Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: iucgsGFQ7sInfTj3tEXWmEZFnYrdpMlTZninzKSO2Bs=
Subject key identifier: 3D:ED:76:7A:DC:6D:24:AA:5A:9A:D9:1B:89:61:24:7B:46:EF:26:98
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 019F957FF35AFB3EF03A4D5A26689F58DE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: 0514
Signing time: Fri 24 Jul 2026 19:00:18 +0000
Manifest this update: Fri 24 Jul 2026 19:00:18 +0000
Manifest next update: Sat 25 Jul 2026 19:00:18 +0000
Files and hashes: 1: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (hash: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg=)
2: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: jU9Ee9Zo4sNU3hwghmDiQjH7M6w+O7sZZmZ78HELYWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:7f:f3:5a:fb:3e:f0:3a:4d:5a:26:68:9f:58:de:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Jul 24 19:00:18 2026 GMT
Not After : Jul 25 19:00:18 2026 GMT
Subject: CN=3ded767adc6d24aa5a9ad91b8961247b46ef2698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:8f:ac:11:01:25:5c:4c:6c:65:42:23:df:
4c:97:38:66:2f:f7:6c:da:a3:79:c4:45:6a:93:22:
6e:0a:d4:6f:d3:c6:05:77:3b:a6:1b:74:18:84:18:
07:24:7c:37:42:b8:65:27:ec:a7:46:ac:15:0c:39:
85:88:4d:f9:f0:8c:94:d8:db:11:48:7a:f3:c7:c7:
3d:cf:b6:47:0d:18:70:6c:9a:ba:f8:5b:5e:87:f5:
84:46:22:3f:c5:7e:ef:c3:18:82:07:b9:ec:fb:c8:
0d:40:1d:cc:2c:4b:86:9d:e3:eb:8f:48:d6:bf:42:
c1:aa:67:d4:ea:af:26:74:95:42:b2:35:95:c8:c4:
20:ac:24:d6:c3:a1:f0:2f:d7:9f:e8:87:a8:2d:e9:
4d:39:0e:bb:f2:91:17:61:a3:3e:42:0f:fa:8d:b2:
a8:53:4f:57:2e:5f:23:31:97:3f:fc:a0:68:f8:da:
9b:c8:94:71:ac:64:1f:da:1b:b9:0f:ce:e3:61:50:
9e:11:da:a2:d2:50:e7:f3:3b:e8:67:08:1d:71:7b:
9b:90:d4:dc:c1:8e:29:3e:3a:05:83:98:bf:e3:1e:
84:af:82:b3:41:63:a6:37:37:d3:f6:7c:b3:3c:09:
f4:cd:c4:3b:ff:c8:04:ce:77:a6:3f:4c:ae:ec:7c:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:ED:76:7A:DC:6D:24:AA:5A:9A:D9:1B:89:61:24:7B:46:EF:26:98
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c9:04:62:3c:91:a0:e5:47:e2:e8:90:67:82:00:7a:75:9b:
dc:bb:9e:33:3f:a2:db:50:8d:65:9f:3d:a6:65:43:a4:dc:07:
5e:3c:db:74:22:88:cf:01:ac:59:08:93:6a:d3:e5:80:ad:49:
4b:84:36:3b:57:69:02:54:05:a7:98:54:e8:e3:db:4e:60:2f:
1c:39:8b:03:71:8f:92:34:c5:6d:c5:b8:bf:c0:a8:15:e4:bf:
3b:ac:51:ed:b2:b6:5d:0b:b6:79:4b:d1:05:ca:b6:14:65:3d:
03:9f:29:e8:d9:46:e4:2d:44:e5:11:d3:34:87:d8:a6:73:67:
55:31:0c:4f:35:02:a9:af:b1:3c:30:9f:7c:89:90:cd:96:d9:
ce:6f:b5:8e:22:c7:78:e2:fa:1a:28:1e:81:78:60:84:06:97:
db:27:e0:70:9c:2d:40:25:6f:89:dc:66:4b:1a:ae:4b:0f:2e:
06:23:a4:8b:23:67:41:22:66:8f:58:44:32:0d:0d:ae:3c:72:
00:44:49:ec:76:3a:ef:17:d0:f1:f8:89:a5:b8:6d:45:7d:2f:
fe:30:20:14:09:bb:a7:b8:cd:5f:53:ce:a7:3d:1d:57:ee:7c:
b1:3a:a0:5c:ec:a0:16:bf:fc:8f:08:39:b4:e2:e6:d1:c0:bf:
db:90:0b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:46:52 2026 by rpki-client