Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
File: h3rydLcxE0zLwmco-TfaAwWN1zs.mft (raw, json)
Hash identifier: SnytHkKCDdoq+uV720HjEMGOdkcqvrpEua9xG5wvXm0=
Subject key identifier: 90:4C:B3:90:2B:0F:43:AE:7B:03:CA:85:60:A9:F9:24:61:F5:32:C1
Authority key identifier: 87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
Certificate issuer: /CN=877af274b731134ccbc26728f937da03058dd73b
Certificate serial: 019F93C94BF0A7A74FE042DA0E33DF5E1A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
Manifest number: 010D
Signing time: Fri 24 Jul 2026 11:01:10 +0000
Manifest this update: Fri 24 Jul 2026 11:01:10 +0000
Manifest next update: Sat 25 Jul 2026 11:01:10 +0000
Files and hashes: 1: AhAcdKgAbaxev6WZheq94rPVhy4.roa (hash: jnz0tuvjSI9nchLY2GePdtWDuCFuuGK4nahWThqEMJU=)
2: IR529NvnrXP81UBDnz8QdBrSyJ8.roa (hash: IkGeFcq/7XMWRAAEt9CdXpwX/GjXpCyZ2A9WTlqr/w4=)
3: h3rydLcxE0zLwmco-TfaAwWN1zs.crl (hash: pO3MhUNadEqIc0oTORD22RSBHfsIVky2ilD4fb/Bn5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:4b:f0:a7:a7:4f:e0:42:da:0e:33:df:5e:1a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877af274b731134ccbc26728f937da03058dd73b
Validity
Not Before: Jul 24 11:01:10 2026 GMT
Not After : Jul 25 11:01:10 2026 GMT
Subject: CN=904cb3902b0f43ae7b03ca8560a9f92461f532c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:b8:c7:a8:6e:f1:ee:dd:88:3b:e0:02:87:
7b:dd:6b:7e:7a:aa:29:12:20:cb:17:2f:40:1d:76:
80:e5:a7:83:9e:4f:95:3b:ea:69:62:fb:60:e1:c7:
8e:02:f2:a8:a5:eb:24:e5:d5:c8:49:8c:f9:e0:40:
19:68:bb:7d:e0:58:b6:72:9e:a8:da:6e:2f:38:7f:
6a:ce:61:a5:2d:09:f9:08:5b:87:dc:76:13:23:7f:
34:63:fe:b4:b8:c0:25:a4:8b:14:77:35:05:4d:62:
b0:e0:f2:08:b5:d5:e8:3f:5f:d2:bf:94:19:64:d4:
64:7b:2c:98:da:2d:9f:d6:08:56:b9:d8:35:54:9e:
9a:38:38:f6:18:5d:bb:51:6c:52:1c:1c:53:a0:c6:
2d:81:c0:57:88:aa:a7:99:22:25:b6:9c:d0:8b:f6:
ba:c6:16:3b:d9:7c:bc:f9:58:45:94:c5:09:d7:b8:
e1:80:8a:42:f7:53:a0:9c:95:d6:6b:0c:4f:2c:8f:
b9:da:61:60:67:4e:d8:b4:1d:86:19:2c:ab:80:f0:
07:f0:4a:d1:32:b4:3a:ac:93:60:1d:9d:31:0b:40:
a6:d3:39:2f:a6:4f:8a:b9:b4:04:e3:71:c1:f4:0d:
4d:02:fa:5a:7b:2c:dd:e5:75:3e:6b:61:c2:5f:9b:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4C:B3:90:2B:0F:43:AE:7B:03:CA:85:60:A9:F9:24:61:F5:32:C1
X509v3 Authority Key Identifier:
keyid:87:7A:F2:74:B7:31:13:4C:CB:C2:67:28:F9:37:DA:03:05:8D:D7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3rydLcxE0zLwmco-TfaAwWN1zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/689816-6399-4325-9286-f13ae32c18f0/1/h3rydLcxE0zLwmco-TfaAwWN1zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b0:56:b2:a7:d9:16:d9:c5:04:f9:85:82:c7:00:ec:0e:f4:
ff:ba:84:35:c1:f9:07:0e:4b:40:80:17:47:4c:07:77:11:6d:
1b:d8:27:c2:06:ea:02:c8:90:09:de:64:ab:06:1b:96:08:8f:
a1:fa:fb:2d:de:3d:a9:60:fc:66:60:f0:f4:a1:c3:a8:6f:c7:
cf:c2:db:c7:0b:07:07:aa:13:82:f7:48:1c:5f:92:e8:27:53:
ce:56:2e:ed:bc:28:b8:6a:8e:40:05:65:f1:63:d8:33:6a:b6:
9c:2a:61:b1:38:20:7f:c2:5f:7b:cf:20:20:94:16:4c:26:ba:
bd:fe:52:96:f2:13:e4:4d:78:c4:9c:f3:be:de:9c:25:4f:0e:
99:21:4f:39:72:72:da:e4:64:44:cd:17:d1:67:f6:f4:c8:db:
51:e4:9f:34:35:e5:4a:be:26:30:ab:be:34:d5:d4:d9:a1:11:
86:88:8f:e5:f4:30:74:69:67:54:95:ed:0b:ce:25:24:84:6d:
0b:33:08:8d:55:2d:5e:1e:60:b5:77:7a:7b:49:be:d5:30:7e:
1d:a9:1d:65:5d:04:4a:2b:f1:47:66:7b:2f:4d:1d:44:45:93:
0e:88:67:02:ae:9c:8d:74:5f:16:49:48:52:de:4c:cc:26:03:
66:03:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:20 2026 by rpki-client