Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: GFH83ohCJKV1xEh4sqQsVDFTEkruaiXuv2Jb6t0GyZQ=
Subject key identifier: FF:1E:16:DD:09:B9:9B:8E:89:A3:8A:92:A2:B1:07:2E:6D:62:27:DF
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 019F94A445A7244B97051214FB36B4E3C1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 1997
Signing time: Fri 24 Jul 2026 15:00:21 +0000
Manifest this update: Fri 24 Jul 2026 15:00:21 +0000
Manifest next update: Sat 25 Jul 2026 15:00:21 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: 8vEKT1i5h9l5SLv38F9RoTK2WoWS1uacpEub+VK8eWY=)
2: q8Sc-hb4z8RPWefbF866BBRja54.roa (hash: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:45:a7:24:4b:97:05:12:14:fb:36:b4:e3:c1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Jul 24 15:00:21 2026 GMT
Not After : Jul 25 15:00:21 2026 GMT
Subject: CN=ff1e16dd09b99b8e89a38a92a2b1072e6d6227df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:eb:6f:aa:d4:70:b7:c3:91:42:ef:c6:c0:
a7:14:df:06:9a:6d:2b:f0:48:89:de:b3:b7:16:c8:
53:0f:cb:f2:fd:45:c2:6d:09:4e:b5:9f:7d:cd:c0:
0c:2b:0f:56:78:b7:9f:3c:56:b3:16:25:c8:be:75:
78:37:d8:38:db:ec:69:10:04:c8:13:00:98:1d:1a:
b2:dd:64:13:40:3c:67:10:62:a1:d8:5d:4c:5e:7f:
07:04:db:4d:c5:20:d8:38:22:43:d7:35:61:72:50:
c5:1e:2e:be:71:2d:1b:d4:6f:c2:43:93:3e:52:d6:
c8:a1:2b:60:ad:db:7a:40:f3:58:f4:22:15:c5:e2:
90:81:d4:64:8c:71:19:78:dd:33:a9:bb:4c:e7:4a:
9e:89:af:13:51:25:0b:e3:12:f5:18:d7:e9:1b:0f:
0f:10:58:c3:d8:90:f0:e4:7a:ac:b9:73:dd:24:d5:
ed:1f:4a:64:53:3a:03:62:dc:34:71:9c:ba:b0:d4:
c9:84:59:aa:bc:30:81:dc:0b:15:8d:d0:3d:18:05:
c9:d4:59:e7:13:65:f8:ab:ec:a0:94:ee:c1:2c:26:
83:fc:75:f6:4d:4d:16:31:19:b5:b5:50:8a:0f:82:
c1:cb:76:c3:f1:27:9f:14:5b:10:70:85:49:83:b3:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1E:16:DD:09:B9:9B:8E:89:A3:8A:92:A2:B1:07:2E:6D:62:27:DF
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a9:00:b5:30:4c:f9:c4:b5:cc:18:85:bd:f8:38:08:14:07:
7d:a2:a0:a2:eb:f2:ce:ee:11:c2:ba:ee:bb:b7:91:4c:d7:bd:
0e:9b:be:2b:b1:4b:2a:80:26:6f:b0:f2:ab:9d:4c:d1:bb:6b:
75:f1:33:b5:bf:10:d8:86:36:97:de:3c:92:59:f4:4e:41:3e:
68:75:b9:e5:e6:6e:b9:7c:b9:cd:8e:19:0f:86:73:79:44:1f:
68:58:3c:06:e9:72:33:fa:18:9a:32:da:67:38:04:cb:42:5b:
59:0b:bc:08:e1:81:61:6b:d7:f9:48:a7:d4:51:68:54:3e:42:
5e:d9:e3:60:c7:33:85:10:01:b4:f2:56:a8:46:6a:8d:83:7d:
e6:76:37:7a:cb:e4:39:60:48:93:c3:33:5f:5a:c9:a8:8a:06:
81:7b:24:85:8e:2d:1f:81:32:de:f5:26:65:c8:2b:42:52:63:
b6:c8:80:14:d6:24:5c:86:c2:87:9a:19:3a:46:ae:82:53:ad:
56:f1:a3:00:5b:8c:07:02:3b:fe:74:8d:8d:7e:53:08:c9:94:
f1:bc:70:c0:47:e5:53:85:45:53:95:4f:35:34:1f:53:36:fd:
ab:d3:d6:c1:26:47:22:64:9f:a7:2f:b8:ae:36:f7:fb:1b:5f:
cf:19:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:26 2026 by rpki-client