Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: eRV4ziLPmTM2uNZQ+54bVrSzXj44tSoAuB3sYwFE8mE=
Subject key identifier: 1C:FA:C1:47:23:AF:75:39:11:59:6E:FE:75:B5:60:E8:2E:63:11:CA
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 019F9022E3D32124CB9604D439834EB81B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0F3D
Signing time: Thu 23 Jul 2026 18:00:33 +0000
Manifest this update: Thu 23 Jul 2026 18:00:33 +0000
Manifest next update: Fri 24 Jul 2026 18:00:33 +0000
Files and hashes: 1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: sNPlhuKcb2iiZGoA/BulpVqbXMZaBhaJMvww0zsNGVs=)
3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:e3:d3:21:24:cb:96:04:d4:39:83:4e:b8:1b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Jul 23 18:00:33 2026 GMT
Not After : Jul 24 18:00:33 2026 GMT
Subject: CN=1cfac14723af753911596efe75b560e82e6311ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:a0:cd:d4:fe:91:48:5a:d1:82:2d:67:92:
0d:0e:be:0a:c9:50:c5:ee:cb:64:fa:75:c4:1f:57:
52:bd:20:90:25:24:e8:d0:6d:be:0f:2d:d2:9a:ba:
6d:23:10:d0:9c:bd:3a:43:ec:2d:6c:d6:4f:fb:ed:
ff:db:67:d8:36:ef:73:6b:cc:32:70:26:12:c6:27:
ed:99:7b:9c:f6:31:97:bb:26:3c:b7:ce:51:b5:e9:
a3:ea:0a:31:83:a5:d1:06:94:68:ae:4b:ee:ae:e4:
37:13:ae:fd:b5:8d:84:20:c1:3c:ed:61:f8:e2:fe:
c9:18:55:55:f4:99:5d:8d:5a:0d:4b:09:22:36:02:
14:07:02:00:3a:91:c3:7d:70:c7:5f:90:df:62:e5:
b4:86:94:ef:f2:dc:a1:f9:40:70:b0:15:ba:97:2c:
aa:33:e2:92:3e:d0:5c:b7:b0:60:78:fe:27:e2:3a:
6c:37:df:ed:74:b0:e6:d8:78:02:73:2e:b8:66:e4:
53:62:04:6a:e1:d8:3c:a8:6a:b1:b9:8b:3d:91:34:
20:2c:f6:16:67:98:09:fb:39:20:a2:c3:49:98:03:
6b:e6:36:2a:54:62:80:c8:34:75:68:06:a7:4c:a7:
6d:ca:37:ec:af:66:3e:72:fb:4d:9d:81:93:f0:25:
ba:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:C1:47:23:AF:75:39:11:59:6E:FE:75:B5:60:E8:2E:63:11:CA
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ca:66:a3:35:67:d1:83:ff:72:e1:46:9c:7f:06:33:81:c0:
60:1d:78:48:3e:e5:45:3a:c8:b0:c2:c4:c8:b5:70:1a:0e:39:
f1:e7:b3:de:db:3c:d7:b5:4f:4e:bf:49:4e:3b:26:3a:f5:db:
bb:16:8e:ce:53:97:9a:88:e1:97:6a:9e:89:5c:9a:f6:87:38:
f0:2a:91:3f:33:b5:81:0c:7c:31:61:80:4c:70:79:27:29:bc:
75:9e:da:e3:72:90:73:73:34:da:70:8d:e3:b3:dd:d2:78:20:
df:0e:f8:7b:58:dd:8e:b3:31:99:6c:d7:ef:a1:f5:9c:52:d7:
1c:a6:77:c1:df:60:61:a1:b3:56:35:54:a9:fb:c4:2e:5c:3f:
53:89:cf:89:4f:03:04:cc:ef:d2:e2:c4:6e:5d:74:d6:fe:d9:
7c:69:f3:86:16:ff:5c:48:a5:3d:b9:28:d5:0d:f3:d3:b4:e0:
2a:ae:43:3c:b1:d1:cb:07:b5:80:4a:0e:40:ae:5c:0a:04:04:
0d:29:73:20:3b:f3:de:cd:22:7a:b1:6f:38:77:fe:19:53:f2:
d3:90:3b:f1:82:c9:5a:8e:75:c5:20:4d:b0:99:06:b3:7c:e3:
2f:74:7b:d1:de:2e:68:de:99:e8:62:f3:d5:c6:3c:92:c6:08:
da:6f:a1:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIuPTISTLlgTUOYNOuBtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NzI4ZmIzMWM0ZWJkZmI5YmYxMjk3NDViOTFiZDJlMmVl
OGVmMzEwHhcNMjYwNzIzMTgwMDMzWhcNMjYwNzI0MTgwMDMzWjAzMTEwLwYDVQQD
EygxY2ZhYzE0NzIzYWY3NTM5MTE1OTZlZmU3NWI1NjBlODJlNjMxMWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkygzdT+kUha0YItZ5INDr4KyVDF
7stk+nXEH1dSvSCQJSTo0G2+Dy3SmrptIxDQnL06Q+wtbNZP++3/22fYNu9za8wy
cCYSxiftmXuc9jGXuyY8t85Rtemj6goxg6XRBpRorkvuruQ3E679tY2EIME87WH4
4v7JGFVV9JldjVoNSwkiNgIUBwIAOpHDfXDHX5DfYuW0hpTv8tyh+UBwsBW6lyyq
M+KSPtBct7BgeP4n4jpsN9/tdLDm2HgCcy64ZuRTYgRq4dg8qGqxuYs9kTQgLPYW
Z5gJ+zkgosNJmANr5jYqVGKAyDR1aAanTKdtyjfsr2Y+cvtNnYGT8CW68wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz6wUcjr3U5EVlu/nW1YOguYxHKMB8GA1UdIwQY
MBaAFERyj7McTr37m/EpdFuRvS4u6O8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzIt
MWY1NWQ5OTk5ZWViLzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zYWM3NjEtOWFkOC00NTEzLThhMzItMWY1NWQ5OTk5ZWVi
LzEvUkhLUHN4eE92ZnViOFNsMFc1RzlMaTdvN3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcpmozVn
0YP/cuFGnH8GM4HAYB14SD7lRTrIsMLEyLVwGg458eez3ts817VPTr9JTjsmOvXb
uxaOzlOXmojhl2qeiVya9oc48CqRPzO1gQx8MWGATHB5Jym8dZ7a43KQc3M02nCN
47Pd0ngg3w74e1jdjrMxmWzX76H1nFLXHKZ3wd9gYaGzVjVUqfvELlw/U4nPiU8D
BMzv0uLEbl101v7ZfGnzhhb/XEilPbko1Q3z07TgKq5DPLHRywe1gEoOQK5cCgQE
DSlzIDvz3s0ierFvOHf+GVPy05A78YLJWo51xSBNsJkGs3zjL3R70d4uaN6Z6GLz
1cY8ksYI2m+huw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:40:58 2026 by rpki-client