Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: oh9PMJn8TXYII0gUgugLZ7viW54Vl8ibBAoSpIc6Ngo=
Subject key identifier: B9:B6:5D:61:76:AF:21:92:F4:9A:AF:AE:7D:EC:A9:63:8A:B8:48:22
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 019F8F7E5664ABC29FF0DBB12E21DB485A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 185D
Signing time: Thu 23 Jul 2026 15:00:49 +0000
Manifest this update: Thu 23 Jul 2026 15:00:49 +0000
Manifest next update: Fri 24 Jul 2026 15:00:49 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: v453rGjozUrkqX+oxp3WH9/Jsze4Zob31jAkL4EsKrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:56:64:ab:c2:9f:f0:db:b1:2e:21:db:48:5a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Jul 23 15:00:49 2026 GMT
Not After : Jul 24 15:00:49 2026 GMT
Subject: CN=b9b65d6176af2192f49aafae7deca9638ab84822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:89:1d:15:2e:57:40:97:25:10:83:07:52:
b2:ef:3a:a8:ae:d7:f1:a4:7c:80:e5:43:26:cb:8d:
df:62:11:ab:1f:34:6b:4d:1d:2e:b9:67:80:26:ea:
46:60:80:e0:47:6c:3e:81:25:dc:72:95:a6:cc:53:
f1:02:f5:fe:8d:2d:cd:00:20:2a:99:10:f8:4a:02:
38:9a:8e:a7:c7:85:73:50:3a:d4:8d:9e:db:d2:c7:
76:0e:c4:7b:37:eb:da:d8:95:e8:26:c1:56:8e:b6:
39:38:66:66:b8:5d:83:cd:0f:ca:4d:0d:b5:c9:83:
f4:08:44:35:c7:9b:2a:eb:a0:ca:d7:ab:07:df:26:
d6:94:5e:90:8a:52:78:70:7f:d9:a1:13:61:ca:5b:
43:32:65:c7:fe:aa:36:ab:9f:78:ce:2f:c6:0f:ba:
fa:bb:f9:f3:65:74:b4:93:7f:83:c8:20:c7:04:e6:
ea:45:0a:bb:31:eb:4f:e0:8b:57:09:e9:f1:57:2d:
94:5c:ed:ce:e8:04:02:0c:85:99:cf:95:a4:08:b8:
e5:1f:24:93:6f:e7:f0:2d:3b:4a:a1:1a:f9:ba:6b:
38:1b:5a:d0:bb:cd:0a:f8:b9:45:b7:da:59:b2:b3:
29:8c:9a:2a:8c:f7:ea:db:c9:31:73:ee:97:bd:f8:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:5D:61:76:AF:21:92:F4:9A:AF:AE:7D:EC:A9:63:8A:B8:48:22
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9e:15:9b:fb:ae:3d:4a:e6:e0:74:25:5e:2c:24:92:8f:2a:
92:b5:aa:bd:37:76:f9:bc:10:ce:32:2b:8e:0b:c5:59:2d:0b:
fb:b8:1e:3f:4d:c8:d7:1b:55:b8:72:f8:5c:d9:20:6a:9c:f2:
ec:5c:88:64:73:d7:cb:69:40:7f:cf:0b:e3:ee:bc:82:c1:48:
39:1b:7f:83:6d:04:59:80:f9:97:bf:01:23:75:e9:42:08:47:
31:b3:22:a2:41:21:fb:d1:3e:81:8a:a9:ac:e9:06:1e:ca:5f:
d4:67:b7:42:47:0d:3f:d1:74:33:66:33:be:b6:b0:30:37:f3:
8a:b5:f4:15:6f:08:62:f0:c6:31:d5:c4:58:5d:4f:c0:08:c7:
a3:14:b5:67:3e:6d:12:59:09:1c:a6:70:21:a4:ec:04:20:1f:
f3:35:d9:bc:6d:41:d2:1c:19:e1:2b:62:01:07:79:49:46:f7:
c0:07:4d:1d:e1:ab:14:51:9b:c7:79:2f:3f:8a:aa:95:85:15:
28:b1:0b:3d:a7:a6:8d:1b:d0:63:8d:44:7d:8d:65:24:cb:0b:
69:89:87:13:09:40:32:12:d2:a8:c9:00:16:87:e0:0b:d2:6f:
eb:64:59:29:b2:fb:ea:9e:7b:1a:26:2a:91:42:db:90:dd:aa:
d3:c6:27:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PflZkq8Kf8NuxLiHbSFpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzcwY2M1ZDI2MGYzZTJhZWZmNWRkOGY4ZjRhNDE1YTIz
NDVhODEwHhcNMjYwNzIzMTUwMDQ5WhcNMjYwNzI0MTUwMDQ5WjAzMTEwLwYDVQQD
EyhiOWI2NWQ2MTc2YWYyMTkyZjQ5YWFmYWU3ZGVjYTk2MzhhYjg0ODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaSJHRUuV0CXJRCDB1Ky7zqortfx
pHyA5UMmy43fYhGrHzRrTR0uuWeAJupGYIDgR2w+gSXccpWmzFPxAvX+jS3NACAq
mRD4SgI4mo6nx4VzUDrUjZ7b0sd2DsR7N+va2JXoJsFWjrY5OGZmuF2DzQ/KTQ21
yYP0CEQ1x5sq66DK16sH3ybWlF6QilJ4cH/ZoRNhyltDMmXH/qo2q594zi/GD7r6
u/nzZXS0k3+DyCDHBObqRQq7MetP4ItXCenxVy2UXO3O6AQCDIWZz5WkCLjlHyST
b+fwLTtKoRr5ums4G1rQu80K+LlFt9pZsrMpjJoqjPfq28kxc+6XvfjKUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm2XWF2ryGS9Jqvrn3sqWOKuEgiMB8GA1UdIwQY
MBaAFIU3DMXSYPPirv9d2Pj0pBWiNFqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEt
YWU2MGJlYTA2YTljLzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZjcyNDYtY2U4Zi00NGY4LWE4MzEtYWU2MGJlYTA2YTlj
LzEvaFRjTXhkSmc4LUt1XzEzWS1QU2tGYUkwV29FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJ4Vm/uu
PUrm4HQlXiwkko8qkrWqvTd2+bwQzjIrjgvFWS0L+7geP03I1xtVuHL4XNkgapzy
7FyIZHPXy2lAf88L4+68gsFIORt/g20EWYD5l78BI3XpQghHMbMiokEh+9E+gYqp
rOkGHspf1Ge3QkcNP9F0M2YzvrawMDfzirX0FW8IYvDGMdXEWF1PwAjHoxS1Zz5t
ElkJHKZwIaTsBCAf8zXZvG1B0hwZ4StiAQd5SUb3wAdNHeGrFFGbx3kvP4qqlYUV
KLELPaemjRvQY41EfY1lJMsLaYmHEwlAMhLSqMkAFofgC9Jv62RZKbL76p57GiYq
kULbkN2q08YnpA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:45:15 2026 by rpki-client