Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: DlEtRk0bsBFv8xPRpQX+O1LYXqG7lV7gcKG4CCWZFso=
Subject key identifier: 7A:27:10:4A:51:7B:66:24:93:6B:16:8E:9A:E6:CE:99:38:F3:73:58
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 019F94376272244DC5E37962AF758256AEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 13:01:25 +0000
Manifest this update: Fri 24 Jul 2026 13:01:25 +0000
Manifest next update: Sat 25 Jul 2026 13:01:25 +0000
Files and hashes: 1: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: x7J6+VRYO96X3oiPJhEX4yAx59fbaFdP/pShYhydTR4=)
2: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (hash: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg=)
3: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (hash: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:62:72:24:4d:c5:e3:79:62:af:75:82:56:ae:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Jul 24 13:01:25 2026 GMT
Not After : Jul 25 13:01:25 2026 GMT
Subject: CN=7a27104a517b6624936b168e9ae6ce9938f37358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:2d:0a:4a:eb:18:e4:21:3b:69:c6:ed:78:
bb:88:c2:9b:f4:a5:1c:ea:4c:22:d6:15:92:02:6f:
07:b3:25:c2:03:aa:83:91:fb:1e:a0:79:38:19:d7:
10:ff:51:b1:1d:6d:ee:3d:e9:53:8b:55:c9:99:de:
93:c7:6f:48:e7:9d:58:80:5e:a0:70:10:38:a8:b6:
08:6a:18:05:ba:cf:fa:67:70:ff:28:28:0e:7b:f6:
b0:f9:e0:bc:ca:ac:20:6d:d8:56:50:c1:6d:9d:95:
55:d1:e4:0a:df:01:93:1d:ed:ca:32:56:82:81:c4:
77:73:e6:0b:e0:43:09:69:dd:65:f8:30:6a:39:6d:
0c:99:c2:58:cc:d5:b5:0c:4f:aa:51:12:c0:ca:e2:
c5:12:7c:9f:e7:e1:3c:95:bd:61:e8:05:fa:75:80:
f5:db:8a:a4:c9:40:3f:a0:d1:99:a4:dd:11:b4:11:
f5:16:b3:b7:1c:37:c1:d4:34:b0:c1:03:18:5e:da:
8b:e1:7d:e3:26:e6:4d:b4:ec:00:ec:ed:e0:2f:db:
0c:f3:bf:f9:d5:fd:1a:55:3e:85:ca:9f:a1:75:c4:
08:d0:18:eb:6c:4e:14:ff:d1:3a:d4:51:b1:fb:09:
28:b6:8e:9c:77:60:73:aa:00:7a:82:cd:a4:ab:92:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:10:4A:51:7B:66:24:93:6B:16:8E:9A:E6:CE:99:38:F3:73:58
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:17:07:d9:74:ab:f3:f4:44:0a:85:e4:ff:bf:d6:b9:96:48:
da:d9:7a:67:09:b4:75:08:99:cb:7f:a3:c4:8b:2c:f4:8e:9a:
0f:a0:aa:74:db:b9:af:96:b7:7a:0e:d8:c7:70:ed:62:0f:56:
7b:f0:14:0e:36:b5:91:b5:f5:7c:41:45:06:9d:d0:3a:c7:23:
ce:f6:ba:7a:0c:18:55:75:a8:1b:db:fd:76:21:ad:79:b6:0a:
bf:41:48:9d:cf:4e:a4:12:bb:84:ce:a4:b3:9d:42:73:f3:2b:
09:f8:0d:a9:f9:ed:44:f4:d9:b7:46:72:c6:e5:70:e6:7f:fe:
d7:a1:21:94:8c:90:b6:1a:7c:ad:4b:ba:66:0c:a8:3a:2e:dd:
c1:b6:70:70:bf:32:0e:31:cb:e0:60:9c:b9:4e:75:0d:7d:77:
26:22:84:e7:a9:89:a5:79:95:93:9a:08:39:ff:56:84:6a:b4:
5d:9d:d8:85:0e:8d:f4:0a:02:9b:9e:c7:dc:31:0a:a3:30:25:
66:7c:8e:1c:f1:4d:76:f1:0d:c8:3e:ea:b7:b9:1d:ae:21:20:
7d:59:cf:65:43:e6:b7:8d:33:29:19:b6:67:26:3a:4d:46:42:
2c:d5:7a:36:10:f4:36:d4:66:ac:fa:77:f1:f6:aa:a0:0b:fc:
21:39:20:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:09 2026 by rpki-client