Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: IIQ/uI0szL/A0Mrpzxb/GKtB3BK/hCuecjjc9/PUxKk=
Subject key identifier: 25:27:17:4C:D0:26:62:42:A3:BB:4D:8B:96:FD:10:32:47:A7:49:B0
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 019F9391F92250CDA05EF066338BD9E05E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 0621
Signing time: Fri 24 Jul 2026 10:00:44 +0000
Manifest this update: Fri 24 Jul 2026 10:00:44 +0000
Manifest next update: Sat 25 Jul 2026 10:00:44 +0000
Files and hashes: 1: oMb2k7Oz9unm3siEKObsvSGOu5s.roa (hash: pGiHyUdRro6M/TUFejm603qJXDKgL9TMHqLZBCWVjz4=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: e8y29ou4R5FDlF6nXi5Y3RMe4CCUo5JSEz19CJA80FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:f9:22:50:cd:a0:5e:f0:66:33:8b:d9:e0:5e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Jul 24 10:00:44 2026 GMT
Not After : Jul 25 10:00:44 2026 GMT
Subject: CN=2527174cd0266242a3bb4d8b96fd103247a749b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:10:66:0f:25:54:34:bd:dd:92:15:1a:69:
57:af:32:ca:3a:a1:24:db:f6:e3:ed:d0:a7:97:94:
5e:7c:66:79:d2:cf:98:42:8d:19:66:d3:db:5f:ba:
39:4e:0e:4a:8a:8f:88:54:73:0c:61:d7:42:55:a4:
e7:8e:9b:c9:dd:5b:0e:99:07:76:7f:d5:b3:de:44:
f9:0d:b5:8f:12:2f:43:3b:6c:4c:40:40:d4:da:54:
2b:4e:8e:95:7b:46:ca:54:8b:df:ad:7e:d0:46:cc:
e2:f5:be:54:94:e8:50:7a:bb:52:83:4e:69:c8:cd:
66:b0:0d:6c:7c:57:07:16:8e:95:4f:98:27:df:7f:
6b:f6:62:1a:44:47:d0:16:d0:3a:63:70:0e:f3:54:
bd:86:cc:e3:ec:3e:50:74:59:63:51:1a:ad:8c:50:
eb:54:59:aa:c0:11:f7:b4:e0:d3:32:f6:51:a7:3d:
3c:47:df:66:96:5c:74:69:59:6d:07:52:90:09:4f:
24:1e:6d:e7:67:c7:f9:b4:b7:5a:4b:40:8f:21:83:
30:ab:81:57:4f:f7:b7:2d:b9:df:f6:df:45:b9:0d:
0c:0b:b3:74:98:51:bc:4d:7a:74:01:dc:6d:03:ab:
ff:4e:5c:fc:b4:95:08:c6:97:62:08:01:fc:90:84:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:27:17:4C:D0:26:62:42:A3:BB:4D:8B:96:FD:10:32:47:A7:49:B0
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:45:96:6b:bd:ea:64:03:f4:05:b1:6a:16:3f:80:cf:f4:1e:
d4:54:17:86:33:2d:c9:49:29:97:b8:68:a0:45:f4:3e:11:34:
e6:46:75:04:74:25:0f:19:b2:1e:33:b7:58:fe:1b:12:24:58:
e7:cb:24:67:47:b3:14:af:8a:6d:8d:8e:e4:36:b5:8c:99:78:
c2:30:6f:4a:74:2e:aa:d7:ca:25:e3:45:8c:eb:c8:67:92:fe:
b2:59:d0:8a:76:6a:44:76:bb:03:8f:bb:af:38:08:fc:8c:82:
0c:fb:10:2e:3e:b9:41:5e:7c:6d:75:6a:a1:35:cc:b1:37:bc:
38:95:5b:8d:a0:96:1b:b2:30:94:37:dc:93:4e:5e:d5:c2:0c:
bf:99:ae:a4:a4:a2:9a:2d:33:b2:7b:43:56:f1:dc:0c:12:9a:
0d:a2:40:a1:06:d2:29:73:00:55:6c:99:8d:af:70:88:db:84:
97:6b:91:4a:d0:1f:8c:e5:03:b2:58:6c:73:32:f8:c8:a0:6e:
ef:0b:55:99:1c:94:39:b0:a1:87:23:fe:37:da:f5:dc:ea:dd:
75:10:03:63:83:9d:c4:fe:fd:5a:9f:a3:66:6f:cd:ca:63:63:
41:49:7a:2f:2e:a9:e9:da:7d:80:cc:8a:63:61:7c:e8:4d:66:
0c:3f:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:36 2026 by rpki-client