Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: ZzQgwuWZ/aVlCbSl0YV/btsG5sNfhDmHI6s7oUbRPSE=
Subject key identifier: BD:58:01:C0:FB:53:0F:14:DC:0E:99:E7:17:F8:F6:A5:30:E0:4F:0D
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 019F90C76A51ED431DA18A79A511C579909A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 0397
Signing time: Thu 23 Jul 2026 21:00:15 +0000
Manifest this update: Thu 23 Jul 2026 21:00:15 +0000
Manifest next update: Fri 24 Jul 2026 21:00:15 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: BPH8UmCCWLn29TZ7M2Mrk3ISjqLCHm4wlJLvhHmrITE=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:6a:51:ed:43:1d:a1:8a:79:a5:11:c5:79:90:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Jul 23 21:00:15 2026 GMT
Not After : Jul 24 21:00:15 2026 GMT
Subject: CN=bd5801c0fb530f14dc0e99e717f8f6a530e04f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:3a:7a:53:19:69:92:e8:41:78:35:09:45:
73:78:02:b4:27:73:70:76:89:a4:44:c6:dd:aa:71:
18:1e:00:c1:8c:f4:9b:96:e7:5a:65:6c:34:13:a6:
ac:74:77:05:2c:cf:f8:41:db:20:b0:5c:d5:6d:c6:
90:a3:d1:fb:1d:b9:f3:ef:72:20:2b:e8:f2:ec:88:
e5:22:96:de:34:f3:f1:f4:05:d4:f3:2f:0c:f5:24:
6d:ca:39:9e:49:56:b6:32:1d:b0:9d:6f:61:6d:a4:
2e:bc:2e:be:bb:31:a7:15:0a:e6:2e:48:b2:7e:13:
15:fb:ed:05:0f:ea:41:1a:59:ba:c6:fa:67:f4:43:
f5:fe:aa:12:0f:b8:1b:e4:25:3b:1f:e8:91:c2:83:
84:fd:f5:bf:dc:a1:3e:10:8a:b9:80:41:4f:1e:d5:
fb:1d:0e:ea:9b:3f:69:15:3e:71:7e:c8:8b:ab:26:
19:0a:38:e1:40:46:fa:fe:d1:49:e7:dc:4f:0b:f3:
e9:1e:05:5c:f0:cd:b0:85:aa:47:69:3a:3c:70:5e:
ba:e7:9d:7b:ab:7c:97:d0:28:f7:5b:df:0e:c1:5f:
d4:96:40:50:16:5b:6c:b9:c4:9e:89:b4:d4:b0:a6:
39:5f:0e:97:a8:55:69:13:1d:3e:8a:29:00:98:0f:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:01:C0:FB:53:0F:14:DC:0E:99:E7:17:F8:F6:A5:30:E0:4F:0D
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5c:a7:5b:36:a5:60:32:f7:79:59:63:2d:19:68:a7:ce:7e:
ce:17:17:a6:47:2f:a6:27:2a:d1:b5:6e:62:ba:d1:07:b0:e8:
e0:51:e7:af:f5:cf:25:a5:ab:70:8c:b2:ba:f4:ff:7e:d3:12:
17:a4:7d:9c:81:2c:9d:0c:43:f5:ca:e6:3f:87:f5:fe:43:ea:
82:00:e9:32:16:cb:1f:94:98:59:fb:1e:0f:10:8b:a1:02:ea:
e4:cb:8d:ed:b7:27:7f:48:a6:fb:fd:e1:7c:94:28:a0:77:07:
9b:8d:8b:fb:a1:52:f1:dc:a5:3c:1b:a0:cd:d4:d4:5b:7f:58:
56:d1:55:41:bf:d7:ba:10:43:4a:85:01:ce:56:f9:40:ba:5c:
e7:66:ba:70:e1:95:30:a9:e6:46:a5:d0:02:1e:0f:10:4c:c5:
56:bf:af:34:75:b4:ef:a7:b7:77:4f:8a:e0:42:f5:ec:cb:5c:
82:f2:eb:66:e3:5e:a1:a6:74:19:8d:58:f5:09:7a:c8:2a:7b:
7b:a6:59:fa:0e:3c:b6:81:4c:c3:50:0a:2c:08:0c:7b:3d:99:
53:7c:b3:48:48:1c:cf:87:69:04:b5:9c:f3:dc:8e:e7:fb:1f:
a3:0f:2d:0b:8b:07:cc:ea:b0:d0:f5:cc:16:ab:f1:ad:9e:4d:
1e:48:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:59:56 2026 by rpki-client