Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: YTLQ4iyVTxa5a/T6HU0M24uQy1xfC4WiUb7fncoWO9M=
Subject key identifier: FD:39:64:3A:3B:98:FA:05:E2:CB:C4:09:F7:E3:E7:BA:53:13:DC:04
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 019F95EDC96732606A0A434C2AC600D64ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 21:00:16 +0000
Manifest this update: Fri 24 Jul 2026 21:00:16 +0000
Manifest next update: Sat 25 Jul 2026 21:00:16 +0000
Files and hashes: 1: COifVGWEFcRhTaZrSeru91euzgs.roa (hash: SkxWqr0s6K7O+f3IrnOYEXDaEsYzawyt1T+GjoB55B8=)
2: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: qDevaEWcL/nBtXxnOuidSS7bQcAdk8+gloQtjZx1Ttk=)
3: OmGYQq3CiQUfIzH_XwnBKVSMUPQ.roa (hash: 3Ypfgyto+VD8FpA/ATTCpHQtTdUaXQt8NRaO+1mw2dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ed:c9:67:32:60:6a:0a:43:4c:2a:c6:00:d6:4a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jul 24 21:00:16 2026 GMT
Not After : Jul 25 21:00:16 2026 GMT
Subject: CN=fd39643a3b98fa05e2cbc409f7e3e7ba5313dc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:7c:f7:62:69:21:42:c0:01:12:bb:df:88:
5e:24:c6:4d:44:c6:9c:02:d5:91:a3:47:80:3b:86:
f7:5b:be:fe:13:3e:dc:85:d1:32:3d:82:35:58:4e:
7b:72:95:47:96:47:a0:37:06:25:08:24:55:ed:54:
db:c8:4d:30:41:fc:cb:bc:6a:2d:c3:3b:a7:06:42:
f4:e0:ee:b6:9b:0d:7e:d9:9e:4e:72:37:2c:b3:c6:
08:f1:48:a8:60:5e:4d:b9:f3:19:3a:dd:58:dd:df:
a9:de:c1:04:e6:99:93:56:a5:17:90:48:8c:22:87:
71:75:d7:75:88:57:88:d9:80:90:9c:3f:d1:b5:f1:
41:d8:cc:eb:d1:46:5e:b5:65:46:cd:66:b6:56:e9:
4f:31:e8:d9:0d:6c:be:79:16:bb:cc:5b:ca:0a:69:
74:e1:7d:ed:74:0c:71:a5:d7:67:cc:b9:1c:ff:38:
2d:0d:0d:c6:f7:31:3c:f8:cf:02:1b:b5:e0:37:e4:
42:18:76:10:d1:1c:90:73:73:96:13:1e:63:b0:8e:
f8:3e:b2:11:54:b2:18:aa:a8:89:6b:28:d7:59:d5:
74:f9:40:41:12:06:7e:d3:34:8f:79:e7:67:2c:ee:
ba:1e:e9:a5:5b:0e:cd:0e:a3:35:03:7c:49:91:ab:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:39:64:3A:3B:98:FA:05:E2:CB:C4:09:F7:E3:E7:BA:53:13:DC:04
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d7:e1:64:48:46:66:ab:37:95:87:72:47:ae:24:0e:31:5f:
f0:37:3c:1e:c7:42:81:eb:ea:3c:6d:e6:a6:6e:5f:3d:c4:7c:
23:76:e6:7b:ca:e5:eb:bc:15:fe:b8:5f:fa:b4:39:b1:e9:9c:
9d:9d:2f:36:2c:1f:37:14:80:c2:c9:ac:5b:3e:37:97:58:ee:
88:4f:d0:56:26:ef:17:52:03:5e:89:b1:7c:38:5e:68:d6:52:
26:98:d0:55:71:3c:02:e8:be:3e:5a:87:da:ed:cc:9b:49:66:
fd:7e:08:c1:d8:91:08:92:48:24:09:2a:82:11:99:e9:db:d7:
ef:f9:08:10:4a:70:63:88:65:9d:91:e5:de:b2:05:e1:e9:59:
fd:90:85:9f:0b:7f:17:ec:eb:34:33:9b:e7:46:67:be:55:89:
84:cc:56:8b:30:38:79:31:f8:f2:14:71:7f:b6:12:5a:17:ec:
76:b5:90:c6:de:ae:7b:a6:46:70:df:b5:70:5d:14:dc:36:74:
80:51:04:1c:b2:10:ec:4c:e8:b5:9a:11:f3:03:0b:eb:94:f2:
04:6a:5c:d4:08:a7:9a:26:c1:b7:d6:55:63:08:8a:2c:53:d3:
87:05:fa:c4:51:d1:2e:e6:65:31:0a:cb:a4:cf:e0:a7:ac:ba:
1b:75:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:08 2026 by rpki-client