Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: HApacrrf4R5yF+PN6RMNEacIUKEb/bRnHmZgJ0bDEuM=
Subject key identifier: 85:B3:7F:32:7C:33:25:0C:AA:04:E6:A6:A3:B9:06:39:34:9F:79:E8
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 019F9211AB8460BEDF99AF185355539CD473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 0998
Signing time: Fri 24 Jul 2026 03:00:59 +0000
Manifest this update: Fri 24 Jul 2026 03:00:59 +0000
Manifest next update: Sat 25 Jul 2026 03:00:59 +0000
Files and hashes: 1: FC-j2DCq34hCFuPalVqFP_Va_c4.roa (hash: jfYCQqEdA0WNXwP1ahEI1VJ/4GR5skI19EQziW64bRA=)
2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: jIZh1BMB6itUk+O5jFhAFCSQV00tBCJ0r7PZ71mj8OM=)
3: RzzdhI5WQTfIRJ5CT4m2Ue9mGN4.roa (hash: xrR61qMY4oBctclJGvQvpdXymPubQyCDbVzByy1zses=)
4: atjpUn5m_olYo4VMnv5o9bZkp10.roa (hash: zhJgLfRaNhUfkrFUtufurP1akqxnjTREPo55ccYjvXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:ab:84:60:be:df:99:af:18:53:55:53:9c:d4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Jul 24 03:00:59 2026 GMT
Not After : Jul 25 03:00:59 2026 GMT
Subject: CN=85b37f327c33250caa04e6a6a3b90639349f79e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:55:3a:5d:e0:b1:ee:71:35:18:46:1e:70:a0:
3b:f6:58:05:06:39:9b:4e:33:9c:0f:58:7e:74:ab:
d5:7f:c8:f0:f0:a5:6d:a9:de:d9:8b:1c:90:99:ad:
dd:65:d9:29:50:34:83:44:13:3d:aa:93:7f:bd:49:
ff:86:54:09:65:5a:9f:e3:ea:c3:09:15:1a:53:12:
19:45:ab:f8:29:26:06:9b:85:01:c0:6e:de:ac:3b:
ef:a5:67:74:66:9e:63:8f:da:a8:8f:21:61:c9:c4:
2d:f5:16:1c:fe:64:94:6d:eb:0c:2f:9f:4a:21:47:
0c:67:a4:77:68:1a:0e:55:28:2f:d7:5d:81:d9:ee:
5c:c8:df:fe:7e:8e:7a:5a:a0:77:91:15:90:c0:79:
32:db:16:35:ea:e8:03:ce:94:98:8d:bf:23:cd:16:
12:af:ff:53:fb:25:2b:a8:45:18:60:f9:fb:64:64:
c7:f8:66:62:9e:31:92:7d:26:dd:38:41:48:45:5c:
3b:c8:d7:1a:a3:13:f0:81:00:9b:76:ef:11:6a:0d:
d1:1f:c5:a6:66:9f:cc:2c:df:37:ed:2c:51:70:97:
e9:42:99:f9:9e:0b:e9:b6:38:d8:d9:29:74:bd:fa:
37:21:c4:05:82:c9:59:82:81:5a:f3:35:d0:dd:36:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B3:7F:32:7C:33:25:0C:AA:04:E6:A6:A3:B9:06:39:34:9F:79:E8
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:03:4f:eb:5f:04:b4:c4:5e:f1:c7:43:f9:88:4f:03:99:b7:
aa:be:14:0d:eb:55:ad:ff:cb:e5:61:b7:3a:ae:ca:b4:5d:cf:
64:e7:1d:64:07:c7:79:ef:f9:46:7a:f6:63:20:3c:d8:24:3a:
29:02:7e:0a:58:72:bc:90:7b:ca:1a:7c:80:45:93:5c:5c:32:
1d:2e:7b:8a:ba:4f:68:90:12:a5:f5:e8:35:8b:f9:a9:9b:f6:
47:25:b0:3b:be:bb:8b:a7:80:a2:19:7c:be:b0:fb:d8:66:82:
ee:b7:41:b5:b6:20:d3:b5:09:5f:7d:0a:35:18:c2:62:87:38:
4a:ef:e8:2d:24:40:cf:eb:85:d9:30:28:66:9a:6c:e1:56:07:
c4:05:a7:82:1f:95:eb:1e:4a:fb:12:e0:9f:bb:db:83:ef:7e:
fd:7b:a6:26:19:75:3c:73:de:13:1d:ce:1c:6f:59:2b:8e:dc:
25:b1:57:1e:3d:40:76:d4:bb:b4:85:ae:03:2c:3f:73:67:1f:
61:9c:2f:fa:1a:bf:ae:fd:7a:13:fc:57:63:65:9f:8b:1b:b6:
d5:4f:92:39:04:53:5d:6a:51:dd:7a:a8:4d:43:8a:3a:ee:e1:
e5:59:ee:19:01:4f:d0:b4:ba:bf:cd:9d:d0:c2:20:ba:66:8c:
42:29:01:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEauEYL7fma8YU1VTnNRzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmZDA4NzVjZDAwNTFkMGMwOTI1YWNhMDQxMDM0ZTc4NDBh
Njc3MGIwHhcNMjYwNzI0MDMwMDU5WhcNMjYwNzI1MDMwMDU5WjAzMTEwLwYDVQQD
Eyg4NWIzN2YzMjdjMzMyNTBjYWEwNGU2YTZhM2I5MDYzOTM0OWY3OWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1U6XeCx7nE1GEYecKA79lgFBjmb
TjOcD1h+dKvVf8jw8KVtqd7ZixyQma3dZdkpUDSDRBM9qpN/vUn/hlQJZVqf4+rD
CRUaUxIZRav4KSYGm4UBwG7erDvvpWd0Zp5jj9qojyFhycQt9RYc/mSUbesML59K
IUcMZ6R3aBoOVSgv112B2e5cyN/+fo56WqB3kRWQwHky2xY16ugDzpSYjb8jzRYS
r/9T+yUrqEUYYPn7ZGTH+GZinjGSfSbdOEFIRVw7yNcaoxPwgQCbdu8Rag3RH8Wm
Zp/MLN837SxRcJfpQpn5ngvptjjY2Sl0vfo3IcQFgslZgoFa8zXQ3TZF2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWzfzJ8MyUMqgTmpqO5Bjk0n3noMB8GA1UdIwQY
MBaAFB/Qh1zQBR0MCSWsoEEDTnhApncLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMt
ZTA4MDJmNDc0NDQ0LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yMjEwNDgtM2JhZC00NjljLWI5MzMtZTA4MDJmNDc0NDQ0
LzEvSDlDSFhOQUZIUXdKSmF5Z1FRTk9lRUNtZHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQNP618E
tMRe8cdD+YhPA5m3qr4UDetVrf/L5WG3Oq7KtF3PZOcdZAfHee/5Rnr2YyA82CQ6
KQJ+ClhyvJB7yhp8gEWTXFwyHS57irpPaJASpfXoNYv5qZv2RyWwO767i6eAohl8
vrD72GaC7rdBtbYg07UJX30KNRjCYoc4Su/oLSRAz+uF2TAoZpps4VYHxAWngh+V
6x5K+xLgn7vbg+9+/XumJhl1PHPeEx3OHG9ZK47cJbFXHj1AdtS7tIWuAyw/c2cf
YZwv+hq/rv16E/xXY2Wfixu21U+SOQRTXWpR3XqoTUOKOu7h5VnuGQFP0LS6v82d
0MIgumaMQikBYQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:36:25 2026 by rpki-client