Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: tqklkguoIoFMPk9D285UMQyHA1UHClVNkSN78EK3kSo=
Subject key identifier: B1:98:48:04:92:77:F2:ED:54:30:E3:CC:38:4E:52:6D:5A:68:C3:BC
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019F927F0C2994A02585F962B51BBE615178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 167D
Signing time: Fri 24 Jul 2026 05:00:27 +0000
Manifest this update: Fri 24 Jul 2026 05:00:27 +0000
Manifest next update: Sat 25 Jul 2026 05:00:27 +0000
Files and hashes: 1: AskFBvRE4tY5tlit_Gy114m2J0A.roa (hash: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: wIdpj8ZLE57icXkLm0pGdYyGWswPxNmxtzcdYc8RqOk=)
3: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (hash: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:0c:29:94:a0:25:85:f9:62:b5:1b:be:61:51:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jul 24 05:00:27 2026 GMT
Not After : Jul 25 05:00:27 2026 GMT
Subject: CN=b19848049277f2ed5430e3cc384e526d5a68c3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:be:88:e3:d2:33:34:cd:b6:df:e8:cc:bd:
9f:7c:cf:50:38:cb:db:8b:b7:5f:b7:85:93:24:02:
a2:b5:44:14:4b:39:92:31:23:45:01:2b:63:d4:ab:
4a:9f:9b:f8:1f:d4:a0:6e:35:06:5f:e9:e3:8c:24:
01:88:4b:c9:a0:33:0d:dc:d3:5a:5d:8f:a6:ee:ac:
d6:8a:2a:86:ec:27:8a:89:dc:e1:93:cc:e4:ba:64:
49:92:64:83:87:97:48:b6:8d:0f:c1:7d:12:03:73:
ac:5f:9e:a9:09:9a:ba:af:4f:7e:cb:d4:3a:c4:c4:
f6:17:e0:2d:f5:49:7d:34:33:66:bd:99:37:dc:20:
79:65:db:17:02:d2:b4:62:41:62:75:71:89:26:81:
df:8a:7f:69:81:6f:a6:72:6a:44:5a:ce:2c:2b:59:
59:e9:e4:6b:07:3c:76:63:38:60:06:ba:6e:01:be:
f7:7a:58:7f:5b:c8:c9:15:e5:0a:45:3b:e6:23:d1:
7d:55:34:c0:53:6f:ac:dc:01:26:de:2e:7b:54:57:
68:3c:5b:4f:37:64:03:c3:03:16:45:5d:2b:ed:ad:
13:09:69:dd:1c:a3:3e:c6:e6:91:8a:55:73:49:09:
7f:d9:9e:4c:a9:a7:d9:e2:65:4d:6a:db:e7:ca:07:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:98:48:04:92:77:F2:ED:54:30:E3:CC:38:4E:52:6D:5A:68:C3:BC
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b1:2a:66:5d:bb:74:d3:91:f3:c7:bb:10:04:21:48:f4:d7:
60:f4:a9:95:b7:92:7e:5c:fe:8f:9d:5b:6f:f0:3c:d4:ff:e9:
c5:a1:9f:4e:c2:43:a6:ad:b3:d6:ea:5a:a9:4a:e7:a6:44:9f:
b0:d3:95:75:66:54:af:ca:1b:91:f2:31:7d:89:2e:5d:d0:c4:
11:9a:43:67:34:5f:62:c6:d4:4a:de:ed:c9:96:30:de:4b:12:
27:3a:7c:3f:6b:70:a4:47:b8:15:d2:7b:63:50:ea:a0:55:70:
cf:da:87:6d:39:97:25:c3:79:e9:0c:0a:97:5b:32:6d:17:a1:
b1:f7:f0:fa:49:93:b8:4e:29:ca:2f:87:18:50:5f:e5:29:5f:
8e:6d:b0:5b:73:c0:f6:a6:16:57:95:14:70:aa:dd:0f:3c:1d:
c6:e9:44:4b:22:5e:28:5f:fc:a5:da:e9:95:40:a8:b7:ab:a0:
00:4e:e6:6b:5f:c4:89:2b:c9:8c:41:a1:ce:c4:b2:d3:07:6c:
43:32:cf:c4:53:e1:14:39:22:5b:31:ef:9c:d4:0b:92:c2:ec:
25:44:f2:62:ef:4f:90:1f:11:59:72:04:4a:86:ec:5c:bc:f8:
11:b8:70:c7:56:2b:c4:0c:91:73:fe:1d:97:73:09:47:27:b6:
c2:e9:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:53 2026 by rpki-client