Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: TtnqpMOWfKDwVSryfy0CFTHPQAOzCrgbXDSaTnjvYJ4=
Subject key identifier: 8F:01:B1:71:E7:BE:6E:02:DA:A1:F3:FC:CF:ED:B2:62:30:6D:8D:DA
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 019F905A6F536A6A96363121543FD34B89C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 1328
Signing time: Thu 23 Jul 2026 19:01:13 +0000
Manifest this update: Thu 23 Jul 2026 19:01:13 +0000
Manifest next update: Fri 24 Jul 2026 19:01:13 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: vMicQwoooDUiEE8nt734XJsKMEQBsjpe6BbNawXBbVg=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:6f:53:6a:6a:96:36:31:21:54:3f:d3:4b:89:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Jul 23 19:01:13 2026 GMT
Not After : Jul 24 19:01:13 2026 GMT
Subject: CN=8f01b171e7be6e02daa1f3fccfedb262306d8dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:4b:86:d2:36:4b:3f:a6:95:c6:fe:a2:23:
52:4f:29:44:86:97:1f:02:23:37:ac:34:f0:a8:e3:
b8:b6:e2:f1:83:95:7e:56:87:1a:00:d1:f2:e2:db:
88:78:01:07:bf:f5:6e:28:98:b0:7b:de:71:94:01:
27:dd:d0:4e:85:f2:7a:75:fc:fe:8d:b5:dc:02:07:
8a:19:34:a9:c1:03:02:56:7e:68:8d:ea:36:ec:cb:
1d:8a:39:80:e5:e5:6a:af:77:4e:76:ff:84:ba:e5:
b2:19:d0:13:69:c8:89:0e:01:e3:3f:72:26:a7:d6:
88:3d:39:52:61:c0:6c:64:f3:c9:22:37:cc:07:3b:
ae:68:ef:61:9c:4e:9f:08:39:7f:b0:82:06:a1:84:
95:e8:22:92:37:6a:84:db:39:c5:f4:cb:47:f8:34:
ff:c0:10:9e:38:dd:ed:53:9b:d7:d9:2c:35:85:0a:
4b:17:0d:c1:02:1d:f1:11:d5:df:cf:5b:11:7e:5c:
d0:b9:dc:c2:19:be:34:2a:eb:3e:70:ef:bc:40:de:
c1:07:66:99:14:1e:03:44:7d:34:05:ba:6e:ca:56:
11:4a:3c:c9:d7:15:6a:8f:6f:87:07:f7:29:01:a1:
88:e8:d2:df:6e:b3:94:a3:94:e1:dc:5a:58:0f:05:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:B1:71:E7:BE:6E:02:DA:A1:F3:FC:CF:ED:B2:62:30:6D:8D:DA
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b8:00:f7:b0:a9:8e:61:21:78:8c:eb:cf:f6:93:e5:5a:9b:
47:93:3c:b3:21:80:53:7e:ee:2b:d7:b0:92:3f:a6:31:9b:71:
46:8c:e8:c5:f1:03:b8:68:7f:39:cd:95:e6:15:94:69:8c:be:
d0:8f:fd:14:b3:cc:73:c9:4a:fe:8c:e5:57:ef:45:9a:00:85:
5b:cb:25:52:cf:42:26:97:17:a9:58:8e:51:74:24:ff:03:cb:
d9:3b:b1:c1:be:76:40:b9:b0:ba:bb:21:c9:4b:8b:6b:e7:d0:
76:1c:15:9b:93:ba:19:ab:9c:26:6d:ec:9d:5b:1e:ac:1f:41:
06:65:7d:1a:64:e2:c2:2d:d5:5d:b9:a9:ff:b8:5d:05:74:ac:
9e:e2:e6:37:7f:6a:e5:bb:2e:4a:84:de:5b:87:22:28:4c:33:
8b:1f:d1:e9:c8:da:d2:eb:3d:a7:15:e9:f3:c9:ce:9b:47:3e:
cf:73:c3:fe:77:50:aa:cc:ba:d6:0d:d4:44:40:ed:61:23:37:
08:6f:4a:ec:25:8f:e9:54:16:31:36:a1:bb:32:5b:61:16:6a:
81:9f:9c:58:9b:74:74:d5:54:ff:8a:e7:1e:a6:d8:45:d8:9d:
c0:e2:bf:90:35:db:f4:32:97:52:95:cc:dd:78:b3:d3:0f:9b:
b7:02:8b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:14 2026 by rpki-client