Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: KBaSkDHk9+L2gRH+Exl7SKY/aBQ2LF5EEVm+6ia4Nzo=
Subject key identifier: 96:F4:EB:28:56:90:58:D9:19:E9:0A:A1:AD:CB:10:33:8C:CD:12:61
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 019F9391B63E8D5DAF7FBBA05C9357D7EB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 0514
Signing time: Fri 24 Jul 2026 10:00:27 +0000
Manifest this update: Fri 24 Jul 2026 10:00:27 +0000
Manifest next update: Sat 25 Jul 2026 10:00:27 +0000
Files and hashes: 1: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: Uxt2Nw/pIKyQRmR1uRr/cE/9CBufokXWcSLmACl/2CU=)
2: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (hash: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4=)
3: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (hash: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:b6:3e:8d:5d:af:7f:bb:a0:5c:93:57:d7:eb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Jul 24 10:00:27 2026 GMT
Not After : Jul 25 10:00:27 2026 GMT
Subject: CN=96f4eb28569058d919e90aa1adcb10338ccd1261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:94:82:c2:67:a1:52:a8:5f:c8:49:c1:01:
fb:9f:78:ab:f7:c7:81:b0:d4:c5:27:89:7a:5b:fe:
aa:02:41:10:09:45:2a:fe:db:38:d0:be:8e:14:26:
89:53:d0:bc:f8:32:88:ae:fb:d4:b7:17:31:b4:77:
ba:29:77:81:e1:14:60:83:65:fd:ff:c6:bb:42:92:
e4:73:5c:c8:ad:ee:c2:93:92:95:8e:1d:db:62:4f:
92:d6:cc:f5:f1:ee:45:93:32:df:2f:29:50:fd:d8:
07:b0:fa:90:cb:73:26:33:f3:22:9a:56:c0:80:49:
d6:82:24:ab:b1:97:10:c7:15:16:91:30:65:98:f7:
24:5d:b3:33:e4:bc:d2:26:64:35:9a:6a:70:24:85:
47:09:18:79:59:21:d5:ba:ec:82:3b:38:a8:f2:a4:
8d:92:79:a4:5c:10:e4:1b:fd:e9:82:d8:49:e6:e1:
b0:0d:58:3f:17:d9:91:eb:c5:ca:f6:f1:d7:fd:2f:
fb:1e:2a:62:4b:27:c6:3d:ec:6e:02:8d:8d:29:5b:
92:55:c1:66:98:b7:38:7a:d9:bf:fc:32:07:b5:31:
58:d9:89:df:54:79:00:38:fa:f3:2e:83:3e:e5:1e:
ad:01:65:72:86:da:bb:9e:a6:a6:b3:6b:ba:99:2a:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F4:EB:28:56:90:58:D9:19:E9:0A:A1:AD:CB:10:33:8C:CD:12:61
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:97:54:6c:7b:7d:e7:cf:e4:f9:87:26:1c:43:c8:82:0c:72:
e3:02:dd:9c:39:ba:55:d4:08:7c:78:15:dc:71:43:ba:8d:01:
5e:85:61:d4:6d:6a:c5:63:16:08:8f:bb:30:8d:5f:e8:c0:b2:
6b:6b:3a:91:30:5a:e3:f0:7c:35:90:81:9d:12:22:6f:67:ce:
bf:3b:7e:52:09:c4:73:63:4c:fb:88:f3:f3:f0:03:71:9b:a1:
28:26:a0:cc:9f:f2:df:4e:bf:3c:4e:d5:38:12:7b:91:23:44:
c8:a0:65:b9:4b:93:7f:de:5a:b4:1b:ea:c2:c4:fb:e9:17:23:
4e:20:3a:3f:cd:82:8b:56:43:3e:ce:65:d7:1f:c4:6e:dd:0b:
d5:c4:15:e3:aa:35:37:8f:87:fc:d9:86:0d:b9:3d:08:d0:c9:
39:95:82:7f:cb:bb:62:52:17:1f:69:47:10:57:75:2a:24:8d:
2d:2e:78:42:03:9a:62:85:98:7c:d7:d8:d1:2b:82:4a:2a:4f:
65:39:f5:cd:98:81:44:17:e8:09:a3:93:03:d3:b9:b2:70:4d:
46:68:09:7f:08:76:90:11:c6:df:8d:1d:7e:16:29:02:db:06:
3c:d9:89:ed:33:0b:16:e0:48:43:5c:b7:88:45:d1:c8:21:45:
9a:7d:1d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:32:34 2026 by rpki-client