Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json)
Hash identifier: eOBRKGRdRFFCOArkXiwOFFCwEO5E1yvsk9FDeFcmJ3o=
Subject key identifier: 1A:3D:C4:57:B3:4B:B8:B2:0C:2F:C7:64:6A:42:05:86:B7:52:FD:ED
Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Certificate serial: 019F93FFA60FCFBB29B3D9EF907B9A9F7A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
Manifest number: 10AC
Signing time: Fri 24 Jul 2026 12:00:32 +0000
Manifest this update: Fri 24 Jul 2026 12:00:32 +0000
Manifest next update: Sat 25 Jul 2026 12:00:32 +0000
Files and hashes: 1: GqwrAZmGgNBxI9lJBOkWz-vm1Mo.roa (hash: kAQmoNaAQulFXJOFBcFbnsHdNI15L9bljvuL0WjJrFg=)
2: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: UJjv64oXqQCjRn+xgiyeQUVX1+8YmFSeXLwfH/z63s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:a6:0f:cf:bb:29:b3:d9:ef:90:7b:9a:9f:7a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d
Validity
Not Before: Jul 24 12:00:32 2026 GMT
Not After : Jul 25 12:00:32 2026 GMT
Subject: CN=1a3dc457b34bb8b20c2fc7646a420586b752fded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:0f:76:8c:fd:2b:a4:0c:52:ea:a3:45:2e:
b2:01:de:db:99:c7:40:30:4f:58:53:07:ad:05:0b:
a1:01:42:3f:fe:97:03:ec:42:7d:c1:ba:88:24:39:
2c:c1:07:61:e4:7f:a9:74:d2:36:d1:ff:86:57:bb:
a2:f0:96:fd:52:1d:4c:ac:06:18:e2:cb:1b:b5:8a:
03:62:5b:73:53:a6:e0:a2:16:e9:25:30:bb:0f:ae:
ac:ea:1a:7b:9d:76:60:fc:7e:cd:58:16:d6:f9:98:
2d:8e:c4:3a:06:21:90:90:36:b9:b9:0d:fe:98:2f:
c2:b0:80:6c:6d:a7:1e:05:7b:b8:da:ff:9b:b2:a8:
f8:a6:d3:04:45:bc:17:aa:e2:1a:76:86:a3:a4:df:
96:3c:a6:30:f5:b4:af:1e:4b:cf:ba:b5:90:c5:bd:
19:fe:da:1b:5c:7c:ed:20:61:36:11:49:3a:0e:97:
67:c9:31:ac:a1:33:17:68:60:61:b0:b0:1a:30:85:
5c:11:08:ae:9d:aa:1f:5d:50:6d:2f:df:bd:6a:12:
31:4c:ca:dc:43:c9:03:bc:b9:eb:34:48:32:19:70:
53:d4:15:32:23:a8:5b:c0:c8:f9:ca:69:b5:4b:5f:
02:cb:19:9f:81:94:34:59:61:1b:d7:95:74:b4:fe:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3D:C4:57:B3:4B:B8:B2:0C:2F:C7:64:6A:42:05:86:B7:52:FD:ED
X509v3 Authority Key Identifier:
keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2c:c0:50:f5:8a:06:ed:31:37:a7:39:08:a9:cb:61:d4:4d:
1d:39:4b:d7:4f:66:7d:62:c1:b4:e7:17:74:34:93:23:a7:5f:
cc:32:00:15:d8:3c:f0:2a:a4:d7:b4:04:df:9e:a2:e2:4a:43:
c5:17:51:eb:59:ec:2d:74:ed:83:73:3d:2b:5e:cd:b4:e3:fe:
b5:a1:c6:02:fb:b3:74:71:6e:a9:65:63:24:53:0f:c5:3e:51:
1a:2c:07:cd:4a:04:e4:fa:28:82:d5:af:36:58:0d:e5:87:94:
77:fb:82:ea:85:23:2b:12:1c:40:32:6b:9a:49:d5:55:80:41:
c3:b7:cc:88:11:82:3b:48:80:3d:a9:e4:85:b7:42:85:db:66:
fb:86:e1:83:a5:4d:94:f5:65:49:8b:f4:bd:ad:4b:a0:24:5a:
09:d2:5a:24:75:c0:47:74:ad:cf:85:b8:e1:9d:22:73:8a:7b:
18:f6:1e:7a:35:d1:5a:c2:31:5e:9f:fa:37:21:8e:85:8a:59:
29:2c:54:48:74:53:a0:ec:71:69:14:b0:20:77:68:13:e1:c9:
74:3d:0f:a4:30:55:5b:2d:43:da:0b:0a:05:b2:51:72:27:de:
58:f8:e9:f9:c1:7b:ad:d7:29:39:31:69:af:29:7f:39:03:a2:
7a:60:9b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:33 2026 by rpki-client