Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
File: hgyewNGzTkvXpk-QAgWTV0CbM8o.mft (raw, json)
Hash identifier: AMFRM3ZitCMBiGlIrB1pTDy/USeVUc03CnrAt3uT1vM=
Subject key identifier: 7E:A4:10:FF:99:53:50:44:4E:F2:C1:FA:F2:D7:6C:E1:96:FF:7E:A1
Authority key identifier: 86:0C:9E:C0:D1:B3:4E:4B:D7:A6:4F:90:02:05:93:57:40:9B:33:CA
Certificate issuer: /CN=860c9ec0d1b34e4bd7a64f9002059357409b33ca
Certificate serial: 019F9549B7F7A486FCE83CB20F8503C54F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:04 +0000
Manifest this update: Fri 24 Jul 2026 18:01:04 +0000
Manifest next update: Sat 25 Jul 2026 18:01:04 +0000
Files and hashes: 1: 3H6PgooRGLT_mSPUyDMorwjEhUs.roa (hash: U5HujpHe+LmaURpE34QxCKE6KhEyc2Pqe68mUX3PjZQ=)
2: hgyewNGzTkvXpk-QAgWTV0CbM8o.crl (hash: paeOPjmi9tsKMBpmKPQwGWinxNYykFaOAsQXbr5Gsjg=)
3: wyvBjZ-0ftuE8HVEKWNED0ouTx4.roa (hash: cpWy42Uj2If/l45ij0xFVto/b1Q0O7mBcXLVxEEvfaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:b7:f7:a4:86:fc:e8:3c:b2:0f:85:03:c5:4f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860c9ec0d1b34e4bd7a64f9002059357409b33ca
Validity
Not Before: Jul 24 18:01:04 2026 GMT
Not After : Jul 25 18:01:04 2026 GMT
Subject: CN=7ea410ff995350444ef2c1faf2d76ce196ff7ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:33:fa:5c:4f:97:ed:cf:1f:93:da:8a:e4:
1b:be:f4:5e:1c:a2:64:72:f4:c5:bb:4a:f9:2d:a6:
b2:81:b5:5a:77:cc:d2:d1:00:96:9a:41:4f:19:06:
1c:21:81:14:83:07:fa:47:13:ed:a8:ed:d1:22:7e:
d5:35:82:47:d3:b2:94:8a:07:8f:d7:6b:69:26:f7:
ff:2e:99:4f:fc:9d:c4:ba:fb:8f:df:2d:40:ea:05:
8b:60:e3:3f:07:e1:9a:00:3f:56:a3:dd:7e:33:8c:
1b:72:e3:c4:fa:cf:73:9b:dc:01:9f:bd:91:34:ae:
4a:ed:86:37:f1:71:44:cc:37:2f:6d:e3:2c:41:06:
6a:0b:45:d1:c1:99:a2:68:46:43:80:5b:2e:11:3e:
ab:89:3a:7b:d3:fb:9c:7d:2a:ca:88:22:b6:c0:fe:
d7:99:f1:22:6a:22:2f:12:36:e0:d7:39:37:6c:64:
d5:ca:ee:0b:2f:72:9c:d7:db:10:40:f3:dc:cd:2a:
86:f7:a2:96:a5:ae:42:6b:4d:b8:da:92:a4:f7:0a:
4c:d4:37:2d:d8:ab:cb:66:d5:1d:9c:a1:e1:84:70:
cb:49:9f:1f:8b:a5:2c:ee:42:42:dd:ac:61:47:8a:
4a:a2:a9:84:a4:e5:b0:58:1c:9e:e6:59:86:af:74:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:10:FF:99:53:50:44:4E:F2:C1:FA:F2:D7:6C:E1:96:FF:7E:A1
X509v3 Authority Key Identifier:
keyid:86:0C:9E:C0:D1:B3:4E:4B:D7:A6:4F:90:02:05:93:57:40:9B:33:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgyewNGzTkvXpk-QAgWTV0CbM8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/hgyewNGzTkvXpk-QAgWTV0CbM8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:28:77:8d:b1:6a:78:60:25:0e:f4:96:b7:64:fc:c3:c8:8c:
51:18:61:d9:d8:b9:0c:37:21:54:a6:22:0d:85:bd:fb:f6:b8:
a9:0e:39:11:58:4e:5f:07:29:92:6b:dc:09:cf:40:de:2e:4d:
55:63:78:42:0a:c6:b1:7a:e0:2a:7b:71:8d:b6:1c:3f:89:fe:
6f:19:75:43:ec:1b:7c:76:95:a0:55:da:36:0d:bf:6c:8b:13:
89:c9:df:bb:fe:7c:da:ef:cf:73:c8:8b:21:60:fb:5b:eb:6e:
b0:e1:0c:bb:be:d8:03:53:ff:b2:56:b0:fc:f0:12:9f:2f:62:
17:00:d8:f4:c9:0c:c3:bf:61:86:97:63:d1:47:4a:b8:1a:43:
38:6f:87:ea:5a:1b:16:2e:b9:b0:c6:a3:4a:35:b4:36:57:cc:
8b:27:6f:91:2a:84:b1:0c:ae:4f:02:7e:b9:5a:47:25:18:b6:
f3:71:46:13:58:69:69:25:02:a1:09:cd:99:45:79:2f:78:ce:
42:ea:0c:f0:44:6f:f0:03:09:30:98:94:30:8b:34:20:e5:00:
f9:61:c4:d6:b6:17:51:d7:67:cc:01:9b:d2:07:2a:95:1d:5a:
79:18:09:65:7e:99:1d:6a:f7:2f:41:19:8b:50:b0:f2:b8:34:
41:2a:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:06:37 2026 by rpki-client