Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: BHWb3GaS1fI9tUSEtUTZgsaA+NkbKNayI9PbOgYavVg=
Subject key identifier: 97:AE:32:C9:D8:57:C8:72:A8:9E:14:05:41:DB:4F:83:EA:54:91:E5
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 019F8FECA8D1FD4968F417896FCCA830CDF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 17:01:19 +0000
Manifest this update: Thu 23 Jul 2026 17:01:19 +0000
Manifest next update: Fri 24 Jul 2026 17:01:19 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: Q2XMaWTS6NoIbr4ywccqxkK+yF7j4/cbnFEt2pwRLnA=)
2: x-xatRQzbMJq2QoB7VpakVl_dyQ.roa (hash: FUFQzFRUVGUSKSoKEZzjy+oCv2v1jEvkTjPlxRoTw4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:a8:d1:fd:49:68:f4:17:89:6f:cc:a8:30:cd:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Jul 23 17:01:19 2026 GMT
Not After : Jul 24 17:01:19 2026 GMT
Subject: CN=97ae32c9d857c872a89e140541db4f83ea5491e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:fa:d1:83:4c:ab:d9:ef:df:20:e9:f8:a3:
53:3a:fd:4e:b3:a4:31:7a:9c:b7:9f:63:35:73:e4:
58:52:fb:6e:88:ab:33:c6:57:b8:5d:d4:89:c5:e3:
c4:d2:31:64:8d:cf:e2:b6:df:aa:b6:81:43:16:c4:
42:b4:1e:06:e0:1e:77:2c:3d:c8:19:0d:1b:38:b8:
35:ef:04:d1:45:a3:03:cb:1a:4f:24:60:8a:dc:88:
77:29:fd:d3:55:fa:ac:20:d1:8a:d3:e2:4a:1b:85:
3c:f9:fb:6a:d7:02:6c:da:19:d5:6c:a8:4f:c2:a7:
56:08:48:11:5a:25:58:00:bc:30:0b:c6:e2:87:3f:
dd:87:5f:8e:fb:63:bf:a2:1c:0b:73:d7:55:cf:eb:
97:18:53:18:fc:28:05:68:a1:cf:5a:93:47:7c:f1:
30:00:a6:30:00:71:8d:66:9a:73:8e:41:03:e2:b1:
52:1a:50:9a:70:b3:86:01:1e:2e:b3:22:78:b2:5c:
6c:ee:69:89:90:a3:07:35:ea:38:53:f2:3f:94:47:
8c:21:28:f5:d8:c6:97:36:49:04:76:6e:3e:99:f4:
01:3d:d3:82:3e:da:d1:a5:32:2a:f3:12:ac:60:7c:
ac:0c:aa:45:70:8f:a6:fa:81:b9:cf:a4:0d:f5:8f:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AE:32:C9:D8:57:C8:72:A8:9E:14:05:41:DB:4F:83:EA:54:91:E5
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e1:1c:82:2a:ec:20:8c:ee:1f:1e:bf:e6:3b:01:cd:5a:0a:
78:0b:85:27:e8:98:b4:3e:32:3d:59:79:15:81:1b:1c:0b:7a:
29:63:7c:df:16:ec:27:db:f9:72:1b:dd:19:d7:1a:31:da:4a:
0e:13:73:a7:35:ae:4f:8f:45:31:d5:23:5a:f4:8d:1a:bb:f4:
93:e4:d1:cb:f7:6e:b4:e0:1e:ee:00:29:be:88:83:fc:5f:0f:
54:0a:06:a6:06:cf:ac:d6:7f:b2:38:f5:97:4e:23:ad:5c:60:
a1:3f:e0:bd:fc:83:25:5d:23:e8:f1:94:45:76:e5:8c:4d:1d:
e0:61:2c:38:14:24:2e:7a:cf:16:5d:db:c2:06:76:08:96:fc:
9b:02:b4:9b:b9:bf:db:18:13:4a:19:7e:f3:56:c3:a6:d3:62:
c9:4e:8f:de:a4:3c:5c:4a:9f:bb:42:fb:9e:d6:c1:62:14:e6:
d7:b9:42:78:44:d7:00:df:29:32:9f:a2:40:62:c2:65:63:63:
f3:a9:46:38:46:1c:f9:2c:79:dc:6e:d0:65:ec:02:a0:dc:a1:
bf:3a:46:1d:d9:11:b1:ae:40:33:72:3f:9c:0d:fa:b2:df:e8:
e0:25:3d:52:52:34:13:67:d4:2d:c6:67:28:99:17:db:ae:36:
9a:63:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:22 2026 by rpki-client