Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: /7+Mik7X6HptRBrxcmhC++MRbVeTlL/A/EQtSwbAgUo=
Subject key identifier: 87:1A:1E:AE:25:16:16:99:78:63:50:78:B8:60:D9:1D:AE:13:7E:B7
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 019F9580BD16632DF3F4AD88538CE67FB6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 19:01:09 +0000
Manifest this update: Fri 24 Jul 2026 19:01:09 +0000
Manifest next update: Sat 25 Jul 2026 19:01:09 +0000
Files and hashes: 1: 5ISKJbp4rbTdCWF2uAdFb5yPoJI.roa (hash: OH5/o4eCRTtPdgmEfAYqQLH3iOBiZD4gNNNHJ0XoTvs=)
2: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: /1Dkll5OxFXgaacsjx7b+raPiDM1JwlSLj24rEidlXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:bd:16:63:2d:f3:f4:ad:88:53:8c:e6:7f:b6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: Jul 24 19:01:09 2026 GMT
Not After : Jul 25 19:01:09 2026 GMT
Subject: CN=871a1eae2516169978635078b860d91dae137eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:c9:dd:9f:c7:89:22:05:eb:bd:d3:be:8c:
ad:54:3e:df:92:90:36:28:96:0d:db:8a:42:48:ff:
73:74:8c:07:2d:3f:d8:8c:75:3e:b8:3f:96:48:24:
42:5b:f0:a9:d8:4c:42:9c:90:90:3d:49:6f:3d:db:
86:0d:d8:1f:6d:26:da:14:e3:7e:0b:8c:a3:de:fe:
fe:db:65:a6:10:fd:22:98:df:59:02:19:a5:19:54:
80:d9:76:36:41:69:0a:e4:1d:03:dd:bf:e0:cb:ad:
a9:e6:6a:96:39:28:2e:10:8e:98:03:f0:6d:bc:de:
ad:5f:35:19:03:fe:21:46:b9:64:60:91:af:84:45:
83:32:ce:e0:92:2c:be:20:dc:f1:6f:12:e2:c7:53:
24:f5:d8:25:ad:35:08:a8:09:83:f6:d7:24:28:4f:
eb:fc:ca:43:e5:26:a8:5d:86:04:cf:a2:ab:20:a4:
ef:88:a3:00:fc:fb:b2:dd:c3:6f:01:55:86:2b:a6:
21:36:80:a5:5e:20:22:ad:a8:da:6f:90:f2:e6:df:
a6:ab:81:df:21:0c:c6:14:cb:83:57:62:d8:bd:c8:
38:d1:30:c6:e0:ad:d7:e1:c7:d5:7b:16:68:cf:12:
50:2a:43:71:b5:98:5a:a8:8e:5c:65:3f:42:dd:7c:
eb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1A:1E:AE:25:16:16:99:78:63:50:78:B8:60:D9:1D:AE:13:7E:B7
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:73:fe:8a:b0:68:1a:da:79:d5:f8:df:c6:52:21:a8:d9:da:
7c:4c:c0:04:f6:4c:f6:63:98:7b:10:88:23:12:89:4b:a1:4a:
50:8e:64:c0:ec:f5:2a:26:44:ed:0d:c2:52:71:ef:f1:70:d6:
73:10:eb:2e:29:a3:5e:d9:34:9c:87:47:a6:c6:03:9a:40:22:
70:26:fb:68:55:63:6b:de:9a:d0:1c:f3:c3:af:b5:7d:fc:3f:
d9:8c:d2:fd:9e:05:04:05:7c:e8:13:fe:8e:e8:aa:89:6f:dc:
51:9c:93:43:db:e3:39:40:64:f8:2f:75:07:da:74:e6:b8:e3:
1e:af:f0:be:a6:94:a3:7a:9e:12:f1:de:49:91:9b:4e:ee:4f:
c2:b7:e0:06:a4:b0:6c:07:12:3a:a6:40:b2:3d:79:ae:06:d6:
20:3b:1b:82:24:70:ff:70:cf:e2:14:fa:c1:14:c4:ab:db:f1:
0d:50:80:ad:26:94:ab:aa:6e:66:a7:f3:19:ab:38:b5:b8:b6:
25:27:d5:8b:b0:33:cc:27:5e:db:fe:07:96:41:42:67:2d:82:
c2:2d:fe:a0:7a:26:c7:88:5d:2a:0f:06:58:61:c9:37:c6:3d:
8c:05:74:85:7d:a5:79:79:a2:3e:21:8f:0d:ad:81:77:41:82:
f5:3b:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:20 2026 by rpki-client