Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: 0xEUv37pPkSeDAERJbUx10iKxx/LUaPOKQ9At/ipC54=
Subject key identifier: 99:B8:01:5C:D8:08:4E:76:CB:49:BE:33:2B:46:AA:66:47:1A:AC:78
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 019F94377157B23713950FFC6E050A83CEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 13:01:29 +0000
Manifest this update: Fri 24 Jul 2026 13:01:29 +0000
Manifest next update: Sat 25 Jul 2026 13:01:29 +0000
Files and hashes: 1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: 5GiNDOtnrpQlWDhlZWLXcwHQW2vnyL5/VHnzIzVkUJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:71:57:b2:37:13:95:0f:fc:6e:05:0a:83:ce:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Jul 24 13:01:29 2026 GMT
Not After : Jul 25 13:01:29 2026 GMT
Subject: CN=99b8015cd8084e76cb49be332b46aa66471aac78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:21:63:91:7e:8d:d1:2b:1c:f3:66:92:01:
00:ac:ec:90:1d:c1:b2:88:e9:92:a4:cd:d8:c8:57:
d0:12:8c:1a:37:3b:f1:aa:6e:ec:2a:80:f7:d5:41:
ff:ba:b2:2c:e7:b8:3a:38:e3:06:a2:e7:fa:1d:65:
ab:1b:fa:25:ac:5a:21:28:d7:ce:50:22:e8:30:4f:
3e:5f:7a:c3:8c:60:2f:60:df:3f:e9:27:b9:ed:ef:
dc:63:26:aa:fd:bb:80:89:a3:2a:56:47:a0:a8:a9:
fc:d2:de:71:61:a9:99:53:fe:ec:c2:99:72:3e:7c:
3b:09:c1:cc:e5:2b:1f:a1:06:8b:31:8e:d4:c9:89:
96:74:d8:d5:96:9d:43:fe:03:3a:94:8f:25:7f:f5:
bf:c4:85:d8:4e:8c:3b:52:5f:e0:0b:c5:f5:57:1c:
91:65:8b:9a:a0:39:0a:9c:f3:9f:0a:7f:fd:f0:7f:
ee:60:38:0a:c0:95:80:05:60:2f:5b:86:76:bb:98:
21:0f:2a:ce:bc:a4:e7:65:36:84:04:09:5f:4e:c2:
b7:f1:50:d8:c1:c9:65:86:d5:22:42:9e:99:f5:cb:
e7:cf:4f:9c:d1:a9:d2:96:f7:05:1b:ba:0f:8b:96:
40:df:10:a6:b3:43:62:74:f1:1c:79:12:59:06:9d:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B8:01:5C:D8:08:4E:76:CB:49:BE:33:2B:46:AA:66:47:1A:AC:78
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:43:14:d2:c4:78:e4:af:ac:79:1d:b4:05:79:6e:ae:f0:3d:
e4:90:8c:b2:7d:78:e9:38:15:5e:d9:8c:04:cd:7e:97:8b:32:
ea:8d:a9:59:67:ce:cb:ee:67:83:0d:5f:d1:e4:38:be:be:ca:
ee:fc:19:62:fe:9b:08:51:05:17:c1:75:aa:3f:cf:f1:46:ff:
1e:9f:5c:23:01:a6:36:ba:7b:ee:01:66:a3:d7:28:fa:f3:81:
27:ce:5f:e7:d1:4d:f9:0f:7d:1b:bd:7b:b3:77:9a:fb:3f:8c:
52:41:6f:67:ba:19:58:fa:f0:e4:4f:03:4b:34:cb:0b:7e:cf:
14:94:43:e2:1b:e5:ab:c0:6c:b4:1c:d5:7b:a8:c3:e4:54:4c:
a9:2a:cb:1a:df:93:54:81:b0:8f:0d:ec:83:ba:1b:ea:b6:ef:
27:60:3c:d9:d8:2e:c1:78:86:6c:9e:b2:14:fa:d9:a4:7a:e3:
1c:c5:79:b5:f6:74:ea:02:4d:0c:a8:4f:89:7a:42:9c:d6:ac:
d4:5f:d9:28:b0:80:f0:63:60:3c:64:ce:6d:59:58:ea:b1:dd:
9d:d7:02:ec:4c:d8:2d:66:d0:5d:e2:fa:46:4a:5e:3c:b3:9f:
9d:3c:3f:27:b5:36:25:2b:77:ac:24:61:67:a2:40:85:2a:53:
9c:f5:8f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:16:06 2026 by rpki-client