Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
File: h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft (raw, json)
Hash identifier: CX7hbDwGHUD9YU1kGl2tOSDvyeVyLKgH2yoBhURxFZQ=
Subject key identifier: CB:04:42:D2:DA:96:35:56:61:E3:4D:C0:90:14:AF:C7:E7:0F:5A:4D
Authority key identifier: 87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
Certificate issuer: /CN=877aad307ad330ebb8cf44ec21389a170436fd53
Certificate serial: 019F91DA204A140E80283ADE68C61052702F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 02:00:19 +0000
Manifest this update: Fri 24 Jul 2026 02:00:19 +0000
Manifest next update: Sat 25 Jul 2026 02:00:19 +0000
Files and hashes: 1: 4O7JXBvPOYztRW27KQbfsJapV8I.roa (hash: CnJtkzBJ3WzY6WSIQ98/SBNuBHldMzltsiyedt5bTUA=)
2: gP48O_sjBy8crhBkXhJMvckOd40.roa (hash: YjRHc0wBKAbt12RWFSPrs766F+2rkzk6tBEBo+GPgkI=)
3: glCPJ2S6o9uZKjCAdlQQmibg5oU.roa (hash: r5yLJSYgpWVCtbKMSEubh57fs1HDMOGe6waujl24LNg=)
4: h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl (hash: 1qFroXRvmA3uXWqpdIyRFUmz68CKBzcV3ddIb+YemN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:20:4a:14:0e:80:28:3a:de:68:c6:10:52:70:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877aad307ad330ebb8cf44ec21389a170436fd53
Validity
Not Before: Jul 24 02:00:19 2026 GMT
Not After : Jul 25 02:00:19 2026 GMT
Subject: CN=cb0442d2da96355661e34dc09014afc7e70f5a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:94:9e:98:3f:cf:50:de:8d:9d:a2:ad:b8:
23:2b:2b:5c:12:1d:44:d2:ac:cb:a8:c1:eb:e0:13:
32:a9:bb:9e:e7:6f:97:2d:7a:ed:70:5b:bd:4e:d5:
1d:54:8e:4a:25:d9:f5:ee:7f:62:50:2f:b6:3c:41:
15:5a:5d:52:4d:7b:53:64:02:10:20:ed:d1:df:d5:
f8:3f:c6:bb:87:5e:73:e8:79:2d:1a:80:dc:d9:4d:
8c:e9:5c:74:77:3f:15:ff:ee:b7:80:64:84:69:a4:
2b:b0:d8:2b:95:03:a6:9f:70:c4:1d:d8:e1:26:eb:
cc:73:16:9e:b2:95:36:53:e2:1e:1f:03:22:7e:0f:
12:65:e5:cc:bf:09:55:f6:21:7a:5a:4a:9c:73:bc:
94:47:fd:3d:b1:0c:f8:7e:a1:b1:de:ce:3b:9b:aa:
e1:67:24:da:68:26:f2:2f:d8:64:ff:55:01:fb:08:
bd:24:5f:a0:d7:87:95:18:c1:23:c1:ff:07:63:e3:
37:62:92:fe:2c:c8:2e:d3:f0:30:b9:41:72:ba:41:
09:5d:3d:cf:d2:e9:1e:25:f6:45:80:85:21:56:d5:
1a:0e:b7:5e:f3:bb:53:14:63:cb:47:60:19:8d:37:
e3:07:39:08:a5:b3:1c:9a:69:e8:8c:c1:0b:8d:d2:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:42:D2:DA:96:35:56:61:E3:4D:C0:90:14:AF:C7:E7:0F:5A:4D
X509v3 Authority Key Identifier:
keyid:87:7A:AD:30:7A:D3:30:EB:B8:CF:44:EC:21:38:9A:17:04:36:FD:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3qtMHrTMOu4z0TsITiaFwQ2_VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ae221-c101-497f-91fe-508099c133bb/1/h3qtMHrTMOu4z0TsITiaFwQ2_VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:92:61:f8:1a:96:87:b1:67:31:1d:30:d8:15:48:87:a5:4c:
c5:75:54:78:73:06:a7:34:cf:94:00:e2:88:5c:1f:93:d2:55:
bb:65:f1:47:79:17:92:57:a6:17:a0:83:39:70:1d:50:a4:62:
46:87:17:76:a1:e1:49:64:87:bd:e5:07:53:af:4a:c4:bd:ad:
4b:ce:3c:99:79:5d:03:96:5d:ed:18:a8:c2:2f:1e:3d:b8:8d:
52:30:69:b0:7f:52:f1:91:68:41:52:10:fd:b2:6e:9f:9c:8e:
6a:0d:fd:ba:ad:02:26:b5:8b:f3:19:48:1d:37:34:de:6a:06:
bd:1a:27:49:69:2a:32:bf:25:da:72:9d:a0:78:7a:73:53:62:
26:42:7d:85:0b:3f:f7:f1:90:1d:fb:f5:2b:63:d4:50:df:40:
fd:68:aa:47:f2:5e:a4:80:3a:fa:53:b0:9e:e2:d1:7a:4f:7d:
e3:84:44:eb:d0:5d:d2:73:72:b6:b0:02:be:68:b2:ed:2f:44:
01:b6:0c:e9:72:76:15:f9:07:6a:bf:bb:7d:49:fa:c5:c2:69:
3d:f3:58:f5:f8:89:30:e1:b3:75:1c:5c:07:f3:fc:a4:7e:90:
df:d7:d4:ab:f7:2c:5d:69:e6:05:db:ba:b2:a9:81:6a:99:b4:
9f:30:51:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:57 2026 by rpki-client