Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
File: H_oFe7xNCbnGccQ_-W81wA3p-7s.mft (raw, json)
Hash identifier: YNusXNnKhmj3oqNl94DLb15OKU38vun26OAaR4l6iKQ=
Subject key identifier: A5:41:88:AE:0C:02:E2:EF:3D:C9:7C:49:3F:82:E1:7A:3F:B0:D7:3D
Authority key identifier: 1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
Certificate issuer: /CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Certificate serial: 019F946DEA8B4D9C91C1A48030E00A6EE08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
Manifest number: 78
Signing time: Fri 24 Jul 2026 14:00:59 +0000
Manifest this update: Fri 24 Jul 2026 14:00:59 +0000
Manifest next update: Sat 25 Jul 2026 14:00:59 +0000
Files and hashes: 1: H_oFe7xNCbnGccQ_-W81wA3p-7s.crl (hash: Lh6aFh1i6XsdiRbqrLOzA8rsXwNIHUJfuU/0nYhauuI=)
2: TvRQaRsziqrRJCQCiUQYjyKVrn0.roa (hash: mrwUynV6T3tedBWfd3iohzz+A8WkbO6ygpgXbd4vXq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:ea:8b:4d:9c:91:c1:a4:80:30:e0:0a:6e:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa057bbc4d09b9c671c43ff96f35c00de9fbbb
Validity
Not Before: Jul 24 14:00:59 2026 GMT
Not After : Jul 25 14:00:59 2026 GMT
Subject: CN=a54188ae0c02e2ef3dc97c493f82e17a3fb0d73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:60:58:4e:ca:ec:6c:a1:54:66:7b:49:21:
24:04:39:6f:aa:f6:4e:c5:19:76:fc:a6:4d:63:ef:
eb:38:41:58:9c:d3:9b:a5:0e:f2:b2:16:f6:29:59:
9c:5e:07:12:26:33:76:29:50:ee:08:5d:ae:17:1c:
54:17:f8:dc:64:34:d4:8b:7f:9b:6d:76:97:5a:94:
31:4b:c8:85:7b:d7:d6:7c:2d:99:9d:06:6f:0c:17:
aa:bb:b3:0d:d5:dc:e7:9c:09:ef:71:30:59:50:89:
68:1c:98:44:5c:69:92:37:45:2e:f7:ff:a1:ef:e7:
1d:5a:6c:12:ea:46:a5:d7:ad:d2:98:9d:68:01:1d:
ed:ce:71:d3:e2:c4:23:c7:a5:ea:3a:c0:6c:fb:50:
8e:2e:27:ad:e3:ad:32:6a:3c:ac:0c:93:48:32:d5:
1a:76:a8:32:47:29:7e:33:9b:70:6a:74:60:db:91:
34:d1:9d:35:71:bf:43:75:ce:87:0e:4e:76:2b:ee:
b1:7a:27:aa:db:8c:3e:01:7c:e7:3e:23:8e:97:18:
70:9e:b0:48:c7:c8:8e:10:f7:df:13:83:6a:e7:f5:
ec:36:0a:36:f7:33:ca:23:a9:78:c0:66:ab:aa:55:
ac:f1:3e:37:59:f3:4f:98:5f:df:49:c4:29:8b:5d:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:41:88:AE:0C:02:E2:EF:3D:C9:7C:49:3F:82:E1:7A:3F:B0:D7:3D
X509v3 Authority Key Identifier:
keyid:1F:FA:05:7B:BC:4D:09:B9:C6:71:C4:3F:F9:6F:35:C0:0D:E9:FB:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_oFe7xNCbnGccQ_-W81wA3p-7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/45c300-85ed-4549-851a-e60908eb7c8d/1/H_oFe7xNCbnGccQ_-W81wA3p-7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8d:37:4e:6f:79:77:e1:46:e8:a5:e5:7f:44:1c:59:db:8a:
25:3e:b8:fa:97:3f:17:15:73:1e:f1:fe:e9:63:24:d7:f1:fe:
f6:0b:cd:88:55:4f:66:e2:4f:fc:5c:c5:73:82:a0:7f:2e:3e:
d1:c1:f1:e0:36:43:06:58:1b:04:0d:01:b0:c2:de:fd:ca:44:
74:ba:a0:2a:db:69:74:65:d5:5a:a3:d6:3c:cc:02:21:ed:47:
22:04:be:a9:e4:a6:4a:5a:8b:9e:54:ed:bf:43:c7:6f:75:0e:
af:4c:14:37:8f:cd:f1:01:e0:5e:aa:8f:9b:02:66:e1:10:a7:
3e:47:5e:34:9f:57:a9:8f:e6:52:93:72:45:ea:05:49:c0:93:
73:db:16:0b:4c:af:81:14:da:36:3c:b0:4a:da:c4:a8:12:32:
54:0d:59:a1:a0:24:2c:28:25:ea:98:8c:44:c5:a6:83:ce:29:
aa:b6:95:df:31:80:38:e9:13:ca:a9:59:9d:06:59:2b:04:f0:
b2:0d:41:00:c8:ed:8c:18:8e:8f:3f:86:de:f5:2f:01:a9:8c:
de:4b:fe:50:aa:3d:50:67:3e:3e:04:c0:07:de:ee:3f:f1:10:
9a:f7:ef:9b:74:e6:b6:03:ae:56:d3:4d:a7:5e:19:03:ed:10:
e8:95:90:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:25 2026 by rpki-client