Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
File: h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft (raw, json)
Hash identifier: IIxMZqhNI9sp5TQsLozSMmfj4TS0iLmBhHVSyrO9Wx0=
Subject key identifier: 41:1A:9F:1F:B7:B9:D3:53:ED:3C:09:D8:10:9E:61:10:89:62:F9:1A
Authority key identifier: 87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
Certificate issuer: /CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Certificate serial: 019F9022A16175D1BB4CD4A9554AF82EE3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
Manifest number: 133A
Signing time: Thu 23 Jul 2026 18:00:16 +0000
Manifest this update: Thu 23 Jul 2026 18:00:16 +0000
Manifest next update: Fri 24 Jul 2026 18:00:16 +0000
Files and hashes: 1: 4fVpw4jDmLgLlVEJ14HcYjkhURc.roa (hash: OgxhauoTFqD32kP7fqq3sMCVlZur9FHQRJ/kNIVIhFQ=)
2: h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl (hash: qHc2MHBjyVRfhZ/qorfbylMBsfH+4tGnkhnM6nOo9t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:a1:61:75:d1:bb:4c:d4:a9:55:4a:f8:2e:e3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874aa16fd2a2c936c0aa4fb5624f62bc56a54df8
Validity
Not Before: Jul 23 18:00:16 2026 GMT
Not After : Jul 24 18:00:16 2026 GMT
Subject: CN=411a9f1fb7b9d353ed3c09d8109e61108962f91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:87:a2:fb:35:e8:c6:84:9d:5c:52:d3:06:
84:0b:4c:1e:79:c2:9b:0a:0d:09:b3:71:6d:fe:01:
c6:f0:5d:2e:9f:de:7e:ec:a7:24:d6:f8:90:6e:97:
e2:27:81:fb:51:26:04:ef:53:c5:3b:f3:12:fd:d4:
91:4b:72:a8:23:7c:cb:3a:3c:27:bd:5c:90:c9:8f:
cf:63:8c:7b:30:ce:e9:33:5d:f0:4f:08:4c:49:f2:
c5:32:74:66:c1:5b:f3:a2:d1:3d:c7:73:e7:12:a6:
e4:d7:c7:0e:20:0e:55:50:e9:61:c5:31:cd:14:cb:
92:a5:8a:2f:24:b2:9e:27:75:cd:63:be:bd:f4:5b:
d4:05:7e:23:54:b5:a8:69:0a:13:ad:5a:fe:d4:02:
bb:70:6b:9c:2c:c7:35:a3:6a:35:c1:c0:c7:d0:34:
15:36:08:3e:24:94:8e:5a:d7:ec:51:40:34:45:45:
b6:ce:03:d9:35:1d:de:47:50:8d:7d:6e:7b:88:cb:
5c:e3:99:5a:81:02:a9:5b:d8:e4:f8:15:b7:c8:4a:
2d:14:af:0d:33:03:7d:42:84:b7:af:10:f5:60:14:
c4:1e:43:cb:6a:4a:ac:d4:fe:9e:45:d7:4b:a6:ef:
20:82:4c:18:4b:7d:bc:56:77:27:70:d2:be:9f:f0:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1A:9F:1F:B7:B9:D3:53:ED:3C:09:D8:10:9E:61:10:89:62:F9:1A
X509v3 Authority Key Identifier:
keyid:87:4A:A1:6F:D2:A2:C9:36:C0:AA:4F:B5:62:4F:62:BC:56:A5:4D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0qhb9KiyTbAqk-1Yk9ivFalTfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7fea5a-ed78-4ba9-9a17-fdbc7c4cf49e/1/h0qhb9KiyTbAqk-1Yk9ivFalTfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:41:0c:9c:e5:11:5b:30:0a:df:69:4f:55:10:f1:70:ad:29:
a0:79:6d:88:a3:79:d0:76:fc:f4:5b:ec:84:8b:a1:5c:c0:73:
71:2e:74:57:c2:77:b5:00:e2:0c:3a:f2:f5:30:22:96:3e:7d:
74:17:3c:55:6e:9c:f7:62:31:59:00:e0:45:1d:9d:a9:49:cf:
74:fb:c5:b3:cc:2d:37:7a:3f:b9:50:00:4d:18:c5:fa:84:4f:
9c:a7:90:f1:f6:5e:df:62:8f:86:b6:0c:f4:2c:c6:dd:bb:23:
57:61:35:5a:c1:91:f8:48:83:cb:9d:91:6f:07:c4:af:71:6c:
76:2f:98:9f:e9:c9:23:24:48:72:cc:27:e3:b3:bf:e2:25:2a:
b7:2c:43:2a:e5:a0:1e:92:0e:98:b2:92:04:5d:9d:ac:16:79:
a0:01:f2:7f:a9:ee:fb:a4:9f:85:23:33:31:7b:be:5e:20:bc:
5e:b4:46:5b:c6:a9:f5:46:b2:81:dd:48:82:c1:b9:50:80:70:
d8:4a:a2:e8:d9:f1:7c:b3:e8:5b:cd:38:b8:76:fd:82:7b:48:
bc:71:39:dd:68:60:77:73:6b:e6:e5:cc:94:e3:16:ce:2d:87:
aa:6b:a1:81:55:55:a0:88:c8:00:dc:98:23:66:07:cb:ac:1d:
20:2c:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:18:51 2026 by rpki-client