Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: MZmE9v77Vs3+Z/pA6auh5a3XmQvTPMstyMm3sj1pBUs=
Subject key identifier: D5:DD:73:D0:04:85:9B:E9:69:93:32:3E:32:BE:DD:1B:60:C4:CB:CD
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 019F91A35AEC9593285E93B9C1C0E9DD6A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 10D0
Signing time: Fri 24 Jul 2026 01:00:29 +0000
Manifest this update: Fri 24 Jul 2026 01:00:29 +0000
Manifest next update: Sat 25 Jul 2026 01:00:29 +0000
Files and hashes: 1: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: ye7OnsbRejVu2JmCvSmLfst1CvNEvMmHItQjCPA0aRo=)
2: ex-egV2q8xIsoN87xmhf0Beqsx8.roa (hash: yMk8zHkPeRJ7LF6AhIih+Hrdt/inz7ExGAHQpY4Q1X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:5a:ec:95:93:28:5e:93:b9:c1:c0:e9:dd:6a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: Jul 24 01:00:29 2026 GMT
Not After : Jul 25 01:00:29 2026 GMT
Subject: CN=d5dd73d004859be96993323e32bedd1b60c4cbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:50:85:f2:32:2d:81:fa:71:59:6f:74:59:
07:3a:e7:45:5a:26:5a:7d:c8:87:a5:f6:d7:ca:ca:
86:f8:85:47:a8:3d:fd:b9:13:2e:72:19:e5:bd:c7:
98:41:e5:f1:0d:9a:f2:19:0e:7a:cb:c2:ed:e8:b6:
dc:c2:2f:0a:d1:a9:aa:40:ff:45:53:3d:9a:a3:a8:
83:6c:f0:17:1f:6f:b8:20:df:8b:da:96:00:29:47:
01:62:55:71:9e:ef:8b:e4:62:cb:27:be:5a:73:12:
88:7a:5b:aa:e5:bc:53:ba:71:83:80:1f:4f:6e:af:
4b:c4:9d:ca:d6:e7:d8:0e:ad:7c:54:2f:5e:5e:46:
01:4f:5c:75:0f:84:ef:73:77:62:fb:0d:f4:73:63:
35:f5:2e:7b:b2:2c:88:1a:e5:f3:b5:41:ee:77:08:
c3:16:a8:5d:ff:a5:d6:3c:74:a4:0f:25:7b:55:15:
41:62:8d:c8:73:2e:18:d0:21:70:6e:f8:db:05:0f:
97:d6:a6:3d:91:10:41:01:1e:db:41:80:b6:54:25:
fc:a7:e9:cb:95:50:a6:ca:f2:01:65:ed:e7:64:fd:
c0:50:ab:2f:ad:e2:8a:4c:36:1b:34:7a:c3:92:fe:
95:a6:de:61:a9:71:2b:f6:de:f7:3a:aa:e6:0e:20:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DD:73:D0:04:85:9B:E9:69:93:32:3E:32:BE:DD:1B:60:C4:CB:CD
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:05:28:e6:9d:f5:5b:a3:57:bf:ca:ce:03:99:f9:b2:95:c2:
c1:d7:a2:5e:32:34:a3:49:e7:94:80:e3:00:4c:8b:04:c1:a9:
ed:27:fd:56:9a:04:d8:e7:64:c4:e3:ec:64:2a:82:14:a7:43:
7a:62:72:80:72:cc:8c:d9:0f:f5:e1:61:06:92:b1:e8:1e:d7:
29:d4:b3:94:e1:94:63:03:ab:97:57:64:22:9e:dd:e4:bd:02:
ee:5c:83:23:6e:cf:dc:06:01:fe:7f:ed:6c:34:a2:b9:b3:16:
b6:b6:b5:69:eb:4f:de:68:55:83:19:e3:28:71:fe:7a:5d:b9:
d6:ed:27:4a:ca:81:20:7d:aa:9d:65:7c:40:ed:9c:c6:19:60:
e8:2e:8d:9c:21:4f:1a:ed:eb:9e:37:df:14:74:fa:5e:21:4a:
2d:36:82:8d:8a:dc:a5:ad:96:66:50:0b:b2:45:a2:7a:90:de:
c3:df:d2:97:c8:54:6f:a1:ae:3d:21:81:58:77:d2:5e:a6:f2:
d6:f3:ae:76:77:2c:4e:db:0f:ca:6a:bc:61:00:d8:80:77:93:
43:44:f2:3d:02:08:16:53:81:c0:52:e7:6a:d5:9a:43:04:29:
63:2d:cb:85:1e:19:89:8d:24:d6:8e:d0:e3:3b:f2:4c:60:5c:
b5:f2:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:50 2026 by rpki-client