Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
File: hmVxtAaXbJ-viHcwKBnPVQ554p0.mft (raw, json)
Hash identifier: gditWGU53UUbJ75NRR7gxaOFMi3GSOewCUxINsO4uEI=
Subject key identifier: 88:6F:40:6E:05:4D:9A:3D:98:20:84:9F:89:41:0E:8E:D4:27:1B:CD
Authority key identifier: 86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
Certificate issuer: /CN=866571b406976c9faf8877302819cf550e79e29d
Certificate serial: 019F939213E9CAB99BC3F7261F1897EA9A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
Manifest number: D8
Signing time: Fri 24 Jul 2026 10:00:51 +0000
Manifest this update: Fri 24 Jul 2026 10:00:51 +0000
Manifest next update: Sat 25 Jul 2026 10:00:51 +0000
Files and hashes: 1: PFBKsrtOCbGhBn0cYx9bOrROX78.roa (hash: 7K+faRfy2CkTQM6e5qFvQ/b7USgvSKY/AFQOmLzDB3g=)
2: hmVxtAaXbJ-viHcwKBnPVQ554p0.crl (hash: KLXnOPfAJvS4tgdAtvT8Hlmm0KhUmoR7x5Ao+N9nxNM=)
3: jKNT_AJmqKLUzRsNV17SW2IxOf8.roa (hash: YzX7y6hNOozFt4OF66OKcy+9YHHPACtTPRFr+JGkOjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:13:e9:ca:b9:9b:c3:f7:26:1f:18:97:ea:9a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866571b406976c9faf8877302819cf550e79e29d
Validity
Not Before: Jul 24 10:00:51 2026 GMT
Not After : Jul 25 10:00:51 2026 GMT
Subject: CN=886f406e054d9a3d9820849f89410e8ed4271bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:a1:2d:70:2c:18:fc:a8:96:51:12:e8:ff:
b6:e3:34:f9:4f:dd:18:19:72:20:f7:21:85:cc:77:
af:ab:6f:59:d8:fb:97:2c:94:85:c3:b6:7b:47:63:
e6:12:9a:9b:c1:50:02:f7:7b:e2:99:33:99:2e:d3:
0f:d5:76:f6:a5:1f:7c:e1:25:8d:4a:ff:0f:9e:48:
96:96:73:d2:53:f9:4a:6a:27:5f:dc:63:56:8b:da:
99:99:23:74:ca:bc:85:02:7b:5f:02:81:de:83:68:
43:41:f1:01:c6:25:df:9d:c0:a3:29:bb:f7:f2:1d:
47:15:a2:57:ad:92:ab:25:62:c2:f2:e2:86:4e:40:
00:d9:a7:8d:1a:b4:02:1d:dd:f6:cb:7e:49:10:56:
d6:09:49:57:e4:d2:33:87:1c:08:20:96:e1:87:43:
13:39:61:a6:01:f8:37:4e:85:6b:57:59:d5:08:e7:
5b:92:b3:9b:5e:b8:c1:15:4d:95:75:a8:7d:83:a5:
ee:03:1c:95:f0:64:16:f3:55:88:95:80:f7:98:20:
b8:3e:2b:e8:12:44:3b:f1:23:b4:aa:ab:13:06:03:
6e:11:4a:6c:b1:ec:3d:1c:ae:76:5c:67:23:50:87:
84:2c:cd:34:ab:3a:c0:f7:b1:19:db:47:95:3c:cc:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6F:40:6E:05:4D:9A:3D:98:20:84:9F:89:41:0E:8E:D4:27:1B:CD
X509v3 Authority Key Identifier:
keyid:86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:95:ea:94:51:07:9d:a1:10:d6:e5:8e:99:c6:3a:21:18:c8:
a1:8e:97:bf:44:7f:b1:bc:2f:87:9a:9a:a2:00:a7:f2:98:d1:
08:8e:00:4f:a0:99:42:c6:0c:31:4d:17:db:45:71:cc:c6:17:
fa:b8:03:a7:67:82:5a:c4:2d:a9:f7:a4:1a:f1:ef:61:43:14:
96:bc:32:a1:6f:2b:b8:b7:81:4f:8c:02:d8:ba:b8:ad:03:d4:
10:34:55:09:66:58:f0:b7:75:60:75:02:1c:22:f1:e5:1b:ff:
71:89:92:4c:c8:c2:5a:5c:0f:39:b7:02:70:14:6d:97:a9:18:
75:3b:30:f0:2b:69:fb:2d:65:05:2f:d9:cb:7a:5c:62:56:10:
1d:a0:b9:2c:7b:a8:96:49:eb:6a:6b:71:a2:2c:94:62:28:bc:
85:14:e0:d5:04:32:db:5f:6b:25:f0:45:eb:37:33:a8:97:7e:
af:5f:83:17:b8:12:52:9c:db:a7:af:af:67:f4:51:87:41:fe:
2a:5a:d0:ed:3d:58:46:72:14:83:53:7b:b8:c1:1f:11:a2:87:
90:01:d3:3f:c3:33:b3:a8:0c:39:e9:63:b6:16:09:9a:6d:87:
0d:f9:8a:3d:b7:ae:b6:fb:4a:1d:9d:cb:a1:19:0b:25:f1:02:
09:d9:7b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:07:20 2026 by rpki-client