Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: 8wxc2FXFjqvLW6eDv2dKd9V/pnE75a78l+yzLWa2ijE=
Subject key identifier: F2:B6:30:73:4F:75:75:C7:C0:8A:28:05:BD:CD:57:DC:5D:54:ED:EC
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 019F9436744CE3230BA537F704CE7D11544D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 13:00:24 +0000
Manifest this update: Fri 24 Jul 2026 13:00:24 +0000
Manifest next update: Sat 25 Jul 2026 13:00:24 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: jleV/g0y5qEr9Ow1ZYfpp4arwiCtsDfGGyRDxqXPxJk=)
2: z_fYCrrGSV54cj1knb3xBk4SK5U.roa (hash: EFlql6uKuI4YQL66OtBnNw+c0chssYW8DVC7ieJRlbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:74:4c:e3:23:0b:a5:37:f7:04:ce:7d:11:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Jul 24 13:00:24 2026 GMT
Not After : Jul 25 13:00:24 2026 GMT
Subject: CN=f2b630734f7575c7c08a2805bdcd57dc5d54edec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:a7:4d:d6:13:ee:6d:7d:09:d9:eb:7a:de:
db:e5:d9:aa:92:4c:78:7a:4c:5a:bd:b1:cd:4f:28:
21:1a:95:b6:41:00:93:b9:23:0a:3e:8e:7d:2d:b9:
56:f6:7e:89:e2:4e:67:fa:bf:23:80:56:f0:98:97:
4c:99:a8:2c:e6:00:00:63:bb:b7:04:ea:0f:c9:c5:
0e:2c:33:c6:b5:84:67:aa:db:89:74:db:44:c6:8e:
3b:7c:ac:58:6c:41:2e:4a:c7:2c:b5:9c:97:79:b0:
fc:1a:12:c5:97:49:ce:7f:6b:c9:1b:88:6e:74:a1:
d2:88:32:45:1f:e7:f1:95:59:0c:b1:88:3c:af:4d:
6d:09:46:0e:7a:75:88:b2:e5:d6:dd:dc:0a:29:ec:
62:2f:41:db:ac:59:36:ba:ad:8c:ea:04:39:1f:ee:
11:0f:af:b9:49:84:9a:a3:90:e0:16:60:45:6e:fb:
67:fb:bc:10:73:38:1d:28:3d:b2:90:67:28:19:3f:
9b:d7:11:72:75:52:ea:74:2e:38:65:83:65:f5:08:
6d:2d:21:69:c1:cf:10:56:18:d3:0b:2f:21:71:64:
de:46:92:77:de:90:0d:45:3a:6d:f1:3a:b4:99:5f:
9c:9b:c7:8d:41:42:2c:f6:55:03:d6:a8:59:f8:3d:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B6:30:73:4F:75:75:C7:C0:8A:28:05:BD:CD:57:DC:5D:54:ED:EC
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7f:84:43:eb:b1:98:1b:fe:05:7d:fc:ee:9d:48:4e:dc:2b:
c0:f2:d0:ac:e6:ef:74:86:c7:f8:bd:57:58:4f:23:75:42:55:
d9:e5:fb:12:9b:bf:1a:47:d5:92:84:72:8c:68:56:ab:af:a9:
87:06:55:be:11:9c:55:89:53:a0:6c:1a:ba:4f:69:e2:2b:b4:
b6:a2:1b:ff:88:35:fc:3d:ed:07:7f:e9:d8:1b:5a:c4:c6:cb:
52:02:fe:83:35:75:4d:af:dc:1a:81:b3:f5:4e:92:81:cc:43:
3a:8d:ac:4e:86:d3:35:7a:0f:0d:d2:94:90:85:e0:76:9d:a3:
3c:fc:01:54:84:67:03:67:90:49:b2:e9:6d:e9:5c:30:10:30:
7e:07:35:9f:a4:00:e6:03:be:a1:14:f1:7e:b9:75:bb:00:bc:
26:41:3a:ff:8d:17:36:aa:a4:38:3f:9d:67:e8:ce:71:35:ad:
a5:79:9a:fd:52:5c:70:ff:a6:32:9e:08:5d:4a:a4:cf:76:df:
7b:c6:79:97:69:a0:82:9f:f3:37:71:2d:c1:70:27:a9:de:79:
bd:ed:c3:f5:d2:15:cd:39:5f:3b:9c:4f:f2:14:e1:ca:a3:8b:
01:fe:cc:06:43:b1:d4:2c:72:e1:ef:18:0d:44:83:b5:90:f4:
1a:1b:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:33:16 2026 by rpki-client