Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: HfwfYMk44MZZ+Gbgi6rlFVqKg60pxb9jquGR9fiUlbA=
Subject key identifier: 8E:53:9F:DD:5B:50:75:6B:44:24:A8:A4:BB:92:75:29:23:A2:FC:74
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 019F943737C0D3FACA2074C3BD4550AE900D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 13:01:14 +0000
Manifest this update: Fri 24 Jul 2026 13:01:14 +0000
Manifest next update: Sat 25 Jul 2026 13:01:14 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: e5nJVW4PhdvHif6TzjmQKaXAkuxCXI4riwM3UTNJfhs=)
2: h1p2BzAieyl1ApnxPEttQPuDtWU.roa (hash: T9Vp6UskSb/GKkOMqcCRytqZocUe4Mj13FcfGtvSquU=)
3: mYxTsBuptxg1kgWOtdboXauu4ak.roa (hash: V7RDvGZhHUFL2UFwaRSbcJfAdDyrvulCNCnMCGHUgPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:37:c0:d3:fa:ca:20:74:c3:bd:45:50:ae:90:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Jul 24 13:01:14 2026 GMT
Not After : Jul 25 13:01:14 2026 GMT
Subject: CN=8e539fdd5b50756b4424a8a4bb92752923a2fc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:66:d9:0f:93:95:c4:95:70:29:b0:4a:6e:
40:3a:3a:de:89:cb:80:b2:56:0c:e4:88:eb:36:7f:
52:ac:c0:00:18:5c:04:72:ce:60:33:37:ef:98:16:
c2:00:fb:10:05:e9:1d:69:57:2e:ad:4d:f9:71:a5:
cf:21:c7:5d:db:a6:fd:13:82:a5:4b:19:51:dd:85:
ca:6d:08:e3:15:31:cd:24:e3:0f:d6:19:b1:cc:44:
ec:a8:7d:8a:a6:b4:9b:bd:02:93:15:cb:e8:74:3c:
2f:20:0b:5c:81:f2:42:ef:6e:c0:df:1d:6a:50:ba:
c3:88:f4:fb:fb:c7:36:82:4d:07:fa:f6:7b:e5:55:
8d:d5:57:fd:10:ec:bd:a4:fd:2c:84:37:d5:df:aa:
38:f8:c6:3d:cb:76:d2:ed:b5:f9:68:b8:f8:80:b8:
6f:9f:0e:6d:f1:50:55:56:3d:f7:23:cb:c6:d6:d1:
96:51:c2:51:34:bf:fd:fa:df:0c:6f:2b:dd:b3:52:
01:f9:41:8d:f1:f0:f3:ce:14:00:f7:48:37:0e:ce:
b4:95:43:d3:d8:f7:8c:fd:50:37:3e:d6:6c:98:38:
3c:47:03:7c:2e:f0:ad:c3:2d:f7:84:50:c2:3b:58:
39:90:fa:f7:0c:eb:de:e8:9c:ed:a2:41:ca:ee:d5:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:9F:DD:5B:50:75:6B:44:24:A8:A4:BB:92:75:29:23:A2:FC:74
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5c:ea:05:5a:2a:49:70:9f:b7:99:78:6b:d1:c7:20:3e:80:
1d:55:bc:a5:1c:0c:82:9a:f7:4c:76:c1:86:71:7a:bb:0b:d7:
1c:86:14:2f:ac:91:cf:2a:bb:6a:38:a0:6f:5e:29:0b:9f:e1:
ca:4d:97:7b:2e:38:aa:65:49:d6:a7:0c:e5:2b:36:98:65:d6:
43:42:ed:23:98:fb:08:8e:57:ba:f0:f8:0c:e8:19:2d:ed:21:
f2:93:cb:20:6c:6f:c6:43:be:d9:74:6e:58:b0:11:5f:80:e4:
70:ed:eb:ca:39:86:74:e1:8a:3b:39:55:36:3f:7e:f8:cb:b0:
36:f2:dd:4d:d9:ca:ab:b9:48:08:8b:b0:e9:6f:f5:31:39:7d:
d8:74:4e:30:df:05:f9:32:7c:99:58:d1:32:6e:49:b5:69:3b:
72:e5:0a:61:da:ad:14:dc:1d:5d:16:48:5d:20:39:4a:0d:f7:
b0:54:80:0c:fb:6d:e7:3f:c7:82:ce:29:e2:cc:d4:6b:c6:23:
75:39:e4:c0:36:a0:29:2e:ec:34:d5:2b:d8:b5:c6:b5:a8:05:
65:ad:e0:fc:5a:51:e2:05:ff:e1:9c:50:75:ac:d1:a1:32:f7:
bb:5c:5c:69:58:68:67:0e:c0:9d:55:48:0f:75:e5:b0:cb:13:
67:3c:af:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:29 2026 by rpki-client