
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: r8BtUXwehMRjeVlH93vbhapZm4BEXlM2uYOjRoX9WGQ=
Subject key identifier: 5E:D6:25:0C:52:F3:C1:1E:E1:E5:5D:3A:87:6B:1B:DD:BD:98:62:19
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 019F946D6320250A253BA7D77F398640275E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 14:00:24 +0000
Manifest this update: Fri 24 Jul 2026 14:00:24 +0000
Manifest next update: Sat 25 Jul 2026 14:00:24 +0000
Files and hashes: 1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: VO4gmZQI5rQOALgzK7pAY4t7X3b9zGaEr/MF42PUS7Y=)
2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:63:20:25:0a:25:3b:a7:d7:7f:39:86:40:27:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Jul 24 14:00:24 2026 GMT
Not After : Jul 25 14:00:24 2026 GMT
Subject: CN=5ed6250c52f3c11ee1e55d3a876b1bddbd986219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:aa:82:c7:4a:00:a4:d8:17:92:b2:79:8e:
9e:50:43:68:39:83:f2:22:e9:f2:3b:3a:7a:1b:cc:
08:84:07:e9:3e:79:87:df:be:24:02:ad:b0:a3:dc:
14:18:d3:ff:4a:ac:0d:d6:97:9d:e6:f9:33:c7:2a:
bc:0a:4b:f2:a5:1c:e3:21:6e:96:75:37:1d:32:87:
b5:0a:35:1d:7b:db:3f:ca:d7:d9:ab:34:2a:dc:cf:
12:e9:c0:f6:81:95:2d:c6:3b:a6:49:82:c1:b1:d2:
3b:b9:a3:0e:b7:56:58:03:22:03:bf:1f:58:81:24:
a3:3d:4e:48:68:6a:89:a1:8a:83:ee:ab:d5:ed:29:
49:55:d6:40:1f:2f:d8:92:0a:34:79:b4:6c:7d:e5:
0b:50:98:b7:b4:d5:c4:49:09:b7:d5:43:14:d5:91:
fb:86:49:7c:b1:45:55:72:0d:34:71:0f:79:d3:53:
1e:fd:4a:47:30:33:52:aa:f3:be:79:e4:6e:a1:62:
9f:0b:07:ff:e0:60:6f:28:54:51:f3:84:12:9a:0f:
e9:10:26:26:cb:56:e3:03:10:b5:7f:4c:fb:15:88:
c6:bb:c0:a7:5f:97:c1:7a:0f:0f:b6:5e:4f:a9:83:
64:26:7a:f9:ec:b8:9b:3a:f9:bc:bc:d1:07:a6:36:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D6:25:0C:52:F3:C1:1E:E1:E5:5D:3A:87:6B:1B:DD:BD:98:62:19
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:83:ce:e4:13:93:ea:a2:f6:bd:06:5b:76:a2:0b:c5:e7:5e:
03:06:cc:05:3c:03:5b:21:7b:99:36:88:bd:3b:87:37:64:03:
11:18:04:3f:33:b1:96:05:c9:28:87:52:f5:26:c3:ae:c8:c2:
ab:a7:18:d6:98:8b:d9:3f:42:98:4d:46:26:f5:66:f0:e5:1f:
85:26:cb:41:1f:24:c1:9c:9a:14:5f:55:c3:13:cc:cc:7f:61:
3e:37:43:c0:a1:21:10:d7:fc:76:f4:54:35:41:70:96:2b:c1:
d4:31:80:15:d1:11:e6:cd:1d:3c:9c:f3:1f:ab:72:05:23:a7:
7c:21:62:a1:7c:2f:39:1a:38:47:fe:9f:eb:c9:59:6d:32:3f:
d3:42:6d:37:f0:64:cd:fe:93:48:4d:47:a6:2e:88:7a:e8:5b:
d4:ff:16:08:ae:51:26:a1:d1:d7:8d:ff:76:47:26:44:42:9a:
64:df:5e:72:bf:e4:0b:b0:33:8a:4e:71:74:85:22:df:6f:14:
b3:8c:56:89:14:5f:b6:cb:7b:f8:67:01:00:54:d2:c5:4e:99:
dd:46:47:51:c3:69:51:f0:9e:82:35:0c:9e:5d:46:03:61:83:
e5:4e:f5:5d:6d:42:a5:b2:7d:5b:b5:1e:41:af:8f:11:41:99:
e3:44:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:18 2026 by rpki-client