Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: NPCJDfxpLhBb84Id/qRDAcy01mG7M680j4qc2TUspik=
Subject key identifier: 01:3A:68:1D:19:A3:40:35:80:1E:13:A3:D7:D6:B0:9B:00:57:B4:EC
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 019F91A3E8A68BF19E844CAC14283631364E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 1589
Signing time: Fri 24 Jul 2026 01:01:05 +0000
Manifest this update: Fri 24 Jul 2026 01:01:05 +0000
Manifest next update: Sat 25 Jul 2026 01:01:05 +0000
Files and hashes: 1: HTwlYLS_ffwhQcdIe5ndzskreto.roa (hash: 2KCaWvsbTh5/gdngs8HmHbk57EMiFOhMngXsbQP11o0=)
2: a4zBtMFZYByhLbfrS1dLgNWkKck.roa (hash: dYhiBJ/AxN48Rl+cu3HQdPVxUF/dVcAsWXYAXFUPJcE=)
3: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: I1u3EHIbK0ZAVSQJyppCUY7RDuAImVTA1cNQzW0K9is=)
4: xSQW2sggbgbxw6ad1ltpXUi4AL0.roa (hash: TfP2oPkLUpfY+mHh6+HX4amHLmgM458P4qEzEj5WmsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:e8:a6:8b:f1:9e:84:4c:ac:14:28:36:31:36:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Jul 24 01:01:05 2026 GMT
Not After : Jul 25 01:01:05 2026 GMT
Subject: CN=013a681d19a34035801e13a3d7d6b09b0057b4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:61:99:3e:4f:60:63:00:6a:1d:22:1c:bf:
00:3a:e0:47:58:9e:a7:7a:e5:4f:dd:1f:75:22:c6:
5d:39:8a:59:01:19:84:18:03:40:b0:35:fc:96:50:
40:fe:3d:8e:03:77:7b:8c:a3:2f:57:d0:e4:20:79:
a1:5f:17:9b:7f:b4:f7:50:7e:2b:86:fe:56:0f:6b:
9e:d1:93:29:ef:9f:73:54:37:24:aa:36:97:3f:2a:
0d:48:fa:1c:93:d6:02:96:a5:22:70:82:d6:c7:fa:
1a:a0:3a:7d:b6:f9:36:13:a1:73:aa:b2:fd:88:d3:
cc:ae:c4:7c:fe:0d:02:32:04:ec:6c:2a:fc:43:51:
0c:b0:14:7e:ab:aa:78:08:4a:0a:44:de:81:70:6c:
1a:d6:d8:f9:e3:13:79:9e:16:14:94:79:19:7d:8c:
80:cc:4a:aa:9d:b4:f0:5f:05:b4:53:75:eb:ee:6d:
07:eb:33:8c:b9:2b:6c:f7:4a:9d:67:75:89:90:70:
cf:a9:ad:f0:5c:6e:98:e6:0e:34:08:0b:df:bc:cc:
4c:8f:76:94:84:3f:63:77:e1:cd:85:7b:7e:00:a9:
4b:cc:14:1c:2e:9f:1c:bd:bb:e3:66:40:1d:97:3c:
bd:a4:c3:12:b9:5e:86:77:fa:5e:6f:02:f5:d9:42:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3A:68:1D:19:A3:40:35:80:1E:13:A3:D7:D6:B0:9B:00:57:B4:EC
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:64:ab:bc:ee:af:bc:49:13:0e:aa:83:05:c7:b0:07:43:9f:
7c:cb:43:60:49:3f:05:cc:ec:7c:06:bd:b2:2b:a0:14:27:56:
12:11:29:2b:1c:5b:86:4d:8a:15:de:e9:0f:51:37:3a:b0:50:
4d:92:4c:d3:35:d8:13:5c:ed:ba:97:a8:c1:86:7a:e8:3d:72:
fe:9a:04:98:4f:ef:86:c3:cc:e1:79:6c:b7:a8:13:97:33:98:
59:ab:e1:94:74:f5:22:f1:f4:99:72:34:88:b9:3a:88:96:d8:
de:b9:07:14:7f:a5:08:14:ce:63:5e:49:b7:de:5b:37:9c:7c:
d8:9c:bb:de:2b:1d:54:cb:94:13:59:8d:56:f9:5e:27:49:73:
7c:10:e1:39:46:ba:8b:66:1c:60:86:f0:1a:fd:bb:f7:c0:d3:
44:0e:39:03:6b:db:a2:66:31:76:d0:9a:44:62:5e:9c:9a:f7:
81:0e:16:72:6d:a7:52:e1:f0:9d:4b:9b:f0:a7:ba:55:1e:af:
6d:c7:fa:7e:c4:f0:06:5d:a1:81:1a:ed:a5:88:53:47:32:fe:
7c:f5:2e:d3:86:ae:d1:e5:32:c6:ab:80:b1:07:3e:26:70:35:
35:f6:60:ea:ae:3a:a9:4d:4e:71:f6:d9:1d:9e:79:01:91:fa:
cc:d7:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:16:24 2026 by rpki-client