Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier: dgIj1s9Iz97HHQEJjVv6yBLB0RJ/UVK0jUIkgHQ2310=
Subject key identifier: 47:C6:E6:47:8C:0A:1B:E9:B5:83:10:20:3C:EC:87:D2:7C:09:40:AE
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 019F935B458A83F5F7BAF862AA95B74E2F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number: 067C
Signing time: Fri 24 Jul 2026 09:01:00 +0000
Manifest this update: Fri 24 Jul 2026 09:01:00 +0000
Manifest next update: Sat 25 Jul 2026 09:01:00 +0000
Files and hashes: 1: VyqoHcr9KS4JWHhnv-VcHDSTVnI.roa (hash: f/9yzBcEtFBgSdEpSUnnTNXHMDiqI8UyOIQTZBjvt7A=)
2: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: 3+mWV+75phGcQy9B3Q/ATlKpZ26cBPZ+RJPKjGC2+W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:45:8a:83:f5:f7:ba:f8:62:aa:95:b7:4e:2f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Jul 24 09:01:00 2026 GMT
Not After : Jul 25 09:01:00 2026 GMT
Subject: CN=47c6e6478c0a1be9b58310203cec87d27c0940ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7b:a3:04:78:89:14:a5:6f:38:41:09:1d:19:
75:5e:80:26:a3:b6:af:81:93:2c:a7:1f:a8:72:89:
74:7e:f7:76:8f:43:c2:31:ea:1e:2d:6d:3e:df:ff:
0a:ac:ef:1b:49:35:8e:16:dd:b2:cf:72:ff:1c:07:
3a:97:94:e2:0b:45:d7:94:20:7f:ba:bd:4a:88:4b:
b7:ed:a5:5f:83:27:d5:d9:40:a9:1a:c8:ac:e0:41:
e1:5e:d3:24:bf:cc:2e:5a:48:25:1b:f3:23:29:82:
09:7d:f6:cb:da:12:9e:9e:43:21:c1:31:5f:12:b0:
a9:6e:ed:79:1e:5c:0a:64:07:ef:37:e5:ba:02:69:
37:2a:8a:22:e1:0c:a3:fb:f0:38:2d:a5:09:3d:b9:
fe:0c:3f:68:78:d4:a2:7f:67:a9:fb:cf:de:1e:0a:
32:34:e4:9d:60:3c:cc:61:1d:96:26:3b:40:69:07:
95:f0:d0:a9:62:fb:21:aa:ae:e1:ad:26:63:95:74:
68:0c:f2:59:8b:f0:0d:8c:31:bb:4a:89:15:02:2a:
d9:e1:82:0b:e5:41:7e:1e:7d:23:1f:c1:ab:10:92:
4f:5f:1c:b3:ef:e6:e8:a1:93:4f:b4:26:85:c8:6d:
1c:02:11:c4:ac:e4:35:40:d2:55:f1:48:a0:8d:05:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C6:E6:47:8C:0A:1B:E9:B5:83:10:20:3C:EC:87:D2:7C:09:40:AE
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ae:68:23:e7:49:8b:41:c0:b1:66:bd:6f:01:c0:03:2c:0a:
67:ff:77:dc:87:e2:ed:52:e7:8d:46:c3:e9:73:6f:e1:72:ec:
2e:eb:85:52:b6:9b:81:79:4f:4a:a2:90:07:9a:2f:a9:1d:c7:
9b:75:10:38:77:a5:55:75:e0:57:e7:85:39:d4:d7:78:64:e2:
27:e5:85:c5:a5:32:94:9f:11:71:8c:02:f1:ad:ac:8c:93:7a:
9b:86:af:35:e8:d8:1e:2c:3f:c0:0f:d4:ad:4a:84:62:c2:da:
98:04:32:34:ed:f3:a5:92:d8:14:e5:07:2c:c6:f9:ba:19:44:
e0:29:62:58:e7:2c:34:7a:82:ee:0f:3c:67:c1:1d:57:42:f4:
76:ce:9d:00:d2:d5:28:2d:2e:16:8f:23:65:da:49:c2:cc:d5:
d0:c9:d6:d2:b9:30:fb:2d:35:50:8e:77:a5:96:bc:3c:aa:40:
42:32:3a:ab:ae:a8:66:2b:32:41:ff:a3:6a:08:d5:3e:4a:a4:
b5:aa:78:cd:16:12:c7:b4:b8:ab:b9:3a:6c:68:88:34:79:c6:
fd:84:06:b9:44:ed:0f:c9:2e:2e:64:aa:04:71:08:77:c3:8a:
47:53:0b:fd:76:0d:a9:d3:83:7f:d1:34:df:2e:d9:0b:7e:bf:
aa:ed:d1:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW0WKg/X3uvhiqpW3Ti8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGFiYjI5OTc3YTY1YjE0MGNhY2I2ZTcyYWIyNGNlZGRk
NGU4YzUwHhcNMjYwNzI0MDkwMTAwWhcNMjYwNzI1MDkwMTAwWjAzMTEwLwYDVQQD
Eyg0N2M2ZTY0NzhjMGExYmU5YjU4MzEwMjAzY2VjODdkMjdjMDk0MGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3ujBHiJFKVvOEEJHRl1XoAmo7av
gZMspx+ocol0fvd2j0PCMeoeLW0+3/8KrO8bSTWOFt2yz3L/HAc6l5TiC0XXlCB/
ur1KiEu37aVfgyfV2UCpGsis4EHhXtMkv8wuWkglG/MjKYIJffbL2hKenkMhwTFf
ErCpbu15HlwKZAfvN+W6Amk3Kooi4Qyj+/A4LaUJPbn+DD9oeNSif2ep+8/eHgoy
NOSdYDzMYR2WJjtAaQeV8NCpYvshqq7hrSZjlXRoDPJZi/ANjDG7SokVAirZ4YIL
5UF+Hn0jH8GrEJJPXxyz7+booZNPtCaFyG0cAhHErOQ1QNJV8UigjQWbwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfG5keMChvptYMQIDzsh9J8CUCuMB8GA1UdIwQY
MBaAFIeKuymXemWxQMrLbnKrJM7d1OjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2Et
YWM4NjQ3ZDA1NThhLzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wNmI4ZjUtMWE3Ni00NWY4LWI5N2EtYWM4NjQ3ZDA1NThh
LzEvaDRxN0taZDZaYkZBeXN0dWNxc2t6dDNVNk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAja5oI+dJ
i0HAsWa9bwHAAywKZ/933Ifi7VLnjUbD6XNv4XLsLuuFUrabgXlPSqKQB5ovqR3H
m3UQOHelVXXgV+eFOdTXeGTiJ+WFxaUylJ8RcYwC8a2sjJN6m4avNejYHiw/wA/U
rUqEYsLamAQyNO3zpZLYFOUHLMb5uhlE4CliWOcsNHqC7g88Z8EdV0L0ds6dANLV
KC0uFo8jZdpJwszV0MnW0rkw+y01UI53pZa8PKpAQjI6q66oZisyQf+jagjVPkqk
tap4zRYSx7S4q7k6bGiINHnG/YQGuUTtD8kuLmSqBHEId8OKR1ML/XYNqdODf9E0
3y7ZC36/qu3RdQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:10 2026 by rpki-client