Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: u9MNE8KwJSvOMOMiJWsFyxQBijGZ8ZJUoLVLp1I1bow=
Subject key identifier: 4E:C5:AB:F5:36:6C:C5:F5:AD:24:E8:6D:A6:C1:30:6E:95:C0:A1:E7
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 019F9135BD72B2D6FD1EC2D4D562E8CEA9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 0CDC
Signing time: Thu 23 Jul 2026 23:00:45 +0000
Manifest this update: Thu 23 Jul 2026 23:00:45 +0000
Manifest next update: Fri 24 Jul 2026 23:00:45 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: kwG74r9bCSvA3ByKx3qfzfqpFSiU78v7HibPuYFZE+g=)
2: Bnu29pluL1AD4wD2GgQvr07xtcs.roa (hash: I+PJfEbbOSJZNIrwOCyiS4eKNFmjFbXF4CqvEyNzfEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:bd:72:b2:d6:fd:1e:c2:d4:d5:62:e8:ce:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Jul 23 23:00:45 2026 GMT
Not After : Jul 24 23:00:45 2026 GMT
Subject: CN=4ec5abf5366cc5f5ad24e86da6c1306e95c0a1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:e2:bf:a1:1f:d8:03:9f:d4:0e:28:9f:7c:
89:3e:e7:9c:91:04:a3:3a:0f:95:1a:03:ad:d9:e2:
3c:9c:2e:45:d1:34:71:89:5b:94:56:94:7f:1b:3e:
47:dd:19:26:64:3a:f0:fc:6c:5e:1b:60:20:bc:99:
15:5e:c1:bb:ad:58:b7:b1:f2:29:95:77:40:cc:db:
05:7d:70:8d:a5:6d:2f:8e:ae:a8:05:0d:7d:5b:e9:
fe:71:fc:c2:a1:a7:76:f0:37:e6:c3:4e:51:48:97:
9a:0b:f4:25:3c:28:bd:c5:a9:de:9e:47:93:62:22:
96:25:d5:9d:ab:72:0c:f9:76:af:c8:cd:17:28:61:
8a:21:a7:48:10:a5:ce:02:1a:2c:d1:6f:84:a0:d1:
4c:32:f8:d5:ad:86:99:b5:d2:2b:32:aa:33:59:69:
d0:d1:bb:17:27:4d:ba:42:4f:5a:14:82:0d:19:5e:
28:d1:ee:7d:9f:5e:b1:59:37:19:5e:36:c3:ad:b8:
ec:27:68:30:6d:5e:a2:9e:50:72:6c:c8:87:2b:d3:
29:59:a2:3f:0f:c0:66:98:20:bb:ba:0f:78:3e:6e:
fe:1a:10:2d:b2:61:46:b2:ee:76:46:75:8c:4d:00:
74:6c:73:a2:03:23:01:a4:fa:a4:2e:a0:ac:f3:78:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C5:AB:F5:36:6C:C5:F5:AD:24:E8:6D:A6:C1:30:6E:95:C0:A1:E7
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f8:73:7f:18:f7:41:04:1b:44:0c:19:35:38:68:32:51:e5:
a7:03:cf:9c:10:f7:fa:43:1f:e7:57:75:ae:af:7a:76:8b:1b:
dc:f7:18:86:c0:01:97:d3:3b:7e:19:07:79:dc:8f:9a:2b:ed:
fe:63:5e:ea:20:c0:08:fa:5f:ea:83:f5:53:91:c0:b8:68:08:
3a:78:e5:af:79:cd:76:de:2f:b3:a0:63:85:f6:4a:e6:9d:48:
2d:de:06:78:cb:f7:fa:bf:f6:7e:25:80:9e:bd:7d:86:5c:00:
29:92:3a:33:76:b0:2a:ea:c7:07:85:78:59:6d:5a:2f:e8:f1:
da:64:5a:29:d3:1b:78:27:c1:30:c0:31:ed:ee:3f:63:63:48:
97:43:19:ab:d6:a2:97:12:dd:cb:d6:72:11:97:0e:ed:32:0f:
21:86:3c:bf:26:02:65:ea:d3:8a:55:76:d6:a0:de:10:d1:bf:
81:58:d2:d0:64:bb:e7:93:9c:a8:85:ad:31:f5:1d:3c:2b:c6:
07:fe:70:a4:fd:00:2b:fb:91:e9:06:bc:4b:eb:f0:d6:6d:96:
19:90:76:0c:55:b3:2e:30:04:e3:b4:37:d7:93:21:f8:94:74:
d8:29:ba:88:8f:ca:23:1b:60:0d:e8:ef:6f:58:f3:00:79:e3:
b9:b9:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:29 2026 by rpki-client