Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: 5wWf8At6jSCvTv6vbyAbseNPP+q81I5OUZ0qLcywwR4=
Subject key identifier: 1D:06:F1:30:16:C8:FC:AD:4D:0B:AE:F8:2E:CE:99:84:F4:BC:4C:AA
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 019F946DAAC7C1FD3CFEB4B0B15005D300F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 14C9
Signing time: Fri 24 Jul 2026 14:00:42 +0000
Manifest this update: Fri 24 Jul 2026 14:00:42 +0000
Manifest next update: Sat 25 Jul 2026 14:00:42 +0000
Files and hashes: 1: PreLEhXrBI_UKFJOTXBGTgHoYF0.roa (hash: YyPA9bxM1XffwGYRaKy9yqFp9gB0LZF+tWz17YqGofw=)
2: fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa (hash: tS5uriJcYFbYG/ALXKZnCG1DLjQm/ccSm8DkPwEWxXI=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: znChtDVX5haZLyfmWFbUni13dK81F7OQs6D4UdjRycE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:aa:c7:c1:fd:3c:fe:b4:b0:b1:50:05:d3:00:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Jul 24 14:00:42 2026 GMT
Not After : Jul 25 14:00:42 2026 GMT
Subject: CN=1d06f13016c8fcad4d0baef82ece9984f4bc4caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:28:7d:ae:f5:f9:e9:41:65:d6:11:9f:a2:
fb:9e:ed:50:0d:ef:90:16:00:e4:92:81:f8:e8:a5:
9c:df:1b:cf:38:9d:fe:fc:1e:34:6b:ef:c8:53:ce:
fd:b4:c2:1f:43:57:0a:b1:3d:06:d4:66:fb:46:62:
8e:57:39:cd:e8:1a:b3:5e:86:10:41:ad:01:90:c5:
fe:70:62:6f:5c:48:9e:3f:a5:40:22:e5:2d:55:9c:
37:9b:ed:d9:43:11:ae:b3:81:2e:7d:ad:b6:d6:7d:
8a:e8:e7:83:54:22:09:eb:4d:92:3f:1d:c5:4a:be:
9c:42:9a:66:b3:67:2f:e7:38:e3:d1:ab:e7:3b:1a:
1b:c9:98:ed:f6:2b:e4:8d:18:cb:02:8d:ad:b9:75:
9e:72:f8:8d:5c:57:27:98:4b:46:19:31:80:ce:97:
a5:19:92:38:ec:48:cf:79:d3:c4:33:6e:70:87:54:
92:26:92:da:82:fc:ef:2b:6a:c8:69:91:93:54:dd:
ab:15:a6:ff:f8:ae:dc:1c:e2:23:54:00:16:31:11:
8b:c2:75:92:47:08:f5:77:b1:dd:b6:6a:cb:ae:cd:
1f:e7:87:bd:ab:d0:79:6c:ae:f5:ad:78:4a:a9:cd:
5b:5c:44:62:52:12:9c:ba:d7:e5:fb:14:a4:fd:01:
b3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:06:F1:30:16:C8:FC:AD:4D:0B:AE:F8:2E:CE:99:84:F4:BC:4C:AA
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f8:0f:10:20:ce:7c:9c:80:84:31:0d:36:41:e8:fb:24:38:
27:3d:5d:f9:5e:dd:56:ec:61:1f:c9:9c:0b:06:85:64:9d:61:
59:ad:ae:e5:17:b5:e0:b4:df:52:1f:af:cc:77:52:87:f9:f8:
76:a3:39:4e:77:2f:25:a2:1a:05:ac:ae:a9:89:b9:59:d9:a0:
fa:82:a2:b5:8a:30:1b:c5:77:d2:62:6a:a1:ba:41:fa:2b:22:
a2:ad:3f:0a:23:7f:36:ca:89:fb:57:10:d4:c3:0f:c3:5b:1e:
fb:58:45:94:34:a6:98:79:be:f5:74:dd:a3:cf:84:d2:54:4f:
10:e2:46:28:b2:4c:cb:67:da:97:8f:5e:ae:c7:7c:b6:38:4c:
7a:dd:2b:09:04:cf:28:e3:c3:96:87:ba:7c:08:fc:10:17:c1:
de:9b:0f:5c:be:d1:37:58:28:bd:36:79:74:db:af:87:35:57:
8e:65:1f:b0:b9:98:8c:5e:ce:e8:b5:f8:71:56:e7:ab:cd:70:
a9:7c:16:62:db:2c:d9:a9:11:aa:05:3f:b7:a0:1f:e3:08:09:
4b:75:d7:ce:1a:9a:28:35:6c:4f:28:cc:80:f9:34:f1:28:97:
02:0f:51:06:3d:1a:e2:d3:4a:38:a0:0b:4e:f6:b0:d0:14:b5:
55:91:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:41 2026 by rpki-client