Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: 8TV0sPmWBMVct43TpbD541NXpIlwz2h7kWNsePl3mQQ=
Subject key identifier: F4:13:EB:09:18:67:E7:DD:35:AF:AF:0C:67:20:A9:74:CE:34:BB:61
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 019F9248D4405C74CE54E3A193F38FA47C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 0C05
Signing time: Fri 24 Jul 2026 04:01:14 +0000
Manifest this update: Fri 24 Jul 2026 04:01:14 +0000
Manifest next update: Sat 25 Jul 2026 04:01:14 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: kmsBvDvj372EBXWDHGC9mm5YECGw+l8Gm/FMrZyiJG0=)
2: ZGLqYNMtolm5eL1wUXAdIeFX7S8.roa (hash: NyeDj2CCt8I3KwuYf4K9J8j74vTWf4ATwXYKw7Y/SY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:d4:40:5c:74:ce:54:e3:a1:93:f3:8f:a4:7c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Jul 24 04:01:14 2026 GMT
Not After : Jul 25 04:01:14 2026 GMT
Subject: CN=f413eb091867e7dd35afaf0c6720a974ce34bb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:32:bc:9b:d6:f9:45:92:ad:bb:d1:42:23:
b5:3a:91:97:13:cb:15:f7:5c:d3:fb:67:ad:b4:db:
33:8b:7b:be:34:02:85:c6:23:e3:a3:8f:45:be:8c:
3e:51:3e:ce:d2:cd:18:c5:b9:7a:5f:9e:5e:0b:9d:
d7:aa:f8:23:32:c4:f0:b3:2c:43:86:ad:92:cc:38:
3d:55:e8:79:b4:f6:22:73:48:d7:a7:31:1e:a3:1b:
1d:d1:18:13:43:67:04:93:29:ac:39:45:25:97:9f:
b5:9e:db:60:12:60:02:77:a5:e6:46:f2:d3:fc:e9:
e2:cf:0f:32:f3:ba:97:f2:cb:d9:16:04:4a:22:8b:
29:e8:de:4e:d1:a4:f4:4d:c1:4d:15:76:8b:a4:dc:
0c:78:e6:22:3e:b3:d1:95:d0:4c:59:f5:e9:9f:13:
e3:4c:9e:c9:a2:d4:ab:b8:5b:a7:81:08:a5:67:02:
59:77:f8:37:98:8c:a8:d2:5b:10:a5:b6:6c:ed:6f:
56:e8:a2:68:af:4f:63:d5:4f:52:2b:5b:74:9e:69:
0d:77:20:fe:77:3b:14:89:0d:10:d2:d5:f6:21:1c:
54:52:11:0a:b5:80:ac:c0:a8:79:97:66:41:b1:b5:
d9:83:ff:ec:10:bd:93:fb:b1:83:be:bc:8b:2e:d8:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:13:EB:09:18:67:E7:DD:35:AF:AF:0C:67:20:A9:74:CE:34:BB:61
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3e:b4:57:fb:a7:c8:06:a1:a0:ad:c8:d4:a5:32:84:eb:8c:
b3:3f:64:63:14:07:ed:88:5a:99:0b:49:82:68:ab:94:b0:71:
d2:a6:b5:d4:f0:71:14:54:57:04:ed:2d:d3:4f:54:11:41:73:
99:2e:b9:5a:11:13:a1:98:01:ad:5f:af:37:1c:e0:3e:56:5e:
fb:b1:a6:78:15:b7:5d:e9:49:c3:ec:cc:20:8f:31:59:c4:cc:
13:f1:a3:8d:80:51:f9:c4:53:29:2b:11:10:8b:ec:67:42:6a:
37:de:e1:23:1a:27:72:dc:78:e4:8e:62:2a:f7:ac:ba:6a:10:
b7:12:d0:97:37:fe:e5:43:94:58:3a:90:71:94:41:63:27:d0:
b6:7b:e1:72:c5:fd:d3:49:8e:90:0f:9c:30:81:e6:12:f3:18:
fe:1b:b8:e4:03:36:51:82:94:e4:29:6f:85:14:08:b2:df:de:
f0:b0:2c:cb:de:d3:9b:34:8d:d7:14:66:00:78:86:8b:81:a3:
a0:e0:2a:23:53:2c:11:17:2a:cd:d3:f9:e1:ec:60:2e:ba:f4:
82:9b:9d:02:45:b8:64:fc:79:64:1a:1a:87:42:b7:17:28:23:
c7:69:f2:a7:17:a3:ea:12:b1:a6:8a:8a:9c:3e:13:e1:ad:37:
69:e2:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:22 2026 by rpki-client