Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: G0dpTtDhTKtANTL0Xitm1Hon2X1tS3eWXOHazSTA238=
Subject key identifier: C9:20:90:F9:C5:D1:4D:5F:40:F5:CD:81:1C:CE:16:9F:2C:7D:E9:7F
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 019F9700AD70CD19F7C6D222A7818F0E1EB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0E7D
Signing time: Sat 25 Jul 2026 02:00:31 +0000
Manifest this update: Sat 25 Jul 2026 02:00:31 +0000
Manifest next update: Sun 26 Jul 2026 02:00:31 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: r7r9rGhfCuB7XeXp5PJrcKiCaE/FO7ZmjZPtEjfWdVk=)
2: ptikDTRhjTNxZI8dkI54eJbGFTA.roa (hash: 3SdSmJMo+FOvr1IMdnku5tDe7K6GsQTnPIBl17tgA08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:00:ad:70:cd:19:f7:c6:d2:22:a7:81:8f:0e:1e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Jul 25 02:00:31 2026 GMT
Not After : Jul 26 02:00:31 2026 GMT
Subject: CN=c92090f9c5d14d5f40f5cd811cce169f2c7de97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:e3:98:01:6b:5e:83:27:c9:27:7b:fd:40:
db:8a:9c:c0:8a:64:34:81:1a:1e:58:6f:e8:2f:f9:
56:99:c9:c1:b1:62:81:97:9a:d5:d7:98:69:21:36:
6b:13:1b:94:f5:c7:3f:b6:d7:5d:4c:43:94:45:3e:
5e:ea:44:1d:c9:e5:36:3f:05:00:47:c4:0d:40:32:
0a:50:6a:af:64:28:e9:4a:dc:41:be:a0:a7:b4:0f:
86:72:84:30:d6:29:1c:5d:f3:82:10:24:f4:76:2d:
8b:1f:5e:2f:38:6a:54:dc:eb:5c:1b:f2:c0:0a:8a:
a0:c1:40:9b:25:5a:71:27:23:96:55:a1:8a:f6:45:
d9:b5:57:f1:f6:a3:ca:cc:da:78:62:1b:9c:5b:73:
1a:9e:b2:63:66:c8:d8:2a:3e:9a:f8:71:a4:27:b3:
24:f7:5d:14:48:38:0f:b8:80:11:5b:c7:2c:f0:5b:
c7:58:49:fd:d8:1f:d1:66:e5:18:bc:2f:51:3f:13:
df:7f:76:18:54:d4:ae:ff:6b:2a:c6:01:08:f5:7b:
a6:e0:a7:b4:eb:99:8d:6b:40:0f:1e:da:90:79:a4:
90:27:de:7b:51:a6:27:e1:2a:0a:14:ac:1a:c4:02:
9c:90:dc:0c:57:0d:55:c3:e5:6d:23:29:c2:c7:ab:
59:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:20:90:F9:C5:D1:4D:5F:40:F5:CD:81:1C:CE:16:9F:2C:7D:E9:7F
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7a:3e:f2:ab:65:cc:aa:f3:47:ab:be:6f:31:fa:6f:32:58:
96:f6:58:39:ad:04:d2:18:fb:8a:95:9d:61:bf:e4:ad:d7:8b:
61:3b:e9:65:ae:85:0a:e1:22:e9:e1:b3:c7:4b:42:e4:8e:62:
5a:8a:9c:48:39:ef:bd:ba:99:df:ea:2b:11:55:bb:6f:2c:18:
0c:90:db:45:d5:a9:01:1a:21:65:68:f5:ef:bc:d4:f6:84:56:
c8:a3:55:6e:ad:ef:a4:17:c8:ae:0c:3f:af:47:c7:70:fc:c3:
ca:31:54:eb:88:f6:7c:4b:e4:d0:ca:86:a6:78:4e:83:c2:f8:
88:bf:dd:bb:f5:45:0c:87:6e:da:fb:26:af:4b:4a:d6:e8:33:
20:91:02:7c:81:89:e7:71:82:fc:e5:7a:1d:24:e9:54:fc:f6:
93:ce:6e:e4:70:71:2a:51:ac:a7:17:fa:57:1f:61:ea:a4:e4:
87:c2:4b:26:51:88:fa:fc:1d:98:d5:6f:bd:f3:30:d4:53:e7:
48:c2:96:cc:79:18:a5:5f:3d:67:4e:2c:31:06:2d:b9:35:c5:
51:81:dd:01:6e:e4:5c:91:6d:2c:38:a0:11:e7:0b:0d:20:63:
fe:e8:98:32:56:e4:b3:75:14:cc:c8:8b:18:d9:a4:3e:de:e4:
57:90:6c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 07:59:00 2026 by rpki-client