Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File: B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier: 8fRulm3MhlobMMskUbnp8f/rEJOygtD6BVm7W7Qj7uo=
Subject key identifier: E8:93:0F:3B:BE:E5:33:64:EB:95:AA:29:C0:32:DC:C2:3A:FC:C5:7D
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer: /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial: 019F913591AB119618E918325DD7D52F0A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number: 14C5
Signing time: Thu 23 Jul 2026 23:00:34 +0000
Manifest this update: Thu 23 Jul 2026 23:00:34 +0000
Manifest next update: Fri 24 Jul 2026 23:00:34 +0000
Files and hashes: 1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: LVWDAbl8n8SXIT0tC1DJiiRtff7HsA6YTJB4yQHuMhs=)
2: DUkKAgihVQLx-9lRs9kP656LAqs.roa (hash: Q209pcJqFgT3dRAcDq1sFjsPW/cttABhC0fxm9KWWRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:91:ab:11:96:18:e9:18:32:5d:d7:d5:2f:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Validity
Not Before: Jul 23 23:00:34 2026 GMT
Not After : Jul 24 23:00:34 2026 GMT
Subject: CN=e8930f3bbee53364eb95aa29c032dcc23afcc57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:64:b9:26:f8:04:ab:74:38:89:1a:2a:25:
1a:5b:82:2c:6b:0d:02:8d:90:dd:e9:89:5a:e4:4d:
51:17:fe:cf:15:00:c1:91:b9:50:6d:bd:2e:95:1e:
6b:f5:5a:6d:99:23:79:4d:81:66:a3:b1:50:ba:69:
54:ad:3a:ca:f9:99:f1:84:8d:25:80:71:21:ec:0e:
be:fd:61:dd:63:bc:f9:42:2f:35:bf:f8:c6:74:8c:
bb:e2:7c:e6:22:28:04:83:b9:e9:69:dd:93:cc:44:
a0:ac:8a:de:a1:ee:b4:df:b9:45:93:80:e2:c2:8d:
f6:4e:e7:7d:f8:94:4d:a5:8d:40:3b:7f:c0:15:50:
2c:8a:c0:1e:9e:65:c9:56:d8:cd:24:49:88:ea:b8:
0b:a0:fb:53:66:12:d8:9a:a9:05:4c:0f:d7:cc:ae:
9e:d5:6e:08:fb:fd:d6:9f:18:4a:54:b3:76:0b:a7:
0d:4d:c4:31:51:e0:fd:c3:0a:cd:72:54:f7:dd:63:
fa:a2:a5:d0:d8:74:e0:bb:6c:21:62:b6:b4:16:e6:
88:39:2d:f4:ba:1d:80:a1:db:0a:6f:3f:15:b6:1e:
38:9b:1c:e6:4b:d0:82:99:0e:73:bb:4f:40:50:bf:
50:b0:54:49:4b:71:61:15:96:8d:51:4e:10:50:74:
63:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:93:0F:3B:BE:E5:33:64:EB:95:AA:29:C0:32:DC:C2:3A:FC:C5:7D
X509v3 Authority Key Identifier:
keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:66:30:24:e1:80:43:78:6f:5e:30:fb:f1:40:24:74:58:6d:
06:f8:e6:54:96:94:23:2e:bc:4a:d9:a7:5d:ae:81:37:47:20:
08:6e:37:c7:6e:9a:a8:93:14:8c:fb:46:94:e8:07:f1:b0:f5:
aa:80:9c:d7:ab:59:99:d5:99:c2:ed:a8:d0:d5:f5:6c:b3:90:
14:06:2b:32:5d:40:1e:86:71:c4:49:4e:27:fc:18:7c:d9:25:
05:7a:cb:7b:9d:f2:9b:62:89:a4:d6:38:21:61:a6:45:68:78:
c7:fa:6c:fe:4b:55:df:09:cd:2a:54:ef:ef:d9:ea:69:e3:e0:
ad:64:a7:41:74:f9:b5:2e:25:4d:55:e5:6b:6a:2f:bb:81:6f:
c7:4b:f3:b4:11:91:03:b3:2a:84:77:83:54:83:75:10:2d:98:
c3:3e:89:65:c8:c4:ad:ad:30:c8:e5:bc:03:09:ad:2c:45:83:
dd:16:06:7a:39:e8:10:cf:84:39:88:65:e2:5d:3f:88:55:6d:
0d:d3:3d:1a:51:6b:9d:52:88:38:1b:8b:a6:c4:a9:72:95:e3:
9b:ca:34:aa:34:87:49:0e:13:71:52:12:88:fa:f1:8d:cd:1e:
d6:5d:0b:02:96:72:29:6e:67:50:15:39:1a:d1:cd:e7:be:70:
95:1b:81:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:30 2026 by rpki-client