Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
File: H9nOye0f1PQcCx4w77lshhVTvjY.mft (raw, json)
Hash identifier: XMvaH1FjPyqWoXc3wxGYYH4lLIYXuD++JwehLo3gd2c=
Subject key identifier: C9:C6:8C:9F:FD:1D:E5:54:8F:C9:99:1A:BD:52:F7:1C:FE:E4:55:0D
Authority key identifier: 1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
Certificate issuer: /CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Certificate serial: 019F8FB597327148B5F94781AFC4CAAA7A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
Manifest number: 05A8
Signing time: Thu 23 Jul 2026 16:01:10 +0000
Manifest this update: Thu 23 Jul 2026 16:01:10 +0000
Manifest next update: Fri 24 Jul 2026 16:01:10 +0000
Files and hashes: 1: AGVrI7h1W1sZnmEHrQIXxLRxF1Q.roa (hash: K1nbjcJomqgMcH/NVsTCJWhMoSmEDtw4c8u/MMrHlso=)
2: H9nOye0f1PQcCx4w77lshhVTvjY.crl (hash: g179t4qTFICXtV9Cp8hHwlOtVDorsN4FRDWXdjYauXc=)
3: fnZsGtHZZ57ibD1bgR7D-kx03A8.asa (hash: gnq6h8vpZgrDrbXWUtlG5+lFKokphaSsAqWL7zsvVig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:97:32:71:48:b5:f9:47:81:af:c4:ca:aa:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9cec9ed1fd4f41c0b1e30efb96c861553be36
Validity
Not Before: Jul 23 16:01:10 2026 GMT
Not After : Jul 24 16:01:10 2026 GMT
Subject: CN=c9c68c9ffd1de5548fc9991abd52f71cfee4550d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:d6:aa:9d:0a:03:0d:e0:81:6f:df:ae:72:
e8:86:33:67:e0:3c:7c:9f:51:de:0c:b3:70:a8:b4:
a6:a1:f7:63:4d:68:7a:78:d3:3d:a9:eb:24:6f:62:
34:f4:0c:a2:27:b6:b3:24:17:d6:71:39:0c:33:b5:
78:a6:db:1d:56:fe:5f:4f:49:1e:16:00:0a:46:9f:
d5:64:8c:a9:09:97:34:63:d5:e5:69:78:b0:4e:64:
3c:5f:93:50:c2:3b:2b:6b:40:84:b7:bb:6f:cf:a6:
4a:cf:fa:99:be:e9:b5:70:80:df:aa:12:f0:ce:3a:
6a:4b:1f:a0:ce:06:1c:44:5b:a3:a3:2a:c5:dd:94:
f7:c4:2f:5a:dc:53:a8:f7:c9:dd:7e:6b:e2:25:36:
46:65:ca:1f:c6:94:98:61:19:80:58:be:70:70:ff:
04:59:e0:33:17:ea:65:e6:33:b6:11:98:f8:27:01:
bc:e6:ce:d7:70:ec:1b:5b:31:e7:53:8d:9d:c9:96:
1f:1e:2e:d5:57:1e:33:f8:c4:54:5b:41:ef:0e:4b:
cb:51:bb:72:2c:29:1b:5c:ea:b6:e9:25:7c:3e:ff:
cc:66:98:9f:32:29:ae:89:c4:80:07:15:92:f5:3f:
fc:c2:c0:38:f9:eb:9c:95:2d:b0:77:a0:21:60:2f:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C6:8C:9F:FD:1D:E5:54:8F:C9:99:1A:BD:52:F7:1C:FE:E4:55:0D
X509v3 Authority Key Identifier:
keyid:1F:D9:CE:C9:ED:1F:D4:F4:1C:0B:1E:30:EF:B9:6C:86:15:53:BE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9nOye0f1PQcCx4w77lshhVTvjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e81c1a-0c87-4825-bccc-36b7b1de045d/1/H9nOye0f1PQcCx4w77lshhVTvjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ec:ab:c8:1c:42:e1:4b:40:7e:40:be:91:1d:c8:6c:60:2e:
f9:1f:4c:be:16:14:b6:62:76:7a:aa:23:65:f5:c7:d5:5d:0e:
52:15:e6:64:31:6a:e0:4b:ed:b0:5e:8a:c5:2a:f7:75:e1:b2:
85:37:6f:97:25:51:81:2e:19:a3:33:b3:3f:cd:e7:a7:88:7b:
17:10:41:99:d9:79:a9:f5:e7:bd:2f:a2:ed:90:70:fc:32:8b:
b7:09:77:2d:e4:5f:6f:73:a8:a3:f0:2e:61:de:5d:bc:27:66:
9c:ca:af:80:20:2f:c1:c8:ab:a0:a3:9c:1c:a2:e6:24:70:33:
1f:23:80:e8:ce:7a:ee:57:97:da:02:38:28:3d:8c:05:32:49:
46:7c:dc:d7:e2:3d:d4:a1:81:7a:ce:df:00:46:16:d1:58:a5:
49:95:d4:0f:74:f9:65:2b:a9:8a:73:b3:df:9f:96:45:c9:2e:
f6:31:d2:63:12:f0:be:4a:e8:60:6b:e0:1c:b6:51:cf:90:f6:
7c:f0:5e:9d:0a:f7:85:dc:69:50:7f:97:c4:ee:a8:4e:32:fa:
30:12:75:a4:93:45:9e:c0:b4:3e:5f:5f:e1:ee:9e:36:bc:34:
fa:18:13:e7:f9:ff:34:71:1d:f6:1d:fb:68:eb:fa:6c:d0:c1:
72:45:4c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:58 2026 by rpki-client