Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: bVHMdm+76XeWgMHuaNxrYcnpHOb/04kTlgg4LHLKFHk=
Subject key identifier: 17:A3:7D:32:FF:67:92:88:19:80:37:24:73:E0:BB:9C:6B:53:04:4F
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 019F94DBAD0723137C4168F10EBF23EAB3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 096C
Signing time: Fri 24 Jul 2026 16:00:52 +0000
Manifest this update: Fri 24 Jul 2026 16:00:52 +0000
Manifest next update: Sat 25 Jul 2026 16:00:52 +0000
Files and hashes: 1: TVMwQ3POqUvlVpd6DIhGjA31OEo.roa (hash: Whcd9L1nk9Dj6hFZTyskGlKlxUc8A3COyWU8lK84zTI=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: yVfUF9YmGW6VSdEd21ZSeJ560PuUHn/W8eel51j0k0I=)
3: rKoSjHhvJImZNOF1L4tvqu9KSjU.roa (hash: ED11ejyoT5xPcyYKinY7Cd+nJxVa+vcQf9GFo/cbaCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:ad:07:23:13:7c:41:68:f1:0e:bf:23:ea:b3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Jul 24 16:00:52 2026 GMT
Not After : Jul 25 16:00:52 2026 GMT
Subject: CN=17a37d32ff6792881980372473e0bb9c6b53044f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:39:5b:38:79:4f:3e:28:ad:3c:d0:19:6b:
4d:aa:3a:b3:e6:4a:78:4e:09:fd:cf:95:c6:ce:46:
a5:4d:fd:40:13:67:b4:02:3b:5c:cc:44:56:90:96:
ce:67:61:53:95:72:61:49:06:a6:a9:63:3a:a2:88:
45:31:bd:3a:48:9f:0f:95:5b:81:29:5e:fb:62:02:
6d:f1:c3:44:fa:47:af:69:5e:1e:f5:8f:e7:33:ea:
58:3c:24:40:a7:88:0f:4e:b5:5e:87:7a:10:a7:b2:
28:b4:d5:2e:15:2b:d6:b8:39:f1:6a:ab:43:17:e4:
ce:db:33:d5:e6:d0:0e:ff:21:e7:1d:2b:93:a9:27:
c7:a8:75:04:e8:ab:a2:07:2b:8d:7c:b8:ea:7b:53:
f1:76:d4:06:19:6e:34:24:43:bb:d6:db:f6:ea:c7:
aa:ad:81:a5:a3:d6:2e:c1:10:0b:47:6e:34:26:1a:
49:bc:5c:31:10:9c:b3:7c:8e:bf:91:1f:71:38:03:
31:de:19:03:70:2e:4e:9c:48:47:09:a5:4e:60:3a:
5e:0b:ae:f5:38:69:a8:c3:d0:ff:3d:6e:f9:db:e2:
9b:59:2d:0a:99:09:49:64:7e:55:5d:fc:b8:44:1e:
0a:98:02:c9:27:92:03:d6:1f:63:0d:8e:f3:4b:87:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A3:7D:32:FF:67:92:88:19:80:37:24:73:E0:BB:9C:6B:53:04:4F
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:23:79:3d:41:b6:bf:7c:a7:1b:e9:b4:12:d5:6f:97:22:76:
30:f0:b4:a4:04:76:76:9a:4b:84:a5:13:78:31:8a:37:00:6a:
40:77:63:fb:cb:4e:70:1b:11:dd:92:e8:90:a1:18:7f:b7:69:
80:25:69:8b:0e:1f:9f:55:c9:e0:e0:62:3b:cf:c5:a0:1c:13:
96:0e:84:8c:61:9a:0d:c8:7b:45:2d:35:14:3b:3b:26:0c:cf:
c1:2d:03:bf:e7:19:2e:37:72:1d:73:1d:c5:e0:0a:8d:78:0b:
64:f4:21:43:ee:53:a0:ac:02:18:b1:c4:c8:76:b3:59:9f:02:
4d:d8:eb:4f:b6:34:79:77:ef:27:91:5d:78:a2:43:35:51:22:
98:4e:e2:6f:e9:53:b8:28:e9:51:02:92:89:1b:d3:fc:5f:66:
a8:9c:f1:f1:88:b2:aa:60:f5:57:2e:7d:25:b3:a3:39:e0:88:
3e:05:9c:a6:3d:77:bb:b6:98:0c:a2:e1:3e:30:fe:7e:f4:c6:
57:7d:2c:bb:3a:c5:f4:a6:92:82:e6:91:c9:4a:cf:2a:a0:a5:
19:fa:6d:0f:8c:c0:24:01:ab:82:3b:43:1a:ef:d3:52:5f:3f:
e3:49:b0:ac:3e:56:a5:ed:7d:cd:b2:a8:ec:99:f5:94:0c:f0:
70:d3:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:39 2026 by rpki-client