Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
File: cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft (raw, json)
Hash identifier: Oi64N2lPo+NfDNIx536fvZtQ/0oM57z+WrBfX8dXHi8=
Subject key identifier: 43:60:6F:06:A1:55:2E:03:6D:EE:3B:83:BE:4A:7C:04:66:C9:71:78
Authority key identifier: 70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
Certificate issuer: /CN=7072134a2255580a91f06936cf82fb0023f06c42
Certificate serial: 019F9436E40CB56DBDEB3B9F3848EA09BBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
Manifest number: CF
Signing time: Fri 24 Jul 2026 13:00:52 +0000
Manifest this update: Fri 24 Jul 2026 13:00:52 +0000
Manifest next update: Sat 25 Jul 2026 13:00:52 +0000
Files and hashes: 1: LrwsLYGATYrWrHHLDkqfghD5lvE.asa (hash: xSUEF8kVB96PvQCwAkm6dj5euHLOM2XZx7Zr4kPkTDE=)
2: cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl (hash: 3/kzfuVFqV6L7807f5V6CL2qOFlA1CSF6c9Rjyj4qyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:e4:0c:b5:6d:bd:eb:3b:9f:38:48:ea:09:bb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7072134a2255580a91f06936cf82fb0023f06c42
Validity
Not Before: Jul 24 13:00:52 2026 GMT
Not After : Jul 25 13:00:52 2026 GMT
Subject: CN=43606f06a1552e036dee3b83be4a7c0466c97178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:03:7d:ab:a0:1d:8f:88:ed:95:22:f9:42:ab:
82:bd:d9:d4:7b:5f:f6:2f:0e:33:09:59:76:56:79:
1a:23:65:a0:32:5a:0a:d3:6a:21:67:6f:86:df:00:
c4:a3:7e:66:f4:a0:26:0a:82:b7:35:07:aa:75:1c:
8d:60:b6:48:c9:62:62:a4:73:94:7b:9e:7a:37:6b:
d9:4d:bb:56:cd:55:4a:6b:80:c8:4b:58:46:3f:d7:
82:e0:8c:f0:ca:05:0e:09:c8:0c:9d:53:23:72:50:
b3:0e:ea:3d:6d:f5:8c:03:42:c3:c1:db:04:76:da:
12:fa:0d:04:35:d4:77:12:ad:f1:21:1c:3b:87:b8:
ea:a2:3c:49:0b:f6:4a:5b:b9:38:3b:31:be:f9:8f:
ec:03:c0:fd:15:76:ce:cd:b3:b2:62:c3:24:31:71:
e3:cd:3f:40:75:08:a0:02:58:9a:c0:a2:7c:27:0e:
7a:ae:3b:90:fb:6a:36:a3:b2:c8:e3:8c:8d:63:da:
51:33:4c:14:66:36:78:f5:09:1f:9a:1b:98:94:72:
18:b3:fd:09:13:4b:2e:c9:ca:d2:d8:20:08:5a:f3:
25:09:e9:f9:61:28:58:70:a8:6f:70:24:40:52:1c:
f4:6b:f3:8f:3f:bd:c5:92:2c:38:d4:b9:9c:eb:70:
9b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:60:6F:06:A1:55:2E:03:6D:EE:3B:83:BE:4A:7C:04:66:C9:71:78
X509v3 Authority Key Identifier:
keyid:70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:bd:55:dc:9e:35:00:55:d8:db:df:36:57:5e:46:7a:51:4e:
ea:6a:55:21:5f:c7:f8:14:30:b7:70:26:c3:3f:1d:b1:41:b4:
83:01:e5:f6:30:6a:99:30:10:1a:b8:ce:56:db:ee:6e:dd:f0:
d0:3a:5f:71:a3:88:70:75:54:8f:ef:59:a8:b0:9c:51:c1:54:
a2:2b:52:7e:0c:c7:03:d9:7b:ed:13:9d:16:6c:df:d3:7f:51:
ae:9b:1b:1c:59:6c:bb:d3:d5:9d:ba:7c:91:63:7e:00:cd:59:
28:fc:eb:4d:4d:be:62:80:ff:61:62:5c:00:ae:1d:3d:3e:13:
ee:43:33:dd:91:ca:44:d5:39:3d:86:2a:1a:02:14:49:2f:3a:
67:27:ab:83:b5:1b:6a:48:49:e8:9a:42:c6:dd:17:89:d1:5f:
fd:be:ce:f0:6a:ad:db:67:ce:18:1f:2a:7e:db:14:d0:f0:23:
18:a5:29:0e:77:c5:18:ee:ca:17:50:e0:f9:81:67:49:b8:03:
30:28:40:d4:51:e9:4a:cf:ab:ab:41:b3:00:85:e2:f8:e2:93:
53:34:2d:05:3d:2e:10:ec:9b:85:f1:1e:dc:58:aa:ec:0b:fe:
94:3c:35:7d:93:6d:2f:cf:86:d8:e8:fc:25:07:71:c2:fc:8c:
48:6d:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:19 2026 by rpki-client