Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
File: h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft (raw, json)
Hash identifier: VtLppDYMMTzhlpiEJW8n0mjH5qOchYOadWi3hBrBDiU=
Subject key identifier: 58:59:68:5F:12:1E:0C:8C:C3:43:CF:EC:F9:C5:0C:1B:9B:71:9C:29
Authority key identifier: 87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
Certificate issuer: /CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Certificate serial: 019F91DA7CFE6CF7FBA09E104D895B29BE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
Manifest number: 035F
Signing time: Fri 24 Jul 2026 02:00:42 +0000
Manifest this update: Fri 24 Jul 2026 02:00:42 +0000
Manifest next update: Sat 25 Jul 2026 02:00:42 +0000
Files and hashes: 1: H6uqUGEMkw_GDxczJD1M696P_zE.roa (hash: nWnw8H8sn82+YCkD2O0kI6uMQ5WeKNqhPpnI/ZrVopY=)
2: h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl (hash: zBj1ji7tf6A2faErBmCxDC0nYmBtrt/wlCfgwHYg+7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:7c:fe:6c:f7:fb:a0:9e:10:4d:89:5b:29:be:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8751054dfbfdad22c49e6bbadab3a18f42a1c364
Validity
Not Before: Jul 24 02:00:42 2026 GMT
Not After : Jul 25 02:00:42 2026 GMT
Subject: CN=5859685f121e0c8cc343cfecf9c50c1b9b719c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:06:f5:2c:96:52:42:60:97:52:2b:96:06:
8c:b6:42:d3:8d:cb:c2:dc:a5:94:f6:06:9d:08:72:
30:eb:45:c8:f4:29:b4:cc:b6:d3:f2:78:9f:60:7e:
ab:4c:e9:7d:62:b6:38:96:03:e2:dd:37:7d:27:77:
2d:25:05:d7:23:b3:4e:ea:33:ea:d4:45:9b:b5:b5:
6f:9b:35:22:c0:96:fa:d4:bd:89:39:a7:e1:59:a6:
15:d6:8c:29:42:02:bc:7b:ba:5b:b5:86:e8:c3:d6:
5d:0c:28:6d:82:fc:f8:47:9d:c2:3e:d8:f1:8f:f0:
08:b0:9f:0e:60:6a:fc:94:cb:6c:b7:8a:bf:bb:71:
52:3e:f0:a7:ef:ce:a7:c6:e5:6b:79:26:88:bd:c6:
0b:fe:dd:87:bc:41:4a:3e:c1:1a:02:44:82:3d:44:
8f:96:ba:53:54:4f:c5:8b:f2:de:32:67:14:ec:f1:
78:ba:9c:22:71:63:b8:79:0c:22:e6:af:5e:4f:13:
9e:2c:c6:53:02:f8:f7:0c:d6:42:69:90:1a:d7:24:
3b:fa:0b:88:f1:92:a4:e4:52:71:8c:3c:71:04:f1:
de:59:b3:78:1e:23:6a:86:4f:53:c6:ee:43:f4:4b:
2e:4f:76:2b:7b:ba:7a:41:48:39:9b:8d:63:d5:12:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:59:68:5F:12:1E:0C:8C:C3:43:CF:EC:F9:C5:0C:1B:9B:71:9C:29
X509v3 Authority Key Identifier:
keyid:87:51:05:4D:FB:FD:AD:22:C4:9E:6B:BA:DA:B3:A1:8F:42:A1:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1EFTfv9rSLEnmu62rOhj0Khw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1da7ec-1c34-4647-9e83-7579e85a1a49/1/h1EFTfv9rSLEnmu62rOhj0Khw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:7b:2a:fd:77:ba:b7:b9:24:a5:ec:2c:6c:ae:34:90:02:4d:
87:82:87:74:2b:b8:ef:40:cd:c0:95:f1:6f:ba:9f:d6:5f:d0:
fe:0e:16:5c:cd:65:b0:fb:0e:61:48:ff:03:8a:95:8e:99:7f:
2a:35:58:0b:8f:2e:16:24:75:27:1f:07:76:6b:e7:ea:3a:8c:
37:f5:50:28:35:30:68:83:60:09:46:64:5b:b5:49:36:38:ea:
e6:01:34:1d:05:8b:e9:16:20:30:18:04:d8:e4:2d:8f:00:49:
f4:a9:fb:1f:8e:01:40:c5:fc:82:c8:03:28:7d:2b:aa:63:2b:
b6:38:15:ed:c1:03:a4:43:b3:da:b3:2f:a8:ef:ff:2e:01:e2:
ad:02:8a:62:45:ae:66:56:32:ad:b8:dc:9a:b8:24:f0:99:f4:
89:4c:13:c1:f6:d8:b8:ec:47:fe:de:a3:1b:6b:ea:c0:05:90:
a5:57:67:91:09:0f:ab:13:71:2f:e1:b9:b3:33:43:c2:b4:ca:
87:1b:d3:88:77:7c:93:0d:10:d5:11:ae:c4:8f:4b:e0:c4:e1:
fa:2b:2a:89:29:01:74:0d:7f:85:b3:1f:e3:80:dc:2c:65:d1:
36:55:86:8b:bc:90:5a:92:9a:31:19:5b:90:3d:4b:8d:cf:5d:
18:01:b1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:15:28 2026 by rpki-client