Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File: H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier: YAM+8PiC0ELaG9uWRddRj9RZfaL/ZN59zyToKxRZRGw=
Subject key identifier: 03:9E:B0:8F:50:24:34:79:E7:76:60:01:A6:94:D1:82:B2:09:B0:DB
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial: 019F916CD02283CFEE3E7DBFD7616C8468CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number: 1450
Signing time: Fri 24 Jul 2026 00:00:55 +0000
Manifest this update: Fri 24 Jul 2026 00:00:55 +0000
Manifest next update: Sat 25 Jul 2026 00:00:55 +0000
Files and hashes: 1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: EjBJCiMi/VaZZMLnj4+0ytZ0Z7JD7m9o3tGI0pSEHNo=)
4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:d0:22:83:cf:ee:3e:7d:bf:d7:61:6c:84:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Validity
Not Before: Jul 24 00:00:55 2026 GMT
Not After : Jul 25 00:00:55 2026 GMT
Subject: CN=039eb08f50243479e7766001a694d182b209b0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:ec:db:5c:8e:f6:bf:31:4b:f6:35:be:7d:
34:cc:46:05:16:f2:6e:be:cd:95:45:90:e4:f7:79:
5e:fd:3c:44:de:90:61:7e:a1:14:25:b6:1d:41:6f:
4a:60:9f:bd:0c:8a:8a:ca:9b:1d:2e:37:cb:f0:a1:
0a:e7:60:29:4d:5b:01:16:7d:0f:ee:16:64:bc:70:
30:65:92:62:5c:31:76:6d:79:2b:e9:8a:e5:26:9e:
35:b8:fc:21:2a:11:7b:61:39:8f:5c:e6:26:c7:63:
e4:21:9c:f1:70:a4:55:8a:e5:e8:6d:7d:ff:81:0f:
d2:31:33:af:54:23:64:1e:86:5f:a0:fe:82:9c:30:
dc:1f:8a:da:99:db:47:9c:cd:a9:83:72:5f:de:3f:
65:ed:38:71:8e:78:da:20:22:af:31:b3:d9:ce:68:
73:ce:d0:b8:dd:a4:9b:11:98:33:18:f1:31:41:83:
f0:ae:b7:ce:56:a0:0c:76:a9:c2:f3:9e:1d:50:b5:
9c:65:ad:1b:37:cc:d9:27:e9:82:04:40:15:03:d9:
4e:a7:10:55:7c:f3:c5:db:07:a7:bb:8c:b6:9a:87:
87:65:f9:0f:30:43:b8:86:2a:74:3b:e8:7b:a7:6c:
13:46:a2:a8:3e:d3:3f:8f:65:e3:e7:f0:84:7d:12:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:B0:8F:50:24:34:79:E7:76:60:01:A6:94:D1:82:B2:09:B0:DB
X509v3 Authority Key Identifier:
keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a4:2f:67:e3:41:ec:88:88:e4:07:3c:36:bd:6d:43:57:98:
2d:59:97:c0:1e:f5:76:61:9d:d0:f4:f6:73:1d:9c:0b:e6:2f:
6e:55:88:83:ee:2f:b7:80:c6:ab:74:9f:f3:0d:af:1a:7d:5a:
45:54:ae:94:5c:ae:12:1b:50:46:2a:ba:06:ab:c8:9a:4f:32:
94:bf:1a:ee:81:6c:76:0e:ca:dc:b7:b0:e8:53:9a:29:53:39:
db:52:a3:da:83:7c:f1:b1:58:f2:97:ec:86:00:86:53:e8:35:
88:e7:ff:f6:48:52:7b:75:13:21:81:af:f4:f4:1e:02:0a:6b:
0b:06:f5:61:45:17:d1:f8:cf:09:f7:83:0a:c0:a9:25:6e:89:
bd:0d:26:02:4c:fc:fa:65:a1:1e:8b:bb:1e:ea:0e:2a:1f:77:
63:78:55:de:cb:fe:83:51:50:4d:ce:f0:b4:cd:18:1b:ee:e7:
4d:7f:b2:f8:ce:a9:d6:db:bd:73:ff:da:ab:a4:89:c5:9f:58:
e2:52:59:4e:e6:aa:22:b0:c6:74:99:b1:85:0c:df:c0:01:8b:
34:2c:86:1f:2f:34:39:df:20:5b:ed:17:7e:3c:b9:f5:64:d6:
39:4d:b6:a8:15:55:a6:a2:9c:e1:47:5c:9d:b1:6f:5a:c1:5f:
75:75:97:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbNAig8/uPn2/12FshGjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz
ZjBkYzUwHhcNMjYwNzI0MDAwMDU1WhcNMjYwNzI1MDAwMDU1WjAzMTEwLwYDVQQD
EygwMzllYjA4ZjUwMjQzNDc5ZTc3NjYwMDFhNjk0ZDE4MmIyMDliMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFvs21yO9r8xS/Y1vn00zEYFFvJu
vs2VRZDk93le/TxE3pBhfqEUJbYdQW9KYJ+9DIqKypsdLjfL8KEK52ApTVsBFn0P
7hZkvHAwZZJiXDF2bXkr6YrlJp41uPwhKhF7YTmPXOYmx2PkIZzxcKRViuXobX3/
gQ/SMTOvVCNkHoZfoP6CnDDcH4ramdtHnM2pg3Jf3j9l7ThxjnjaICKvMbPZzmhz
ztC43aSbEZgzGPExQYPwrrfOVqAMdqnC854dULWcZa0bN8zZJ+mCBEAVA9lOpxBV
fPPF2wenu4y2moeHZfkPMEO4hip0O+h7p2wTRqKoPtM/j2Xj5/CEfRLELwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOesI9QJDR553ZgAaaU0YKyCbDbMB8GA1UdIwQY
MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt
OGI4YTAxYmQ3NDE0LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0
LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqQvZ+NB
7IiI5Ac8Nr1tQ1eYLVmXwB71dmGd0PT2cx2cC+YvblWIg+4vt4DGq3Sf8w2vGn1a
RVSulFyuEhtQRiq6BqvImk8ylL8a7oFsdg7K3Lew6FOaKVM521Kj2oN88bFY8pfs
hgCGU+g1iOf/9khSe3UTIYGv9PQeAgprCwb1YUUX0fjPCfeDCsCpJW6JvQ0mAkz8
+mWhHou7HuoOKh93Y3hV3sv+g1FQTc7wtM0YG+7nTX+y+M6p1tu9c//aq6SJxZ9Y
4lJZTuaqIrDGdJmxhQzfwAGLNCyGHy80Od8gW+0Xfjy59WTWOU22qBVVpqKc4Udc
nbFvWsFfdXWXPA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:21:41 2026 by rpki-client