Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
File: heSsHuWPsBZEjd0bp6W6mkizPsw.mft (raw, json)
Hash identifier: j/x/pVUvfsw2NK6Dt/+1KAsp3qOydQMyu5jU5Qzer0Y=
Subject key identifier: 01:16:A1:ED:D4:18:C1:91:54:CE:B2:85:7B:D9:3E:C2:4C:CB:B3:64
Authority key identifier: 85:E4:AC:1E:E5:8F:B0:16:44:8D:DD:1B:A7:A5:BA:9A:48:B3:3E:CC
Certificate issuer: /CN=85e4ac1ee58fb016448ddd1ba7a5ba9a48b33ecc
Certificate serial: 019F8F7E68433BC4DF5AF17183D5A1685921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:53 +0000
Manifest this update: Thu 23 Jul 2026 15:00:53 +0000
Manifest next update: Fri 24 Jul 2026 15:00:53 +0000
Files and hashes: 1: 4s1KFc_pThYjGBdUJLs2Nl1upLE.roa (hash: 4dYHQlFuSRkjK7GHEQ+aA58N3FDz6pXVboUirj4ugs0=)
2: WprdfNGgmVJxl7pKSMorRSpkqxg.asa (hash: 47wTCptNF3CDuUj1JZbNAy/veEaKtcD7HJ1oodwJlcg=)
3: heSsHuWPsBZEjd0bp6W6mkizPsw.crl (hash: 1rZzx0uJ5oafe2cdzrpNlQRxPcmeoYgiisq9CxSGmbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:68:43:3b:c4:df:5a:f1:71:83:d5:a1:68:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85e4ac1ee58fb016448ddd1ba7a5ba9a48b33ecc
Validity
Not Before: Jul 23 15:00:53 2026 GMT
Not After : Jul 24 15:00:53 2026 GMT
Subject: CN=0116a1edd418c19154ceb2857bd93ec24ccbb364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:6d:4e:aa:53:75:fc:90:9f:aa:22:13:18:
7d:32:42:b2:1a:59:99:84:9c:e3:f6:ea:d2:ba:68:
0c:97:e4:c0:3c:d3:e7:8d:a7:fb:0d:5a:8c:27:e6:
62:61:44:74:c1:72:4c:d6:e0:8f:86:31:07:ae:c4:
1b:58:4c:ee:41:8c:39:31:17:7d:3f:77:76:22:ab:
20:9a:ce:99:c0:93:51:8b:80:91:35:6f:34:78:83:
f3:bb:41:9b:70:23:64:50:e2:83:5a:be:05:9f:64:
94:94:27:27:36:bd:4d:fc:0e:cc:9f:81:11:ee:85:
c7:9b:f7:cc:58:f2:fc:ee:1d:f8:0f:5a:08:9e:83:
e6:cf:7f:55:3d:f8:a6:80:78:4a:8d:76:49:7b:01:
24:d3:39:e0:26:d9:97:b7:ae:0f:47:ae:36:1f:a5:
7d:a1:54:9b:e6:be:77:6d:96:d2:ee:32:32:a5:73:
25:09:08:0a:e6:74:70:9f:46:27:27:81:e2:0d:6c:
6a:9f:c8:c6:0c:c9:2f:04:c4:de:e5:a1:0c:3d:55:
4c:5b:22:cf:c8:ff:c9:ca:38:91:46:59:8c:0c:91:
cd:f8:d6:c9:f4:43:86:93:1c:e7:b9:de:34:55:ef:
92:5d:4d:c2:48:06:60:42:87:17:85:7e:4d:c4:bb:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:16:A1:ED:D4:18:C1:91:54:CE:B2:85:7B:D9:3E:C2:4C:CB:B3:64
X509v3 Authority Key Identifier:
keyid:85:E4:AC:1E:E5:8F:B0:16:44:8D:DD:1B:A7:A5:BA:9A:48:B3:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/heSsHuWPsBZEjd0bp6W6mkizPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/831f53-90d1-4208-a6d5-c5fe44420c09/1/heSsHuWPsBZEjd0bp6W6mkizPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3b:5b:36:b7:66:67:b2:1a:66:ad:8e:1c:31:c6:da:5b:24:
3b:36:29:d4:37:9b:fc:a0:d4:13:f5:80:17:8f:9e:4f:55:6a:
93:03:cd:7d:ff:6c:91:b2:8d:8a:bc:01:f8:1f:df:06:03:7b:
c6:ca:71:a5:5b:aa:36:f8:42:7d:9b:6e:61:47:2d:e3:d0:69:
6e:06:b8:4a:1b:d7:41:b1:73:5f:56:c4:fc:5e:88:54:b4:73:
cf:60:e4:d0:69:16:6e:c2:fa:d5:2a:81:4e:06:55:9c:cd:e1:
d4:9d:a8:1c:34:ab:c6:42:f5:4e:12:b4:7a:6e:ec:99:7e:1c:
1d:87:28:33:f3:e7:9c:9e:2b:15:ac:28:95:d5:d8:87:6b:eb:
23:fe:c8:8a:6a:a8:0e:32:97:23:68:46:36:c4:07:84:c0:58:
6e:54:88:d0:e4:78:a5:5a:44:84:32:1d:78:d1:42:72:a5:83:
74:bb:56:fe:65:bf:73:4e:d0:cd:e7:9f:74:67:b7:94:a9:8f:
2e:b0:89:38:7c:a3:c2:9b:94:7a:5e:f8:28:99:d1:be:65:47:
f8:53:cc:c5:68:8d:c9:fc:ae:9a:3f:70:13:e6:17:83:38:49:
7a:6a:fd:d5:50:81:04:df:6b:f6:0e:1b:b5:d7:ea:38:57:f3:
d2:68:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:51 2026 by rpki-client