Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: 0EfP/UDK3dkepaX6A5S8lPs8uIeSn+FDjYjtlvdBsaU=
Subject key identifier: 95:A5:B0:4D:96:E9:88:63:61:FC:C5:0F:10:1A:B3:00:5C:43:37:37
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 019F9248B0886CE84A67DFBC99D190FB8F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0CDF
Signing time: Fri 24 Jul 2026 04:01:05 +0000
Manifest this update: Fri 24 Jul 2026 04:01:05 +0000
Manifest next update: Sat 25 Jul 2026 04:01:05 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: r6HhWHlGXt+JY3NOItPoFyrS9TjcumX/aUg3ihDK9o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:b0:88:6c:e8:4a:67:df:bc:99:d1:90:fb:8f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Jul 24 04:01:05 2026 GMT
Not After : Jul 25 04:01:05 2026 GMT
Subject: CN=95a5b04d96e9886361fcc50f101ab3005c433737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:da:fe:df:95:fd:75:9a:28:aa:b5:9a:b0:
b8:e4:8d:0c:48:22:7c:35:eb:7d:4a:9e:3e:6c:b1:
e0:f5:55:70:6b:c3:7d:b9:16:5d:37:3e:90:e3:8a:
41:5f:1f:b4:19:34:a2:08:ba:54:4b:93:a2:a8:ca:
13:89:4a:dc:2a:46:97:e8:a3:f9:ab:f3:63:02:ac:
96:6d:4f:3a:b7:ad:5b:e6:3e:a7:96:4b:11:8f:cf:
8f:d1:0c:a8:89:df:dc:e2:4e:a5:fe:50:1a:f2:7e:
51:e6:61:1c:b4:0c:61:2b:d7:5a:c6:43:2f:3a:f1:
d8:73:9e:c4:56:39:c4:94:b4:4f:0f:60:a3:4d:4f:
45:b2:f8:e2:98:e6:9f:e2:f4:a0:a3:68:84:ef:33:
19:5b:f8:25:fd:c5:30:94:e4:08:ce:43:df:aa:15:
7e:fd:9b:74:29:2a:a1:9d:74:08:99:2e:a5:8f:5a:
a3:25:4e:b3:9a:ad:d4:7a:40:da:4b:36:8a:ea:48:
2b:c7:26:0b:f0:ea:62:a2:2a:51:8a:6a:f1:18:63:
0a:65:ac:3c:45:b9:f2:79:a9:42:a3:e0:24:45:2b:
7c:ac:c1:4f:32:45:e3:ab:bf:e4:7b:90:22:8f:8b:
71:06:27:1e:92:0e:fb:ad:c2:5c:8c:5a:19:49:48:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A5:B0:4D:96:E9:88:63:61:FC:C5:0F:10:1A:B3:00:5C:43:37:37
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0f:35:13:69:ed:df:96:90:78:95:76:01:1c:ab:ca:4f:0c:
34:99:15:e8:d9:12:2c:bf:30:dc:e1:81:59:59:2d:24:b3:8f:
ea:a3:17:db:90:44:87:9b:49:a9:57:8c:04:6c:b7:6a:fe:08:
ae:32:27:40:eb:d8:b2:79:1a:01:a8:17:f4:26:0e:68:7b:9c:
ef:8d:9e:bb:08:2d:94:35:f9:e0:a8:06:ef:30:da:d7:3f:6e:
8d:22:db:41:39:6d:a6:9c:a4:8c:7f:45:13:6b:d6:4c:57:7d:
5b:b0:ac:5f:b0:43:08:0d:de:f4:5f:db:f7:48:e7:a8:fe:c7:
fd:24:07:05:51:2a:43:ed:df:d1:d2:3c:ba:b1:ae:7a:1b:de:
42:d9:96:ad:54:08:56:ba:0c:a1:7e:55:cf:d3:9c:60:74:ee:
8d:87:bc:7b:45:15:4c:ab:d7:22:05:93:ac:64:e2:87:2b:3d:
3c:32:f7:f8:00:cf:ff:73:44:07:69:a0:00:fa:88:b4:35:74:
15:01:7d:99:3e:2e:0d:4b:dc:0a:9d:49:02:8c:53:0f:80:de:
66:03:12:83:08:5d:8e:3d:54:c2:b0:9e:dd:a3:9a:00:86:e4:
d1:f6:af:89:e2:63:00:b0:a8:e5:35:fa:be:9c:1d:24:a3:27:
13:96:27:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:33:46 2026 by rpki-client