Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: 21cKfQ5WFRQZGwtO2MwVd9CNWcTUNZhN9P2a4H1ZZoM=
Subject key identifier: 0A:A0:CD:C2:08:6C:D7:70:AB:36:41:96:98:EE:A2:A8:E3:BF:23:A3
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 019F916C6A1241368ADEA628E685644B449E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 05E9
Signing time: Fri 24 Jul 2026 00:00:29 +0000
Manifest this update: Fri 24 Jul 2026 00:00:29 +0000
Manifest next update: Sat 25 Jul 2026 00:00:29 +0000
Files and hashes: 1: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: 2EJN5uEaL5OtS9aUqSN89Uw4Gu7Et0KnCJRxJCIKk9U=)
2: SBUsospASb3EsMhP62NmTHT6SVw.roa (hash: 0+KXBZnA9I41d7SaRHS/S7In8wI7A6juxPzuhg0b63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:6a:12:41:36:8a:de:a6:28:e6:85:64:4b:44:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Jul 24 00:00:29 2026 GMT
Not After : Jul 25 00:00:29 2026 GMT
Subject: CN=0aa0cdc2086cd770ab36419698eea2a8e3bf23a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2b:5a:0a:44:6b:ee:f4:19:3e:ed:af:c7:05:
b2:c3:17:de:b5:bd:c0:64:46:35:a7:ce:cb:ba:14:
76:e3:14:1f:2a:26:be:e2:9a:5a:cf:55:b4:31:ff:
66:ce:33:7d:25:55:75:6e:43:55:76:d1:73:38:56:
38:ed:5c:d9:b3:5f:cc:9b:db:72:d5:98:0c:cb:b2:
c1:1d:d8:e1:7f:7a:ce:63:fd:2e:40:24:f2:c9:51:
55:5b:45:ce:39:d6:60:ad:9f:87:f1:f5:2c:d1:90:
c1:ac:fe:97:be:bd:31:a8:ff:6a:f0:d9:cb:49:d6:
69:02:8f:ed:81:cb:01:04:23:d7:95:3c:31:71:78:
8a:b8:62:74:0c:48:67:93:ab:80:89:dd:93:dd:62:
79:9e:41:d3:e9:d1:7a:d6:b2:5a:ea:52:a1:07:ba:
ce:dd:31:97:64:f4:00:63:a4:f5:2b:48:ea:fd:c4:
7b:1a:f9:71:94:13:7c:7d:f6:05:15:64:e8:94:a7:
40:f0:e3:7c:35:4e:36:72:7d:8d:63:6e:ac:d4:aa:
6f:0f:25:b6:10:5f:8f:d9:a9:8b:dc:e7:76:f2:c9:
c8:e4:aa:95:0c:ce:ba:61:74:9f:42:04:a3:f2:26:
c4:8b:e1:54:d7:7b:fa:bd:05:93:3f:e0:07:8b:25:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A0:CD:C2:08:6C:D7:70:AB:36:41:96:98:EE:A2:A8:E3:BF:23:A3
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c9:ed:0b:ad:8d:fb:89:6f:bd:a9:e4:4f:73:85:d6:5d:2f:
0d:1e:b9:0d:f4:a0:ed:06:59:c8:19:13:03:aa:8f:9e:4a:f2:
35:27:53:74:48:8e:d8:7d:e0:c0:7f:ff:77:77:a4:a8:e1:12:
12:bf:83:b0:94:f8:f4:6f:b3:ad:48:7f:ba:bb:f2:fa:91:2f:
74:89:f3:fb:20:fb:dc:62:e0:83:19:9e:93:fc:11:c2:5b:be:
6d:a2:3a:e6:d2:9a:49:15:06:eb:f5:4c:67:58:7b:bc:cd:09:
7d:6e:55:8a:29:51:59:22:ea:6f:9c:ce:22:b9:c3:ac:8f:8e:
76:af:31:05:c5:2e:72:9a:74:af:b6:ee:e7:2b:ef:63:05:f9:
d3:6b:41:68:de:7b:42:ef:a8:81:77:e9:eb:9d:94:56:9d:f7:
98:72:5c:62:d7:c8:fb:0c:a7:85:7b:d2:f5:27:ad:ad:2c:2d:
df:88:88:53:ed:03:d5:e0:88:fa:6b:cf:d5:10:24:1f:97:c6:
ff:15:7d:56:cb:12:ee:4a:ee:68:88:d1:18:c8:2e:04:0a:51:
39:98:45:4f:7b:5e:9b:fa:16:a7:76:45:42:39:2f:da:2d:a1:
04:65:c1:0e:45:fd:e6:a7:cc:03:fc:9e:7c:31:e9:bc:77:10:
38:83:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:38:02 2026 by rpki-client