Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: xuBsggUd/KlMl8rhftzS0HWrGQdR7G+uHJj7po7U7A4=
Subject key identifier: 48:18:14:32:BF:A4:28:B1:AA:38:27:38:9F:81:A9:6D:29:D8:75:47
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 019F916D71DBB1F775CEF2BED7A7749F9D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 123F
Signing time: Fri 24 Jul 2026 00:01:36 +0000
Manifest this update: Fri 24 Jul 2026 00:01:36 +0000
Manifest next update: Sat 25 Jul 2026 00:01:36 +0000
Files and hashes: 1: OmEUp-3epX_KUifqGg6OagsyLUI.roa (hash: wX4E8X9J3RZD1t+7aNfaKdNYFXjEujR+Op2mKH/JxaE=)
2: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: nLiI5a6uU3EnPgTOMuFRMwoqsL+alnB/KOu0xp2Uev8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:71:db:b1:f7:75:ce:f2:be:d7:a7:74:9f:9d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jul 24 00:01:36 2026 GMT
Not After : Jul 25 00:01:36 2026 GMT
Subject: CN=48181432bfa428b1aa3827389f81a96d29d87547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:aa:8b:27:2a:55:92:02:47:71:bd:f7:90:
38:c9:e8:56:04:e8:5f:f6:aa:8a:1e:f3:04:57:26:
b8:3c:a3:6b:05:a6:65:33:28:22:d2:7d:7a:3e:ba:
d5:83:1e:33:8d:ae:63:8f:1f:f8:f1:66:aa:38:06:
5d:d6:fe:fd:22:c9:1f:a0:7b:1d:57:bc:5e:65:1c:
e6:db:46:8b:1f:85:e2:05:ee:d7:c4:08:fd:f1:28:
63:16:73:dc:6d:d7:f4:59:8d:e7:c2:00:2c:6d:0a:
e4:6d:1c:65:a9:04:77:c2:b3:59:72:3c:61:7f:56:
09:a8:48:5a:24:63:0b:50:6b:6d:4c:62:b2:b0:31:
74:95:81:60:ad:52:a7:53:c5:83:8b:48:6f:bc:d0:
b6:c6:94:08:67:34:0c:1e:c0:fd:9b:3d:d8:d2:15:
ad:2d:6c:70:90:5f:06:8f:1f:44:eb:8b:f9:ad:8e:
17:d9:3e:cb:28:16:0c:19:b5:29:d2:c4:ca:63:03:
5a:f1:ea:eb:a3:b9:6b:4c:c8:a3:b7:3c:6e:40:b6:
d6:d7:e5:3f:57:2d:84:90:4a:99:2e:02:30:48:61:
6f:5f:f8:0f:38:02:d9:de:4d:bb:90:e2:f2:6c:1a:
e4:6c:de:d3:04:8b:4b:33:67:6e:50:cd:17:21:0f:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:18:14:32:BF:A4:28:B1:AA:38:27:38:9F:81:A9:6D:29:D8:75:47
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:67:2a:69:3d:56:fc:65:29:d0:6e:0f:49:a0:b0:40:10:4c:
cf:bd:35:c5:84:d1:08:19:84:b9:0d:a6:6e:dc:5c:c5:ec:48:
5d:ac:ad:80:89:70:06:3e:0a:20:28:27:b5:68:51:f2:e6:e9:
f7:3a:3e:ec:7b:0d:6f:ba:a5:37:55:c5:b6:3f:a9:da:10:c7:
da:4a:9d:58:cf:ae:7a:d4:f5:d6:b7:cb:9d:9a:cd:a2:c1:c9:
26:9e:72:88:7e:45:d6:88:c1:68:47:a5:9d:81:41:b5:50:0d:
9a:6c:57:c1:86:f5:f2:8d:8f:d9:8e:f4:1c:a6:cc:9d:9a:2c:
e5:a0:37:40:7b:c6:fa:6e:23:b7:cc:34:a3:21:36:88:6c:26:
d7:1d:0c:79:bc:d8:45:5f:69:91:6c:b5:02:b8:4d:27:d1:10:
f3:42:74:7e:a7:57:c2:fa:5b:e9:dc:48:ea:6a:43:d2:3c:c1:
d4:50:85:fb:0f:be:ec:94:6c:48:62:80:ce:4c:b5:2d:f9:60:
a6:10:52:16:7b:a7:99:59:9c:01:4f:d9:77:f1:bb:15:93:5b:
73:c6:9e:57:90:31:76:9b:3d:6e:4e:9c:9c:a8:6f:76:4d:9c:
e0:14:bb:f7:44:06:59:fb:fc:78:fb:28:09:d4:6f:b7:10:2b:
3c:c5:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:52 2026 by rpki-client