Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier: gwo8dm0d/jumkXDy4nOI0oKxHcDz/S+dYa+wruB5/aY=
Subject key identifier: E5:E2:DD:D2:FD:D6:A5:7E:F0:F5:A9:EE:FC:CA:B4:DD:0C:21:66:99
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 019F9324713147E67705007946F3E223BD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 08:01:06 +0000
Manifest this update: Fri 24 Jul 2026 08:01:06 +0000
Manifest next update: Sat 25 Jul 2026 08:01:06 +0000
Files and hashes: 1: ZDyULkY7XdQ11kYjdum05r2DwuM.roa (hash: zq3BSwMTqEueaum+sWRBlqipTKD1rJ/mmOl8XQsz7Vs=)
2: dAmCb4Q0Lu8OSnL465WyYmvHdqs.roa (hash: ihhOeF2biIt0LZI2QoL/OX+WXgwfGmKMeTYYQxzMVw4=)
3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: 7rGIAzN8YSkr5XJiKaePky8FU4aYceuK6JSZpgcFmzU=)
4: rU_aup43-JcvplAJDdsQtTE8z3s.roa (hash: 8xZqax6dDOxidmRdOp80eUZcDr3nHq4tvorScngCUzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:71:31:47:e6:77:05:00:79:46:f3:e2:23:bd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Jul 24 08:01:06 2026 GMT
Not After : Jul 25 08:01:06 2026 GMT
Subject: CN=e5e2ddd2fdd6a57ef0f5a9eefccab4dd0c216699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:bc:1d:4e:7b:8f:9e:4c:5a:08:8d:89:e6:
05:c9:68:d2:ee:51:f7:44:35:ec:8c:68:81:fb:af:
96:9a:d7:ed:3b:16:83:fa:54:6c:44:e6:15:86:0f:
e4:e6:67:54:64:f0:a3:e4:e7:d5:6b:92:a9:71:26:
c0:4a:83:8a:56:a4:64:13:87:cf:fc:95:4a:45:9d:
73:0b:25:28:38:ae:a8:fb:66:58:1a:b7:3b:76:47:
9e:58:d6:55:ac:34:41:62:0f:29:3a:bc:5a:6b:de:
1e:7b:66:b9:d9:44:68:c2:4d:59:c8:76:6f:64:f2:
d7:3c:88:bb:b9:e0:02:b9:b3:cd:95:01:40:6f:43:
83:fb:29:59:93:a8:ae:01:70:34:99:29:04:c4:2d:
13:45:0f:69:d0:8c:64:3f:59:25:9e:0c:e5:be:a3:
74:01:ce:c1:53:45:1e:1c:64:68:59:d3:02:14:bc:
56:82:b6:ad:3b:5f:85:07:c6:01:c9:58:c3:4a:5c:
54:be:b9:0f:db:63:d2:92:22:31:76:dd:93:78:04:
5c:04:28:a6:1c:6d:c0:42:da:d5:53:83:f8:e1:01:
b4:97:44:02:70:dc:5d:1f:3e:23:c7:1d:d4:7b:7a:
ac:2a:06:4f:75:44:ea:68:2e:e5:86:0b:a5:3e:60:
1c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:DD:D2:FD:D6:A5:7E:F0:F5:A9:EE:FC:CA:B4:DD:0C:21:66:99
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c3:9e:e6:31:78:0e:1d:91:2c:e0:3c:64:36:23:92:62:1e:
05:0d:fe:36:0f:dd:dc:ff:71:d9:8d:22:53:cd:b6:66:17:1f:
c8:17:18:c6:b8:a2:c5:78:26:06:fb:1f:e0:3f:c1:d7:51:ac:
f5:2d:5e:36:5d:b9:2a:f2:0f:3e:bc:18:ba:5c:b2:15:4b:c5:
c4:26:fd:5c:97:8b:3e:21:90:34:a5:a7:0c:4a:83:45:3d:49:
17:49:1e:76:b7:8e:4a:1b:d5:91:8b:f1:22:00:a7:6f:c0:28:
4d:d9:6d:c2:8e:b2:25:fe:5e:84:64:c7:d0:0e:f3:f8:9c:26:
b9:38:ba:d2:e1:c5:f5:fc:9c:f3:6e:0a:cc:5f:a6:4b:41:81:
bd:24:ad:5a:56:87:6c:b3:a4:9b:5e:32:48:7f:b8:76:5d:e0:
c8:ed:65:f8:aa:b5:f2:25:01:42:71:63:2f:8d:07:e5:b3:c1:
47:93:78:be:81:3c:23:32:dd:d9:4f:47:ab:32:cb:f7:18:96:
73:a2:3f:1a:47:5f:7c:e5:01:9f:4e:42:42:a7:7d:3b:f8:4c:
56:3a:3c:c5:c3:40:91:cd:90:9e:ed:46:1f:a2:b3:32:31:6d:
ac:ed:c6:56:3c:b9:95:e2:c0:28:57:38:0d:36:8e:fd:bb:fd:
c4:3b:f3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:56:21 2026 by rpki-client