Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: jJpnUVbbx/t66Wz/nucQKPUJhozOcbqMFus7sjjk7vo=
Subject key identifier: 89:F4:0F:51:74:2B:DD:05:20:31:2B:0A:00:D2:F7:79:19:C2:4D:28
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 019F935AC949F30E22EB0EFAB7B4C160E8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 1708
Signing time: Fri 24 Jul 2026 09:00:28 +0000
Manifest this update: Fri 24 Jul 2026 09:00:28 +0000
Manifest next update: Sat 25 Jul 2026 09:00:28 +0000
Files and hashes: 1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: oEeba18AaQfXZ5bQsKTLhWHrH+iEWbi8/qHhmIZlsyA=)
4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:c9:49:f3:0e:22:eb:0e:fa:b7:b4:c1:60:e8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Jul 24 09:00:28 2026 GMT
Not After : Jul 25 09:00:28 2026 GMT
Subject: CN=89f40f51742bdd0520312b0a00d2f77919c24d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:d1:19:d7:d9:2a:d9:82:5c:af:51:6f:02:
33:b4:34:8d:a6:25:09:8e:44:eb:a3:3a:11:33:57:
22:bf:fe:79:c4:38:55:96:9b:df:a6:e5:3f:0f:a2:
20:e7:4d:1b:84:88:41:8f:8f:b1:d0:83:14:ab:0b:
97:fb:ee:91:82:14:8b:1b:bb:b6:1a:65:4e:fe:24:
e6:a7:78:03:2a:a2:02:32:15:a6:c8:fb:57:47:35:
a5:f1:b3:d2:22:9d:2c:13:8d:8e:68:3e:32:32:e1:
4b:c1:43:81:00:c8:db:9d:fd:65:8d:25:c2:9f:ed:
b3:34:df:52:4d:0a:1f:08:89:64:86:80:f6:f9:32:
2c:f7:b6:b7:a7:96:67:56:83:aa:2f:41:dc:4f:fb:
df:4c:3b:a2:6b:f2:e3:10:f1:71:d4:03:ed:17:46:
9a:b4:91:d9:13:d1:d9:c9:9c:d6:f2:dc:2c:f5:0e:
cf:64:e1:6d:47:99:68:64:5e:1f:24:0d:fd:fa:95:
4e:f3:0b:53:02:49:3a:d0:0f:b8:03:08:88:1c:4e:
93:64:f8:74:23:b1:7a:91:f2:3e:95:a6:a4:78:7e:
39:12:7a:02:dc:3e:02:20:04:8b:da:aa:c1:31:7e:
85:19:9b:8f:b9:5d:53:fa:25:42:c5:be:5a:4e:a0:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:0F:51:74:2B:DD:05:20:31:2B:0A:00:D2:F7:79:19:C2:4D:28
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:15:4a:97:a4:f7:dd:4d:8b:5d:a3:73:9f:af:dc:bc:d2:2b:
3a:9d:93:19:60:ac:d6:5b:af:d5:d5:2f:ae:26:4f:f9:4c:6a:
9d:6c:e7:ab:48:c8:90:47:b6:c8:b5:4e:7a:89:30:43:e1:6e:
45:bc:96:80:0e:91:9d:1e:bf:ac:f0:24:ea:20:ef:24:be:27:
b6:01:77:69:92:7b:ab:ec:30:5e:e9:63:f5:e6:cd:68:8b:2e:
db:09:be:45:c3:a4:1a:f1:b1:d9:31:77:9c:a9:b3:2b:68:94:
a2:2f:68:4e:48:4b:74:b4:61:07:a9:28:66:7d:bc:53:1e:b6:
b4:f5:09:05:bd:35:f2:72:92:6c:43:f7:ce:b0:cb:8a:f6:4f:
c0:9f:68:22:24:7b:52:eb:63:c6:6d:ff:7a:30:91:7a:46:9e:
76:fe:a1:f6:0e:0c:07:ed:8e:60:d9:3b:92:76:93:c2:ce:89:
fd:f1:f7:2c:cf:2e:d6:a8:17:44:23:f0:03:4c:0a:7d:9d:32:
0d:35:c2:90:70:53:5d:84:c7:2f:58:16:00:b3:62:ad:79:6c:
2f:b8:4c:09:b8:93:84:70:2e:9d:95:1a:d8:ac:c8:34:3a:be:
d0:3e:2d:8f:9c:16:8d:27:79:b6:3c:7a:25:3d:9e:2c:9a:92:
e5:e2:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:12:13 2026 by rpki-client