Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
File: h5TVZDYKUh21mK7m5qL41mkhtsU.mft (raw, json)
Hash identifier: EQb8MI9F7mFknrVU5Jws3X5XFOp+os8Td/OPTZaVMYk=
Subject key identifier: 72:1B:A1:78:60:5B:90:C3:6E:9F:B1:2C:0B:FC:D8:A2:82:DE:A0:DA
Authority key identifier: 87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
Certificate issuer: /CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Certificate serial: 019F92B6717F75A031FCF3A9B824627F91A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
Manifest number: 024A
Signing time: Fri 24 Jul 2026 06:00:57 +0000
Manifest this update: Fri 24 Jul 2026 06:00:57 +0000
Manifest next update: Sat 25 Jul 2026 06:00:57 +0000
Files and hashes: 1: h5TVZDYKUh21mK7m5qL41mkhtsU.crl (hash: 1bS6mXUwkuQyQCCmlGCff0VlPSGT6GQ4VLQGn3YZKIo=)
2: l_d_CxebXDc82wsd4U0BFVkGTh0.roa (hash: uFClusAny8IXHB2cwB2oabcg7BQ3SgYHOlNBk9mPDms=)
3: qGufgpnXsdA505UL9rLMl_XkECY.roa (hash: J3gwk0cVtFF6iJ602SqYnRybno+t/W1jMS3C5xgfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:71:7f:75:a0:31:fc:f3:a9:b8:24:62:7f:91:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794d564360a521db598aee6e6a2f8d66921b6c5
Validity
Not Before: Jul 24 06:00:57 2026 GMT
Not After : Jul 25 06:00:57 2026 GMT
Subject: CN=721ba178605b90c36e9fb12c0bfcd8a282dea0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5a:dc:45:40:c3:a3:88:7d:43:13:47:53:40:
04:fc:84:fc:61:b5:1b:6e:95:91:bb:ac:91:cb:ff:
ec:23:9f:99:09:77:23:f9:61:03:e2:dd:5e:79:9f:
98:98:ea:b2:51:d6:0f:6e:8f:24:84:91:68:bc:45:
2a:b8:2a:96:3d:49:1e:31:ba:62:99:c2:aa:33:3d:
6f:92:68:b8:bb:18:87:18:6d:43:4b:a9:0a:04:ac:
a7:b6:6f:03:4b:7f:c4:b0:3e:78:a0:89:e0:ed:94:
7a:c9:f8:c7:5b:fe:08:c2:ed:4e:62:cd:b9:30:9e:
1f:fa:45:d2:45:f2:a4:00:83:5c:a7:48:55:d0:81:
7e:c3:08:80:cd:6b:ed:8d:6f:02:8b:0b:01:07:0e:
3e:7c:83:dc:2c:36:6a:b5:bd:bd:6f:c2:b8:4a:ff:
e5:6f:56:1a:e0:d0:36:c9:e2:cc:3e:60:2a:57:47:
b6:2c:22:4d:3e:39:7f:4b:1f:e4:55:c4:8a:a0:b6:
ff:1e:ff:22:28:2a:d4:d2:97:5a:14:4b:5c:cf:26:
29:85:cd:5f:ae:d5:81:9a:b1:38:a9:45:41:17:75:
36:93:6e:fd:3e:c1:e9:5b:3e:72:fb:99:2c:b8:10:
54:dd:eb:01:6c:f9:6d:f9:0e:94:bc:eb:0f:cf:4a:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1B:A1:78:60:5B:90:C3:6E:9F:B1:2C:0B:FC:D8:A2:82:DE:A0:DA
X509v3 Authority Key Identifier:
keyid:87:94:D5:64:36:0A:52:1D:B5:98:AE:E6:E6:A2:F8:D6:69:21:B6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5TVZDYKUh21mK7m5qL41mkhtsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ca1667-de8f-45dc-9007-5afe0c42cf77/1/h5TVZDYKUh21mK7m5qL41mkhtsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:15:f3:b7:f5:75:d5:60:42:bf:53:92:52:56:3f:37:4e:2f:
0f:06:35:fd:43:5f:8e:79:d1:57:0d:59:0e:bf:85:dc:1f:c8:
78:9f:e1:f4:47:c5:85:73:0f:bd:11:3d:33:81:fb:7e:d3:5b:
7b:e1:47:4e:d4:8d:86:a5:c2:ac:44:5d:66:6c:47:8c:c6:3b:
e9:b6:91:01:01:88:28:10:ac:1b:28:6b:6e:d3:48:ef:fb:05:
71:f6:41:60:41:7c:9a:63:ce:58:a0:26:28:0f:5d:2a:44:bc:
74:07:28:e2:d9:1c:e7:93:ce:be:47:31:34:f2:8a:c8:1d:eb:
f4:46:be:f1:a2:b5:5e:dc:fd:2c:63:45:6f:30:22:1d:ea:07:
b1:06:3a:8e:c9:01:7e:6a:ef:28:59:3e:cb:a8:61:ca:31:c4:
85:16:6c:f4:9a:d1:c3:cb:d0:d6:ce:c3:78:7e:33:6e:08:d8:
67:90:e8:51:9f:6f:b6:8e:5c:2b:8b:49:ae:90:72:19:61:78:
bc:c9:a8:45:bb:b9:80:cb:dc:a5:24:79:2b:63:f5:44:17:a8:
9c:7a:c8:5a:e2:5e:f3:fe:6a:cb:ce:4d:42:16:68:f4:8a:0c:
55:e0:34:27:d6:15:ea:00:68:40:d8:2c:e9:77:9e:b1:72:bf:
c3:61:b7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:45 2026 by rpki-client