Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier: TO5i+ifTcoxem76g6YHWvC55m7mTfIa3RC4RK//6EKM=
Subject key identifier: 5F:97:FD:C0:5F:87:06:E7:B9:B3:C9:8A:4C:38:60:F5:62:18:46:FC
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 019F946E1F70B82FA7969AE9686D43A7AF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number: 0C11
Signing time: Fri 24 Jul 2026 14:01:12 +0000
Manifest this update: Fri 24 Jul 2026 14:01:12 +0000
Manifest next update: Sat 25 Jul 2026 14:01:12 +0000
Files and hashes: 1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: LnIMjIxgn6P+rBEGD6IzmugtoyzpQ5iGAT/p9YyOtJk=)
2: rEklxLhJo9S4IBAy4se1tLI3lkE.roa (hash: xqvERQ2TneWjz4TWOCFTyowIh4LAz/S0+u0Tj5YT4tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:1f:70:b8:2f:a7:96:9a:e9:68:6d:43:a7:af:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Jul 24 14:01:12 2026 GMT
Not After : Jul 25 14:01:12 2026 GMT
Subject: CN=5f97fdc05f8706e7b9b3c98a4c3860f5621846fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:6a:ab:b4:09:ed:33:8f:b7:e7:63:6c:d0:
b9:02:1f:50:f4:8a:fc:54:9e:5f:ee:60:28:98:ae:
80:d1:0c:46:3a:ad:90:bd:83:6e:e9:f2:03:de:b5:
d4:9b:3b:67:d1:42:d6:fc:2a:03:0d:07:72:93:05:
ff:ea:0c:2e:c8:dd:6c:4c:9f:c4:ad:bf:88:28:80:
cc:b5:f0:5c:09:ac:87:02:c0:fb:f9:f5:d8:ff:df:
2d:12:f6:2f:8d:71:b1:3a:60:77:66:5e:ed:ee:f3:
55:e4:71:58:a4:b6:be:75:91:4e:02:f3:cb:98:30:
a3:7c:e7:2a:90:c7:12:cd:21:ad:57:94:8f:46:e1:
79:b7:47:cf:7b:eb:9f:2c:f2:e8:89:0f:d4:fa:5f:
98:5a:59:6c:8c:67:52:40:ec:30:f4:09:0c:ab:e4:
87:25:e1:a8:ae:07:03:8c:c2:06:c2:c3:bd:78:52:
3d:48:52:7e:a7:98:55:12:77:35:bd:59:32:75:d8:
01:19:cd:42:ae:eb:85:8a:f4:94:27:56:1b:c7:c3:
7a:a6:cf:ea:10:7b:94:89:d9:2f:f5:25:46:02:d9:
83:9c:bc:e6:87:95:97:d1:64:a5:12:55:f2:c6:77:
90:03:b6:f1:bf:d3:5f:72:59:94:53:a3:58:66:cc:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:97:FD:C0:5F:87:06:E7:B9:B3:C9:8A:4C:38:60:F5:62:18:46:FC
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:a2:f1:d7:73:df:ec:fe:45:94:a2:e4:bc:ba:d6:7a:cd:
bf:4d:28:18:89:aa:e1:62:d6:c0:73:e1:18:66:69:db:99:1b:
71:8b:dc:76:38:c7:d0:96:ac:a9:ba:dd:ba:31:b9:9a:2b:94:
ef:7a:31:62:c5:5c:28:2e:60:78:bb:18:00:02:52:83:0d:f0:
6d:3a:e7:ed:df:49:f4:d8:3c:5b:b1:16:d5:87:97:86:7c:37:
52:43:d8:32:2a:83:bc:8a:80:7f:b6:ab:e1:73:bf:a9:99:10:
80:bf:2b:8d:32:4a:62:93:cd:9c:ab:d1:cf:5b:be:9e:f5:1a:
06:14:a1:96:ec:13:97:07:ce:0d:d6:61:7a:3e:8c:b9:16:59:
9f:9d:3b:cd:4c:7b:7f:2a:77:e5:bb:02:75:aa:df:48:fe:63:
f2:ba:2f:eb:ac:89:49:a3:46:9b:12:97:3c:9e:cc:a4:14:ff:
db:19:78:f1:4a:16:b6:be:e5:2d:1f:e8:6d:06:9a:3b:b9:28:
a7:05:2d:2f:a3:44:5f:57:09:05:59:91:80:77:8f:b7:0a:1f:
84:1b:4b:f7:a2:c3:93:0d:02:38:85:ea:79:e8:df:80:30:fe:
5d:00:86:03:ce:ec:b4:28:6d:c0:60:06:8a:8a:d4:9a:cf:0a:
eb:ae:dc:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ubh9wuC+nlprpaG1Dp68gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYjVmYzNkODk4MzQ4ZDM1Yzc3YmYxNmMzZWQ5Y2ZlODE1
OTU1YjQwHhcNMjYwNzI0MTQwMTEyWhcNMjYwNzI1MTQwMTEyWjAzMTEwLwYDVQQD
Eyg1Zjk3ZmRjMDVmODcwNmU3YjliM2M5OGE0YzM4NjBmNTYyMTg0NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto1qq7QJ7TOPt+djbNC5Ah9Q9Ir8
VJ5f7mAomK6A0QxGOq2QvYNu6fID3rXUmztn0ULW/CoDDQdykwX/6gwuyN1sTJ/E
rb+IKIDMtfBcCayHAsD7+fXY/98tEvYvjXGxOmB3Zl7t7vNV5HFYpLa+dZFOAvPL
mDCjfOcqkMcSzSGtV5SPRuF5t0fPe+ufLPLoiQ/U+l+YWllsjGdSQOww9AkMq+SH
JeGorgcDjMIGwsO9eFI9SFJ+p5hVEnc1vVkyddgBGc1CruuFivSUJ1Ybx8N6ps/q
EHuUidkv9SVGAtmDnLzmh5WX0WSlElXyxneQA7bxv9NfclmUU6NYZsxFEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+X/cBfhwbnubPJikw4YPViGEb8MB8GA1UdIwQY
MBaAFB+1/D2Jg0jTXHe/FsPtnP6BWVW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTct
ZGVkZWEzYWIwZDNiLzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNGViMmYtYzExNS00ZGVlLWE1ZTctZGVkZWEzYWIwZDNi
LzEvSDdYOFBZbURTTk5jZDc4V3ctMmNfb0ZaVmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSei8ddz
3+z+RZSi5Ly61nrNv00oGImq4WLWwHPhGGZp25kbcYvcdjjH0JasqbrdujG5miuU
73oxYsVcKC5geLsYAAJSgw3wbTrn7d9J9Ng8W7EW1YeXhnw3UkPYMiqDvIqAf7ar
4XO/qZkQgL8rjTJKYpPNnKvRz1u+nvUaBhShluwTlwfODdZhej6MuRZZn507zUx7
fyp35bsCdarfSP5j8rov66yJSaNGmxKXPJ7MpBT/2xl48UoWtr7lLR/obQaaO7ko
pwUtL6NEX1cJBVmRgHePtwofhBtL96LDkw0COIXqeejfgDD+XQCGA87stChtwGAG
iorUms8K667ckg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:06:58 2026 by rpki-client