Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
File: hzcmsXsBvwtUQm0YEPI9xPWPans.mft (raw, json)
Hash identifier: +O2Yr3TvLSAy33McC4B0zNcVsyqhtz/AduN3iRfYZWY=
Subject key identifier: A7:DA:75:E6:DA:D4:2D:3F:1F:C3:D4:EC:C2:CA:8A:28:5B:02:F4:76
Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Certificate serial: 019F9211118E447BC579A0F07DC7622D5176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
Manifest number: 084E
Signing time: Fri 24 Jul 2026 03:00:19 +0000
Manifest this update: Fri 24 Jul 2026 03:00:19 +0000
Manifest next update: Sat 25 Jul 2026 03:00:19 +0000
Files and hashes: 1: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (hash: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8=)
2: RJDT3UOUnvRDdUrUt0bNzYpN6GY.roa (hash: Q11lItRU7b2xFDCN9amHeShSUMnSL5ED5A7C2wNVlbE=)
3: hzcmsXsBvwtUQm0YEPI9xPWPans.crl (hash: CN4JdjqiPDwPfYdQ43h9bKEJJ4aiqmGgnGq33fFYKLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:11:8e:44:7b:c5:79:a0:f0:7d:c7:62:2d:51:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b
Validity
Not Before: Jul 24 03:00:19 2026 GMT
Not After : Jul 25 03:00:19 2026 GMT
Subject: CN=a7da75e6dad42d3f1fc3d4ecc2ca8a285b02f476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:d3:f0:14:5b:b7:f0:0a:19:60:69:53:bc:
80:10:f9:51:0b:74:2d:db:68:29:70:d0:99:8c:98:
15:80:b5:46:6f:93:de:68:e6:e8:80:be:cb:9a:9a:
2f:39:6b:d6:8d:98:ae:aa:89:a0:4d:fe:69:dd:f7:
ed:35:0e:72:f6:05:8e:9c:ee:7d:86:e7:ab:51:1a:
6b:00:99:42:81:c0:66:58:60:34:ec:8d:f8:f3:6f:
07:53:1a:a9:98:99:0f:ac:62:d5:dc:ec:92:eb:05:
15:e3:d6:4c:d4:eb:be:42:8c:f3:65:5c:fb:f1:79:
1b:66:49:11:e9:a2:d9:45:28:97:9c:35:e9:a3:d7:
6b:bc:8e:7d:9a:90:5e:81:dc:b2:b5:e1:81:41:76:
51:cb:8e:fd:75:76:b0:dc:85:34:8a:07:ae:ef:93:
97:5a:05:a4:38:b5:6a:2f:20:81:21:93:b9:83:2c:
f4:02:bd:31:77:76:29:0e:f9:8c:96:0a:2f:dc:c3:
e8:d9:51:bc:17:8e:ce:a2:de:d9:81:23:16:65:7e:
24:0e:18:be:db:7f:8a:0e:c8:be:a3:fd:00:f7:c0:
22:3d:69:e0:10:53:f2:78:45:41:b7:b8:6e:51:b1:
95:66:36:36:33:11:db:5e:f1:f3:c8:99:12:bb:24:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DA:75:E6:DA:D4:2D:3F:1F:C3:D4:EC:C2:CA:8A:28:5B:02:F4:76
X509v3 Authority Key Identifier:
keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b3:82:86:7f:83:0a:d9:08:aa:46:c4:09:4e:e3:04:aa:34:
8e:4d:00:cf:e4:49:29:ae:c2:b8:89:f7:85:54:49:27:83:62:
52:b2:c3:de:11:e4:71:45:07:0d:c7:63:e2:5a:7c:93:90:72:
55:04:d3:52:5f:51:ae:ae:8a:a2:86:57:7c:1e:c4:8f:72:47:
95:99:9c:42:d4:a9:87:24:83:c8:95:d9:09:6c:e3:77:df:fa:
c9:3d:53:6f:5c:82:5c:4b:5d:87:ff:cb:f8:ea:4f:28:55:50:
1b:62:ac:bc:6c:04:ed:8f:0a:f7:4d:78:f9:b0:fb:fa:0b:6e:
03:b6:0c:9a:85:9f:ba:93:1f:de:da:37:ef:fb:8e:48:0f:a5:
66:46:6f:b5:6d:ba:8d:ca:71:cd:85:19:51:74:eb:e7:1d:9a:
c0:3d:ac:c1:19:e8:d6:b2:74:2e:ae:00:30:46:2b:77:2f:be:
31:2a:f6:3d:7d:ed:4d:76:79:f3:cf:6b:80:9b:25:1a:cf:f8:
49:8f:6c:27:d6:61:ef:49:f0:65:ad:9e:f4:f4:7b:de:35:60:
46:2f:34:fa:78:d1:4c:d1:cb:89:78:4e:ec:66:fb:d1:d5:c4:
aa:60:fd:24:17:18:e8:99:cf:f6:15:1b:09:0c:74:f7:b5:1f:
15:b5:f8:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SERGORHvFeaDwfcdiLVF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MzcyNmIxN2IwMWJmMGI1NDQyNmQxODEwZjIzZGM0ZjU4
ZjZhN2IwHhcNMjYwNzI0MDMwMDE5WhcNMjYwNzI1MDMwMDE5WjAzMTEwLwYDVQQD
EyhhN2RhNzVlNmRhZDQyZDNmMWZjM2Q0ZWNjMmNhOGEyODViMDJmNDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQnT8BRbt/AKGWBpU7yAEPlRC3Qt
22gpcNCZjJgVgLVGb5PeaObogL7LmpovOWvWjZiuqomgTf5p3fftNQ5y9gWOnO59
huerURprAJlCgcBmWGA07I34828HUxqpmJkPrGLV3OyS6wUV49ZM1Ou+QozzZVz7
8XkbZkkR6aLZRSiXnDXpo9drvI59mpBegdyyteGBQXZRy479dXaw3IU0igeu75OX
WgWkOLVqLyCBIZO5gyz0Ar0xd3YpDvmMlgov3MPo2VG8F47Oot7ZgSMWZX4kDhi+
23+KDsi+o/0A98AiPWngEFPyeEVBt7huUbGVZjY2MxHbXvHzyJkSuyTg8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfadeba1C0/H8PU7MLKiihbAvR2MB8GA1UdIwQY
MBaAFIc3JrF7Ab8LVEJtGBDyPcT1j2p7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQt
MmFlMzUxNzU3MTNjLzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQtMmFlMzUxNzU3MTNj
LzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbOChn+D
CtkIqkbECU7jBKo0jk0Az+RJKa7CuIn3hVRJJ4NiUrLD3hHkcUUHDcdj4lp8k5By
VQTTUl9Rrq6KooZXfB7Ej3JHlZmcQtSphySDyJXZCWzjd9/6yT1Tb1yCXEtdh//L
+OpPKFVQG2KsvGwE7Y8K9014+bD7+gtuA7YMmoWfupMf3to37/uOSA+lZkZvtW26
jcpxzYUZUXTr5x2awD2swRno1rJ0Lq4AMEYrdy++MSr2PX3tTXZ5889rgJslGs/4
SY9sJ9Zh70nwZa2e9PR73jVgRi80+njRTNHLiXhO7Gb70dXEqmD9JBcY6JnP9hUb
CQx097UfFbX4Ww==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:04 2026 by rpki-client