Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: q4VvoCHETZE5chgjGxCKkq6BNEYzDCUdn41jH6gq6Xs=
Subject key identifier: 19:2B:A1:F7:AA:1E:DF:E2:20:11:BB:D9:11:CC:BE:43:CF:21:28:AC
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 019F94A43A9996678D9A8F94D9E58163F0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0B57
Signing time: Fri 24 Jul 2026 15:00:18 +0000
Manifest this update: Fri 24 Jul 2026 15:00:18 +0000
Manifest next update: Sat 25 Jul 2026 15:00:18 +0000
Files and hashes: 1: P0H9mn8azX8J6K-hdAfHiYeHr48.roa (hash: E4c9kuinUCaG0thWwOJajTUQL7VeKxkEvaLK1sfiV8U=)
2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: rZDgMwRCfk3EpNAqb7+UFiP6RpohhZ5UHJWNOyKJYV4=)
3: tdjIiHG6aRg6RaOSgsb_E64QRco.roa (hash: rpGb1Qz22L2bS8euMlwSPzOxpxsFd6dx18fW4QaBOow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:3a:99:96:67:8d:9a:8f:94:d9:e5:81:63:f0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Jul 24 15:00:18 2026 GMT
Not After : Jul 25 15:00:18 2026 GMT
Subject: CN=192ba1f7aa1edfe22011bbd911ccbe43cf2128ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:28:99:cd:64:5d:b9:61:34:a6:c0:33:f1:e8:
bb:3a:8f:8c:fe:d8:18:f9:6f:e7:07:2f:71:96:0d:
81:78:40:55:af:fa:a8:ff:44:c5:3e:0e:6d:f5:f7:
25:c7:73:81:39:6a:76:d2:e4:02:36:4e:51:f4:42:
79:86:12:10:6b:94:f5:66:cd:4a:c5:9e:b3:c5:f2:
4d:d8:ca:17:7c:3a:86:1b:fa:7b:8e:5f:79:24:33:
ba:f5:c0:f4:c6:1a:81:9a:ed:8f:8e:32:1f:94:f4:
d0:1d:d6:f2:7a:4d:e7:0d:f2:79:14:e9:68:01:bf:
5a:23:9e:8b:2d:aa:45:58:c1:8a:92:a3:e2:75:a7:
8e:29:18:50:1a:0c:0c:ca:1e:a6:30:3a:a1:5d:72:
1a:19:8b:85:64:a7:20:c8:a9:28:05:cf:14:00:9c:
37:d3:30:25:b5:66:ae:8c:23:71:97:d7:a1:ca:03:
be:f6:93:86:1d:8d:ad:36:b3:52:1f:5e:e9:d1:2c:
29:56:a5:60:d8:f7:71:9b:0f:f2:b7:f4:c0:3e:20:
88:e9:b6:21:0e:90:9a:c4:4f:0b:d8:ca:12:ea:fd:
45:ec:53:7d:b3:48:fa:2f:6b:84:6a:b2:00:2b:93:
52:34:29:97:3d:23:c8:69:9d:9a:41:f7:0e:c5:6f:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2B:A1:F7:AA:1E:DF:E2:20:11:BB:D9:11:CC:BE:43:CF:21:28:AC
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:21:9e:e8:6f:0b:2e:27:7e:be:4f:be:53:08:ff:c1:0d:7f:
22:cc:49:af:7d:23:60:85:9c:f8:3d:e3:e7:61:85:42:af:41:
ae:e3:29:8a:85:78:d3:93:af:7f:04:05:68:ea:b0:42:b1:9d:
33:ae:86:69:08:06:11:af:ab:90:ec:63:9f:03:e0:d1:9e:3b:
24:9a:df:88:f0:3d:ec:02:08:bd:36:c8:c9:d9:b6:2e:32:72:
8c:05:05:2f:ad:75:c1:c8:69:d6:11:e5:bf:42:65:7f:e0:ae:
e7:b9:10:f8:bd:ca:34:6d:47:af:05:dc:1d:e1:94:d0:53:70:
67:22:87:a3:aa:43:6d:44:71:30:66:11:6d:1e:2c:1a:4a:ce:
41:dd:a6:fb:06:81:b7:82:c3:e8:1f:da:fc:bb:79:6b:50:6e:
a5:28:96:f3:0b:68:f7:89:66:02:4a:60:f6:e1:62:d4:31:7d:
ad:b7:a7:a7:3d:6f:dd:53:fe:fc:c1:63:af:4d:4d:3f:ca:d3:
ff:66:7d:a4:6c:da:cf:87:98:17:cb:ef:77:fc:54:eb:eb:c2:
48:a1:cc:d8:d3:2e:e6:dd:4b:62:9b:7f:84:87:45:b2:f4:86:
98:d5:e4:6a:e2:71:43:06:cf:4d:0a:5b:bf:7f:4d:ef:1c:e7:
00:ff:2e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:12 2026 by rpki-client