Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: IpjitBIvNceLsapC4zFtgMSBmZ10+KgYnXW8hvegWGo=
Subject key identifier: 98:A9:E8:E2:AB:43:7E:EB:0D:8F:58:1A:A9:45:B5:D9:E2:AB:8A:3D
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 019F94A5FFC2ED6A3F53963E02F43F6B75C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 0FA0
Signing time: Fri 24 Jul 2026 15:02:14 +0000
Manifest this update: Fri 24 Jul 2026 15:02:14 +0000
Manifest next update: Sat 25 Jul 2026 15:02:14 +0000
Files and hashes: 1: VvsA1Kl39BglFknild5eA4Dydww.roa (hash: NFyWQReCFe2c01EEjfpo/UVkTf+Rhd9xSOXiVKp36g4=)
2: aNBSAPidLf7Zr9rTX7poShldEUQ.roa (hash: 5HAeXiMlHW8kFdlTB8XHD3hF61UiZtMH1ZY+JgE0QcI=)
3: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: QvHXJabbsRPH+3qQMjGbleMYf771Wv2iAfLakW3Dizc=)
4: rb-CMpsRgp4MG_UrqROnerBNmLo.roa (hash: nFR4DTY5jeXMm+3EFDI/vTrdgkyRg8zqtIKzCPhxbjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:ff:c2:ed:6a:3f:53:96:3e:02:f4:3f:6b:75:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Jul 24 15:02:14 2026 GMT
Not After : Jul 25 15:02:14 2026 GMT
Subject: CN=98a9e8e2ab437eeb0d8f581aa945b5d9e2ab8a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:79:69:77:ab:fe:7f:a0:e7:b2:33:8c:66:8b:
8b:48:f2:16:4f:c0:ea:ed:ea:26:30:be:8a:4c:22:
27:6d:5a:a6:9d:9d:0f:8b:33:85:a7:0c:0a:88:9e:
14:6b:ef:70:27:80:eb:92:3a:d4:c7:48:e6:ee:89:
7c:2b:d3:bd:45:88:e9:f8:11:16:a6:3b:94:8f:94:
45:68:ce:28:f4:58:ef:1c:6a:5d:c6:bb:ee:05:75:
e0:58:53:26:d4:19:4e:c7:d1:a2:71:ab:73:2a:3e:
41:25:3a:50:b7:bc:11:b9:e2:29:4b:d3:32:2f:0d:
49:41:8f:08:5f:af:21:61:4b:9d:bf:2e:1f:68:75:
a6:03:31:07:6f:6d:e1:4a:74:f1:2d:5a:9e:f9:44:
98:f9:d7:e8:b7:3f:de:8e:9c:a4:12:1a:9e:f9:89:
5a:d7:6f:21:60:06:2a:bc:02:15:ec:59:8e:2c:75:
86:a5:98:04:b3:ef:ec:95:bc:3f:27:80:15:77:5a:
96:c0:d6:6a:20:5e:83:2b:b8:42:de:2e:06:39:58:
c2:0e:99:bd:a2:15:cb:4b:c3:f0:1a:84:71:d4:6a:
d5:0e:38:a9:46:cb:8f:0d:29:37:3f:49:45:3c:c3:
6f:ae:ab:26:11:31:e1:c0:99:9e:d4:4d:16:93:fa:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:E8:E2:AB:43:7E:EB:0D:8F:58:1A:A9:45:B5:D9:E2:AB:8A:3D
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:64:b7:4f:e2:85:71:21:49:2d:33:11:39:96:13:79:3e:7b:
6d:a0:67:27:d6:74:c2:f7:bd:22:ba:ff:38:39:e9:09:ab:93:
2b:b2:3c:fe:cc:30:e8:76:b6:3f:11:1a:cf:1c:a1:64:43:7f:
74:02:01:ba:2c:c8:65:c2:d9:f2:97:5c:0a:40:88:83:96:aa:
80:46:13:77:3f:75:2a:d1:41:6e:6a:8d:32:cc:0e:ad:49:d2:
b1:05:1f:70:63:25:b2:21:10:80:f6:57:e8:2c:4e:67:71:69:
ae:7f:b2:a1:ae:db:b5:4e:b4:f5:e6:96:de:aa:96:8a:f6:c5:
60:d0:7e:57:09:b1:09:9c:f3:1c:50:3f:b1:b9:a1:67:47:ab:
d1:2c:16:66:c0:db:24:1e:ca:56:84:d8:ee:1b:67:0f:94:49:
f5:4f:2b:0b:0f:cb:0b:b4:e8:a6:3a:32:76:99:f5:65:08:b2:
ef:8e:d6:36:d0:04:6d:92:ab:c4:a6:61:c7:09:fe:25:87:e4:
01:04:bb:a9:98:c3:72:f7:dd:e7:7f:c5:c4:32:9e:56:2c:84:
9e:1e:f5:ee:7b:72:1d:9f:04:45:87:bd:e9:6c:d5:1f:8e:92:
9e:59:ac:3f:de:8c:b3:7e:4c:46:a4:fe:f7:e7:4c:e3:fe:13:
a2:73:34:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:52 2026 by rpki-client