Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
File: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft (raw, json)
Hash identifier: BGkspkwU3g/IROTt5pSPZMCGhADfk35p2OpXE3jYUs4=
Subject key identifier: 3D:40:EE:31:B5:69:B7:45:4A:25:95:82:25:B7:EC:79:9D:AD:E1:B9
Authority key identifier: 1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
Certificate issuer: /CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Certificate serial: 019F935AA300A89348B426B03F2913EC3C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:18 +0000
Manifest this update: Fri 24 Jul 2026 09:00:18 +0000
Manifest next update: Sat 25 Jul 2026 09:00:18 +0000
Files and hashes: 1: H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl (hash: h32M+UpphMUCnwlIjDAxvY7c8aC2H/Dr0Zu9G/L041I=)
2: V9X49EieL5muWb2FuiaJlUR-F0M.roa (hash: KCwcP0n4ZTZ4GNIBxxk+6aPghXeAJv53hQU1wGojBWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:a3:00:a8:93:48:b4:26:b0:3f:29:13:ec:3c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa5580da7ed71e23dc6c36902e5c66b0e93f92
Validity
Not Before: Jul 24 09:00:18 2026 GMT
Not After : Jul 25 09:00:18 2026 GMT
Subject: CN=3d40ee31b569b7454a25958225b7ec799dade1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:92:03:52:fd:86:5e:8b:c2:72:2e:f4:36:
2c:11:f8:4a:45:d3:93:94:91:e8:7f:3e:50:dc:d1:
6a:df:e4:24:13:08:2f:2b:d5:ab:06:28:d4:d3:de:
10:dd:bc:b0:00:c9:a4:bb:40:84:4f:35:20:56:2f:
d3:53:dd:23:84:63:72:b1:70:09:bc:5e:3e:be:99:
6b:4c:5a:43:91:17:d1:63:89:24:27:5f:48:dd:c7:
44:12:03:5d:19:49:8c:8d:f6:02:95:24:92:7f:1b:
39:42:88:3d:82:26:c8:52:15:85:aa:66:50:5c:a4:
96:67:c6:e7:9e:7d:ba:00:2a:a6:bc:45:5f:e1:67:
e3:87:e4:3e:29:91:7a:83:95:19:fd:84:7a:70:be:
ac:24:8a:65:6c:b9:05:be:71:26:bd:f5:8a:ca:56:
1f:de:b2:ad:a9:b7:3d:58:7e:2a:7a:d6:96:d4:a0:
1b:f9:99:51:fc:87:e2:62:92:ef:46:af:6c:37:f4:
b5:74:a5:45:d3:87:4b:b3:3f:06:fc:a9:a3:6b:4f:
f5:67:8a:c0:a1:da:c5:66:f2:10:0b:dc:da:be:dd:
d1:26:b7:06:ba:35:64:db:6b:a6:a1:71:3e:ea:49:
d4:8b:29:99:65:e8:56:f5:35:e1:f1:d3:2e:2d:40:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:40:EE:31:B5:69:B7:45:4A:25:95:82:25:B7:EC:79:9D:AD:E1:B9
X509v3 Authority Key Identifier:
keyid:1F:FA:55:80:DA:7E:D7:1E:23:DC:6C:36:90:2E:5C:66:B0:E9:3F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/H_pVgNp-1x4j3Gw2kC5cZrDpP5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b0:25:2d:ed:78:e9:45:86:7a:5b:af:db:b9:a5:93:4d:aa:
7e:3f:2e:c7:ee:31:f7:42:84:9f:de:94:52:f2:04:63:71:ea:
4e:38:13:97:80:81:24:ff:8e:41:68:f6:aa:97:c2:32:11:45:
87:51:80:7f:ff:27:64:e4:86:12:83:08:fd:50:e4:e6:43:a1:
29:fb:87:9c:e7:4c:29:77:e8:7d:fc:c8:5a:fe:32:dc:ff:b2:
4c:17:47:4e:c7:2d:ff:47:f1:e9:f6:59:69:63:b9:69:4a:ff:
3c:02:d6:75:f9:5b:58:0e:48:a8:aa:d9:aa:b1:98:8c:93:08:
73:1b:73:9a:fd:38:53:c7:38:c4:b1:e5:76:3b:05:4d:fd:f0:
a1:ed:3a:bf:dc:74:83:83:7c:88:a0:ab:95:2a:40:b5:af:4f:
9f:15:41:ae:6b:53:60:c2:b4:fc:4e:a0:f0:bc:50:a7:de:62:
2f:d6:7c:25:f1:04:a1:94:d8:81:38:36:10:78:4f:15:78:78:
88:eb:87:9d:a4:05:9a:3f:c5:ea:33:80:5f:69:58:ac:97:a7:
35:f0:aa:a1:53:18:92:37:1b:3d:4d:16:70:42:cf:41:1e:9d:
50:5c:e6:38:8f:12:c2:7a:8b:5b:ad:f3:14:58:0f:ff:c6:35:
dd:71:94:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWqMAqJNItCawPykT7DydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZmE1NTgwZGE3ZWQ3MWUyM2RjNmMzNjkwMmU1YzY2YjBl
OTNmOTIwHhcNMjYwNzI0MDkwMDE4WhcNMjYwNzI1MDkwMDE4WjAzMTEwLwYDVQQD
EygzZDQwZWUzMWI1NjliNzQ1NGEyNTk1ODIyNWI3ZWM3OTlkYWRlMWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BaSA1L9hl6LwnIu9DYsEfhKRdOT
lJHofz5Q3NFq3+QkEwgvK9WrBijU094Q3bywAMmku0CETzUgVi/TU90jhGNysXAJ
vF4+vplrTFpDkRfRY4kkJ19I3cdEEgNdGUmMjfYClSSSfxs5Qog9gibIUhWFqmZQ
XKSWZ8bnnn26ACqmvEVf4Wfjh+Q+KZF6g5UZ/YR6cL6sJIplbLkFvnEmvfWKylYf
3rKtqbc9WH4qetaW1KAb+ZlR/IfiYpLvRq9sN/S1dKVF04dLsz8G/Kmja0/1Z4rA
odrFZvIQC9zavt3RJrcGujVk22umoXE+6knUiymZZehW9TXh8dMuLUAC6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1A7jG1abdFSiWVgiW37HmdreG5MB8GA1UdIwQY
MBaAFB/6VYDaftceI9xsNpAuXGaw6T+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSF9wVmdOcC0xeDRqM0d3MmtDNWNackRwUDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2Et
NjRlNTJiOWRkOGQxLzEvSF9wVmdOcC0xeDRqM0d3MmtDNWNackRwUDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2EtNjRlNTJiOWRkOGQx
LzEvSF9wVmdOcC0xeDRqM0d3MmtDNWNackRwUDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrAlLe14
6UWGeluv27mlk02qfj8ux+4x90KEn96UUvIEY3HqTjgTl4CBJP+OQWj2qpfCMhFF
h1GAf/8nZOSGEoMI/VDk5kOhKfuHnOdMKXfoffzIWv4y3P+yTBdHTsct/0fx6fZZ
aWO5aUr/PALWdflbWA5IqKrZqrGYjJMIcxtzmv04U8c4xLHldjsFTf3woe06v9x0
g4N8iKCrlSpAta9PnxVBrmtTYMK0/E6g8LxQp95iL9Z8JfEEoZTYgTg2EHhPFXh4
iOuHnaQFmj/F6jOAX2lYrJenNfCqoVMYkjcbPU0WcELPQR6dUFzmOI8SwnqLW63z
FFgP/8Y13XGUDA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:22 2026 by rpki-client