Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
File: H0rytHmBXwfNgun4K6sv6hP7IbE.mft (raw, json)
Hash identifier: AnPYauhdEv4uJvHt0JOChoRkSfeEJJJv7o8EiJtFG9s=
Subject key identifier: CB:A8:DE:B6:B3:7B:B8:9B:99:9A:D6:8A:1F:46:99:17:11:09:C9:E9
Authority key identifier: 1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
Certificate issuer: /CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Certificate serial: 019F90912CC65248AEC521D939E646EC5D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
Manifest number: 1280
Signing time: Thu 23 Jul 2026 20:01:00 +0000
Manifest this update: Thu 23 Jul 2026 20:01:00 +0000
Manifest next update: Fri 24 Jul 2026 20:01:00 +0000
Files and hashes: 1: H0rytHmBXwfNgun4K6sv6hP7IbE.crl (hash: Q9fInT9RUlGWZpRqekoCzFDYv0DBuCok76YhPQOzslo=)
2: Vf77xukhBIpUTcfDdQGILMMSa4Q.roa (hash: tmWyKSyKboTPLB52PoBpJE8efgve3egkhQ+0cqtz0+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:2c:c6:52:48:ae:c5:21:d9:39:e6:46:ec:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4af2b479815f07cd82e9f82bab2fea13fb21b1
Validity
Not Before: Jul 23 20:01:00 2026 GMT
Not After : Jul 24 20:01:00 2026 GMT
Subject: CN=cba8deb6b37bb89b999ad68a1f4699171109c9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:0a:97:a4:ea:c6:53:86:9b:c2:a9:df:23:
dc:59:90:29:8d:6b:d6:db:e6:8e:33:ca:0b:28:a4:
6c:67:4d:d4:d5:e8:c0:01:09:10:ba:be:08:01:b5:
ad:71:2f:77:61:bb:63:7d:7c:5d:7c:4a:54:bc:3c:
61:69:8a:47:2c:58:fb:7a:f5:eb:cb:8e:f7:fa:ed:
22:54:81:9e:87:70:ad:4b:77:3f:4a:71:91:0d:eb:
fd:2d:08:5c:a1:ff:c5:42:a6:44:b3:34:6f:c7:c8:
3b:0e:73:2c:25:c0:80:20:30:b3:af:5f:3b:67:f6:
be:d2:cf:80:34:c0:e7:44:77:d1:43:cc:73:70:1e:
82:3c:85:f1:cd:8f:32:77:c3:93:5c:d5:fe:7b:6c:
c1:58:b5:a9:77:72:8b:c4:53:8a:4e:5f:e7:ff:a3:
d7:97:50:fa:cb:55:51:66:a5:a9:6a:ea:2e:93:27:
35:24:59:3d:68:07:fa:ac:50:0b:27:26:e4:7a:20:
08:1e:c5:92:9d:8d:76:c8:57:ad:55:20:a0:80:7a:
6f:75:b0:3c:f5:71:56:c7:03:23:de:d1:92:7b:5f:
08:df:2c:e6:5f:7b:30:f9:1c:4c:d7:cf:de:9e:d8:
16:50:99:32:7b:a0:3f:3f:14:7a:3c:e3:37:20:92:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A8:DE:B6:B3:7B:B8:9B:99:9A:D6:8A:1F:46:99:17:11:09:C9:E9
X509v3 Authority Key Identifier:
keyid:1F:4A:F2:B4:79:81:5F:07:CD:82:E9:F8:2B:AB:2F:EA:13:FB:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0rytHmBXwfNgun4K6sv6hP7IbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0f25b7-4f81-4f41-a162-086c16f736b1/1/H0rytHmBXwfNgun4K6sv6hP7IbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1b:a0:3b:8f:9d:f3:17:c9:7b:78:9b:b6:f8:ef:cd:0a:26:
d1:c7:03:6c:dc:9c:1b:13:7d:07:d5:1b:74:4e:47:06:c5:a1:
e5:10:34:36:e8:d9:fd:fe:76:bc:b1:3e:1f:eb:96:87:f3:ca:
ae:41:de:5a:c4:e7:89:cf:7a:17:be:71:76:ff:b1:fc:7e:ba:
70:d0:6d:b1:02:03:ed:4b:a0:ee:06:0d:58:8f:26:db:64:7f:
22:67:1f:94:31:9d:d8:d0:0e:64:f8:e6:0f:8c:55:d2:5d:cf:
8a:c0:f0:b4:77:6a:e1:7b:9c:fa:1f:d1:8f:e7:99:7e:27:89:
cb:02:b6:58:ad:4c:48:77:4d:69:a9:aa:fb:d1:9c:bc:e0:6b:
f6:17:19:b0:89:17:61:ec:e4:50:4b:c8:54:37:c2:0b:70:6e:
45:08:2a:6e:e7:be:1c:ff:6a:8d:bc:b4:d0:b6:fa:87:10:01:
46:7e:65:b3:5d:9e:da:70:8f:43:31:e0:af:49:f9:75:d0:30:
88:da:57:50:c9:39:a9:d3:a9:7f:dc:6b:6e:5e:ba:ed:06:16:
e6:5e:f3:98:2d:44:59:64:86:f2:ee:85:d6:7c:cd:de:bf:cf:
1b:28:a4:d4:0b:10:bf:b9:60:f2:39:89:1b:8c:af:54:8a:0e:
ad:3b:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:31 2026 by rpki-client