Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: PFzkpYLXUdHqguG4h0d2oEo7/GuCWXlKe6NUw8KdhuY=
Subject key identifier: DF:0B:4D:CC:CE:7E:32:47:85:4D:94:A9:C3:98:67:0E:5E:BB:63:0C
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 01A0DCBBD9800500127A9994E44404578240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 0CBB
Signing time: Sat 26 Sep 2026 08:01:33 +0000
Manifest this update: Sat 26 Sep 2026 08:01:33 +0000
Manifest next update: Sun 27 Sep 2026 08:01:33 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: iNK6xwydrJAWuZJxZb0nIaNZdoCeOeLFdbsWBRNTWak=)
2: rEklxLhJo9S4IBAy4se1tLI3lkE.roa (hash: xqvERQ2TneWjz4TWOCFTyowIh4LAz/S0+u0Tj5YT4tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:d9:80:05:00:12:7a:99:94:e4:44:04:57:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Sep 26 08:01:33 2026 GMT
Not After : Sep 27 08:01:33 2026 GMT
Subject: CN=df0b4dccce7e3247854d94a9c398670e5ebb630c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:2a:bd:4e:2d:e9:51:aa:92:5c:a3:24:df:
4f:76:be:cd:4b:9e:bc:30:9a:7a:49:3e:2e:21:42:
17:d7:0a:d5:05:36:a9:7b:bf:8d:9c:ef:15:e4:10:
a1:4c:35:4a:29:2f:63:80:df:af:0a:95:59:f4:26:
81:54:24:75:9d:a4:2c:73:a9:47:2a:c1:2b:4e:78:
ba:be:6a:bf:f9:21:d4:96:9a:6d:43:3f:04:18:c8:
2c:a4:28:f8:d7:64:7f:22:29:66:ce:30:ea:db:68:
cf:0e:b8:b7:fc:c4:f1:11:d1:10:90:ad:40:b6:d4:
10:58:20:4c:2a:05:4f:8e:fa:47:c8:01:91:88:a7:
48:4e:54:73:15:15:f1:cb:84:42:0a:6f:c7:b4:48:
6f:0f:f9:3c:96:df:15:a0:9b:3e:82:f2:43:0c:a7:
bf:47:f6:66:26:73:72:7c:7c:85:54:b2:38:dd:0b:
73:10:1e:44:ed:15:18:51:87:38:30:b0:3d:6c:b8:
e0:f4:13:5f:85:49:0d:a3:b3:90:03:e2:af:1e:9a:
ac:de:16:7e:0b:3d:13:38:ad:6a:bc:cd:b9:6c:33:
3d:7b:35:e4:4b:03:72:5d:59:f7:4d:1d:f5:b8:c7:
04:6f:b3:0a:05:47:e9:38:5b:0d:c0:49:6d:59:aa:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0B:4D:CC:CE:7E:32:47:85:4D:94:A9:C3:98:67:0E:5E:BB:63:0C
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:32:36:02:09:5e:ce:f0:ee:6e:19:45:bb:93:b9:9f:88:2a:
01:20:ba:c4:bc:31:5a:a6:ed:83:cb:20:7d:79:fd:96:59:48:
36:ba:ee:8c:d5:8d:79:4d:81:e0:51:9b:e2:ba:da:37:94:d3:
54:79:7c:21:51:b6:84:bb:56:b6:de:8c:ad:20:e3:25:62:5a:
e9:b1:56:42:4f:4a:21:bd:f7:bf:7e:f7:40:4c:a0:c4:d3:a5:
1a:cf:e1:51:bc:13:69:b9:40:3a:61:3e:bf:3b:d7:a9:96:c5:
a5:c1:6d:b6:0e:de:dc:35:38:9b:d9:27:87:74:18:b8:8d:33:
3f:48:c0:a4:74:e6:38:32:fc:45:8e:9e:c3:d4:b0:fe:17:81:
e7:c3:db:c3:c9:3a:96:3c:f7:21:f6:83:aa:9f:01:e0:10:2f:
aa:ab:c7:1c:ac:10:9f:00:95:5c:d1:f1:8b:f5:58:d4:c7:d1:
70:c2:d7:ed:1b:49:01:3e:99:2c:47:80:62:1b:1f:26:4e:b6:
05:68:2a:76:d1:ae:6a:3a:7a:27:de:10:d1:28:37:21:17:3b:
70:6a:c2:87:ab:47:33:63:28:5e:22:67:f7:04:e2:25:f8:8f:
ad:d1:c8:4a:95:47:8c:cb:0f:89:0f:97:d7:d0:89:db:1b:0f:
e3:44:1d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:18:14 2026 by rpki-client