:e9:b2:2c:f8:a3:c0:e8:17:
42:6c:39:8e:d5:aa:ec:79:d1:22:07:00:a5:95:3b:
b8:64:d8:c7:e0:31:75:9e:e1:d5:80:6e:11:d9:93:
5d:e8:dc:42:da:ab:19:36:83:76:75:06:29:01:e3:
df:8a:5d:04:ef:25:4e:56:61:72:9d:1f:2d:74:4a:
5c:35:da:af:0c:77:ab:7b:12:b7:70:83:a8:ba:0c:
73:c5:01:a8:23:a5:cd:48:9f:b6:d6:2f:2d:cc:56:
c0:36:f1:0f:21:ab:0f:49:0d:f4:92:69:4f:b4:3a:
de:b8:45:cd:e4:cb:64:b6:5d:6d:31:25:b5:b9:ce:
d2:0b:78:a0:e5:2f:88:c5:78:48:74:54:80:7b:03:
46:7b:12:b1:40:78:12:ab:a7:3c:05:40:4a:9f:20:
b2:44:8c:77:20:8b:4e:f9:04:87:8c:86:e8:af:11:
3e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:10:E1:AE:6E:5E:1A:39:EB:56:A5:E4:78:58:FE:8F:7D:33:C8:17
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ce:05:e9:28:d5:34:45:82:fa:af:72:34:4c:26:67:8e:29:
ba:30:d3:91:f1:b5:dc:96:d0:da:d8:5f:99:83:97:80:8f:5d:
82:83:07:81:c8:1f:85:24:0b:65:3a:41:2c:3d:ad:3b:92:e9:
10:8b:57:60:13:99:e2:d8:cf:f6:3c:99:41:c7:b8:84:a4:0f:
4c:29:3d:2f:a7:09:5c:f6:d5:7d:1e:b8:74:51:e2:d1:87:b1:
12:54:a5:8b:7d:28:b6:50:96:a2:8c:14:2f:3d:e6:38:d6:78:
d9:ea:5a:a3:c6:2e:61:d8:35:d0:dd:16:36:5d:e9:06:85:34:
8c:78:7b:5f:37:3f:94:85:ec:49:de:4b:3f:72:fc:1b:a8:fb:
97:e8:cb:a9:64:46:19:93:c1:76:c8:fe:3e:5a:7f:87:6d:b9:
ee:9a:51:5d:4a:f7:53:83:94:54:6a:57:39:04:cf:ff:e0:59:
f8:8d:8d:ea:b5:fc:92:52:51:be:fd:64:dc:4f:3f:26:70:ee:
8a:bc:34:1d:fa:f2:f3:e1:8f:b1:5c:25:dc:c6:18:15:7c:bc:
02:d1:d5:31:9b:d4:5e:cd:0a:f3:03:7d:06:49:df:31:d2:cb:
b5:ff:d3:e1:af:7a:da:b3:b1:09:98:4e:d2:73:1d:0d:f6:f1:
ef:8a:6e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:43 2026 by rpki-client