Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: ZNDFynx+M1dZMR2h3rNr/LjsS8E9JWCEAdd+/IWh7tE=
Subject key identifier: EB:2E:A2:4E:F8:E6:52:C5:00:7C:85:AF:37:D5:33:36:C7:B4:77:91
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 019F91A3964D2285115E739903B54587ED12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 0CC0
Signing time: Fri 24 Jul 2026 01:00:44 +0000
Manifest this update: Fri 24 Jul 2026 01:00:44 +0000
Manifest next update: Sat 25 Jul 2026 01:00:44 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: WugN+NmPmqYx04yPL/OCh3BKw6HcWfE3Z5jhGsfNuAw=)
2: izo4UDdC4mpQkmyWIGDJxTunxWE.roa (hash: nGq0zWnIwQfu9LNAcwYVVr+irG2rx0o9SiWP5Vb3sPw=)
3: sCQK0hD61FJAM1RWBV01BmeoHq0.roa (hash: 2nCV/DvBky7socAFisrJxsyWYsp6XWUMeNmIdiwZJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:96:4d:22:85:11:5e:73:99:03:b5:45:87:ed:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Jul 24 01:00:44 2026 GMT
Not After : Jul 25 01:00:44 2026 GMT
Subject: CN=eb2ea24ef8e652c5007c85af37d53336c7b47791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a2:e5:e5:c6:af:24:13:16:df:f8:23:8e:f0:
42:cd:ad:23:9f:5c:03:43:c4:f4:a1:0f:1a:fb:54:
56:54:59:d7:c6:97:ff:72:2c:b6:c6:01:52:4d:7f:
a3:6c:e2:9a:7f:01:f6:60:e3:a6:9b:44:ba:68:1d:
e0:7a:cd:59:cd:28:37:f9:a5:3d:f1:96:7a:29:31:
5b:cd:1d:e9:08:e7:9d:05:0d:b2:08:dc:1f:78:6e:
5d:0a:59:a8:3d:be:20:c8:44:a5:74:7e:3e:53:59:
8c:bc:b7:9e:1b:72:df:2d:41:f4:09:fc:97:32:90:
61:04:23:c7:92:fb:5f:d0:e7:ba:d1:d0:f3:f0:88:
03:4c:80:fd:cf:81:bc:53:cd:f8:0c:7f:eb:d2:88:
58:dc:38:9c:8b:5e:4d:32:79:c2:7c:08:6c:96:ad:
b4:b8:a4:24:0e:67:ea:5a:56:1f:f2:c8:e4:34:21:
26:77:dc:37:60:6f:a8:b2:32:f8:a3:b1:64:24:53:
35:30:f5:2d:c3:6a:35:cd:01:5c:ea:62:fd:0d:67:
92:e2:38:b5:7c:74:63:34:52:8f:8c:93:b7:c5:80:
22:32:93:6e:ef:c6:f6:5b:ee:e8:fe:15:82:cb:8c:
03:b0:85:cf:bf:20:13:27:02:e1:6b:6d:6a:5e:c7:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:A2:4E:F8:E6:52:C5:00:7C:85:AF:37:D5:33:36:C7:B4:77:91
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9c:55:3b:d0:d1:f0:37:18:19:3b:51:ae:9b:81:32:a2:78:
3b:14:fd:35:21:70:ea:75:99:70:ce:56:7e:f3:e1:e7:6b:10:
65:e7:d5:30:ac:6f:5e:11:be:c4:90:ef:2a:ec:e9:bf:51:b5:
ea:b3:de:e3:3d:1e:b7:a7:37:18:9c:76:2c:87:3e:64:77:81:
4a:c9:2f:72:a6:a5:57:a9:52:ac:9a:d1:25:2d:64:af:ee:c5:
fa:30:87:27:0a:7e:6e:fb:8a:f5:9c:f5:b1:e1:51:82:50:e3:
39:48:c8:43:5d:b4:57:65:c5:bc:a0:88:e5:f4:e2:6b:6a:11:
6c:7a:8f:f3:28:61:54:f7:f8:47:0c:16:7d:ae:a2:05:15:f8:
00:d9:b6:e8:7a:a8:5b:1e:3e:3b:04:17:bb:7f:80:98:ae:ea:
6c:ef:ef:ad:f9:a3:4a:a1:e5:12:81:19:c3:18:9d:f0:c0:98:
cb:be:61:42:14:91:00:6b:a3:a9:78:b7:06:10:34:0d:ff:8d:
ef:17:dd:90:99:5b:ec:27:6e:0c:86:e1:f1:b2:dd:a0:bd:c4:
cf:68:e6:e3:cc:5b:5a:3a:a9:c6:a0:80:3a:4f:93:60:cf:c7:
07:0d:6e:d8:5a:ae:be:29:88:0a:59:89:e9:4d:1c:4c:7e:9e:
73:d6:bd:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro5ZNIoURXnOZA7VFh+0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZjJjZjFhNjIzMGNkNjJjYjNjYThhMWJjMWQ0YTRiYjQz
MzdjMWQwHhcNMjYwNzI0MDEwMDQ0WhcNMjYwNzI1MDEwMDQ0WjAzMTEwLwYDVQQD
EyhlYjJlYTI0ZWY4ZTY1MmM1MDA3Yzg1YWYzN2Q1MzMzNmM3YjQ3NzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Ll5cavJBMW3/gjjvBCza0jn1wD
Q8T0oQ8a+1RWVFnXxpf/ciy2xgFSTX+jbOKafwH2YOOmm0S6aB3ges1ZzSg3+aU9
8ZZ6KTFbzR3pCOedBQ2yCNwfeG5dClmoPb4gyESldH4+U1mMvLeeG3LfLUH0CfyX
MpBhBCPHkvtf0Oe60dDz8IgDTID9z4G8U834DH/r0ohY3Dici15NMnnCfAhslq20
uKQkDmfqWlYf8sjkNCEmd9w3YG+osjL4o7FkJFM1MPUtw2o1zQFc6mL9DWeS4ji1
fHRjNFKPjJO3xYAiMpNu78b2W+7o/hWCy4wDsIXPvyATJwLha21qXseUJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsuok745lLFAHyFrzfVMzbHtHeRMB8GA1UdIwQY
MBaAFB/yzxpiMM1iyzyoobwdSku0M3wdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82YTQ4YTctMGMwMS00YWNhLWI0MzEt
NmNlZGNmMjM0OTc1LzEvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82YTQ4YTctMGMwMS00YWNhLWI0MzEtNmNlZGNmMjM0OTc1
LzEvSF9MUEdtSXd6V0xMUEtpaHZCMUtTN1F6ZkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpxVO9DR
8DcYGTtRrpuBMqJ4OxT9NSFw6nWZcM5WfvPh52sQZefVMKxvXhG+xJDvKuzpv1G1
6rPe4z0et6c3GJx2LIc+ZHeBSskvcqalV6lSrJrRJS1kr+7F+jCHJwp+bvuK9Zz1
seFRglDjOUjIQ120V2XFvKCI5fTia2oRbHqP8yhhVPf4RwwWfa6iBRX4ANm26Hqo
Wx4+OwQXu3+AmK7qbO/vrfmjSqHlEoEZwxid8MCYy75hQhSRAGujqXi3BhA0Df+N
7xfdkJlb7CduDIbh8bLdoL3Ez2jm48xbWjqpxqCAOk+TYM/HBw1u2FquvimIClmJ
6U0cTH6ec9a9+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:08:15 2026 by rpki-client