Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: 5C54BMp5IpdHNMCt/XvH1qwkoRvk+62+HHUQeU3c+7o=
Subject key identifier: F4:84:46:12:7C:F2:81:E9:D0:C1:92:11:9C:B3:8E:92:31:C4:FE:41
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 019F95B775E01B20EA8AD5B930CBEEF64A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 07E7
Signing time: Fri 24 Jul 2026 20:00:56 +0000
Manifest this update: Fri 24 Jul 2026 20:00:56 +0000
Manifest next update: Sat 25 Jul 2026 20:00:56 +0000
Files and hashes: 1: OMhZqYIdlbW6MwJAX5hoXZbZs2s.roa (hash: Fz6GaOA6LETuiDcthzdYWCgbQdrzncp3eZt1aOMvmKA=)
2: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: giHuvXDMrE/CMx34982B9PeF/DjWRLop5Mi0e5LMYLY=)
3: wOUhGVesCisY2HnfnAjl6Jnr-xg.roa (hash: M8DXDaBoO3oUhqazgEAtDmfaFAvLdpC11jKkFsNS9mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:75:e0:1b:20:ea:8a:d5:b9:30:cb:ee:f6:4a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Jul 24 20:00:56 2026 GMT
Not After : Jul 25 20:00:56 2026 GMT
Subject: CN=f48446127cf281e9d0c192119cb38e9231c4fe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:93:bd:8a:0c:27:2a:d7:af:0d:82:c9:f3:
52:7d:f2:bd:93:46:a1:33:1b:eb:a4:11:3a:76:a6:
91:7a:17:11:2c:93:0f:49:e6:ed:79:02:c9:04:eb:
b9:af:2e:da:49:d6:0d:4e:c6:f1:a3:af:45:22:1c:
67:d7:d9:58:d7:bd:31:0e:15:62:2c:ab:c0:f9:bf:
c4:49:87:46:81:14:a3:45:ee:10:44:17:d2:18:38:
b3:16:6f:2c:6f:86:a9:cf:40:3e:b4:22:60:c6:a1:
f7:10:24:6b:2a:e5:e1:e3:0b:90:68:c1:92:7b:10:
90:81:05:d4:53:66:c4:8a:39:c9:c0:4a:c1:88:5c:
ed:48:33:ef:5c:49:39:a0:cd:53:18:e9:d6:98:0b:
9c:3a:84:4c:cf:d9:33:61:01:c4:48:20:e1:91:c3:
7d:80:82:29:b9:f5:f4:52:07:1d:15:c0:4a:1d:5e:
5a:6e:30:9f:6e:b1:c8:63:04:02:a3:8b:27:b8:d9:
9c:0e:a7:fc:f2:78:bd:5c:ba:71:c9:62:11:2d:2a:
1f:5e:8a:f4:85:f1:7f:47:36:0b:54:b7:14:32:e2:
71:46:4e:8e:be:a8:23:94:83:0e:01:16:3a:7a:76:
e3:3c:77:0a:94:87:96:0f:d8:d2:a8:1e:da:51:1b:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:84:46:12:7C:F2:81:E9:D0:C1:92:11:9C:B3:8E:92:31:C4:FE:41
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:19:83:84:55:2e:68:56:72:1f:bd:86:b3:18:e5:5c:d3:4e:
e0:27:83:77:cf:5e:2b:83:72:f1:bd:b5:9b:c8:70:0c:d5:a3:
95:f7:20:a0:d7:96:61:87:34:ed:5e:24:18:34:db:ce:be:ed:
78:93:42:7f:92:ab:01:c9:91:54:49:ff:a0:e3:60:87:a5:24:
73:06:50:e6:7e:c3:9d:a7:33:af:f8:38:9e:b7:ee:9f:c0:e6:
22:1f:58:95:4b:83:57:a0:89:dd:67:79:8a:3f:ca:76:b7:cb:
88:d4:fe:c8:e4:25:dc:f3:3a:7b:37:a9:30:17:f8:fc:08:4a:
58:09:b8:e1:2d:1f:30:d1:db:57:32:1e:f3:b3:30:41:77:e2:
11:9e:17:11:7b:67:51:66:8d:b9:9f:78:f6:2f:35:01:9d:e3:
5e:47:48:27:a8:02:3e:41:53:7b:82:d5:9d:40:e1:79:99:5a:
c8:a3:38:1e:39:04:28:86:f5:db:98:26:27:44:46:4e:90:6c:
18:05:47:20:de:6d:6a:4c:20:c9:a3:42:79:91:a7:a2:00:e9:
74:cd:5b:c6:eb:fd:b1:51:f6:a4:03:28:d8:20:76:00:a6:66:
bd:43:b5:a7:2b:24:e0:fd:fe:72:a7:c6:57:f9:4c:cd:b3:22:
86:84:48:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:26 2026 by rpki-client