Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: xXWHl0rxFRai3gbkdjt08z1YGiCPgh15qvnjSh26A3Q=
Subject key identifier: C3:20:37:29:13:8C:CC:B7:B2:01:E7:48:44:DC:2A:5C:90:BF:5D:71
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 019F927F6C4598E00915E190EE451A3D5AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 14C8
Signing time: Fri 24 Jul 2026 05:00:52 +0000
Manifest this update: Fri 24 Jul 2026 05:00:52 +0000
Manifest next update: Sat 25 Jul 2026 05:00:52 +0000
Files and hashes: 1: PreLEhXrBI_UKFJOTXBGTgHoYF0.roa (hash: YyPA9bxM1XffwGYRaKy9yqFp9gB0LZF+tWz17YqGofw=)
2: fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa (hash: tS5uriJcYFbYG/ALXKZnCG1DLjQm/ccSm8DkPwEWxXI=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: IiyWMe+ZSzYuP6agVs90mt/hC4sISVcj//qHfIGVX2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:6c:45:98:e0:09:15:e1:90:ee:45:1a:3d:5a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Jul 24 05:00:52 2026 GMT
Not After : Jul 25 05:00:52 2026 GMT
Subject: CN=c3203729138cccb7b201e74844dc2a5c90bf5d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:97:62:5e:17:3c:2a:6f:f3:fb:9c:de:21:
b9:f8:e7:df:f5:b5:d1:f6:00:48:3b:a5:24:bb:00:
89:27:f4:99:89:f8:39:f9:f2:8f:85:67:7d:4e:32:
28:13:e7:d9:d6:84:3d:b9:89:f3:84:fc:9a:a9:da:
ca:ea:36:fc:d6:24:e8:ef:be:01:2d:16:a3:11:a7:
46:b2:b0:cf:26:7e:55:af:ab:27:cb:3f:c7:68:51:
cf:a4:8f:04:ee:ac:97:4c:37:92:34:95:75:a8:18:
06:a7:1d:95:c0:e9:fe:63:6f:5c:1f:1e:63:f9:4a:
e0:54:5a:42:66:ca:69:f7:82:0f:0c:f1:17:d6:01:
98:c5:35:df:ce:d8:12:d6:9b:ed:76:c8:08:5b:a9:
c4:fc:dc:9d:23:6c:16:7b:06:43:a9:00:b6:3c:55:
f7:f5:52:d7:e4:24:a5:ed:5e:93:7f:69:26:23:cf:
cb:32:f9:25:66:be:15:ee:f5:1a:73:49:ae:14:31:
6f:37:6f:16:f3:14:a9:c9:d8:13:45:8f:eb:66:37:
1a:8a:20:f9:d6:8c:53:d5:e3:3a:8a:4a:a7:de:3a:
7f:96:ed:8f:e8:ec:57:26:36:b5:51:30:fc:91:3a:
3a:4c:1c:e5:05:ec:17:d7:fb:67:57:e8:b0:1b:3c:
65:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:20:37:29:13:8C:CC:B7:B2:01:E7:48:44:DC:2A:5C:90:BF:5D:71
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fd:cd:82:58:83:24:b8:55:96:8b:cd:87:93:0d:62:c4:5e:
4e:5f:5e:a2:32:f7:a9:49:9c:a7:be:a6:ae:a5:f6:40:8e:c8:
53:de:2e:f7:51:fa:d9:e4:47:f0:2b:ba:d4:af:54:3c:ed:47:
9d:b1:f6:20:9a:9a:dc:4c:4b:ed:7b:3d:70:75:6b:f1:2b:61:
63:cb:29:a1:1e:f1:65:36:c4:6b:64:ff:e3:43:c1:c2:85:81:
54:09:98:c9:f5:78:e1:88:1b:8c:53:31:a2:dd:fe:c2:48:c6:
8b:19:d0:72:fe:04:46:33:5a:fd:06:2b:b1:58:58:7c:49:d2:
5a:52:5d:14:c9:94:8d:00:30:d8:fc:01:f0:05:51:a8:8c:df:
78:49:74:7c:49:4f:62:1b:04:f8:49:2b:b8:06:fd:4b:32:58:
af:c6:45:64:5e:c6:b1:f0:d3:2f:09:d0:a4:08:1c:fb:fd:e5:
e8:88:b2:0d:e5:ab:9f:f0:6b:3e:b1:02:b2:47:62:86:7d:d7:
2c:9c:09:dc:f1:cb:2d:f6:fd:4d:c2:05:67:15:e4:ce:c1:b0:
13:0a:6c:30:e2:7b:44:3f:0d:78:8c:ae:2e:8e:fc:b0:2f:2f:
a1:08:ba:07:6c:da:b7:eb:71:ac:d4:bd:e6:f9:d2:04:fb:e7:
2a:fc:87:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:29 2026 by rpki-client