Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
File: hESS25y7Cg62v2nCXIaWH0kYPJs.mft (raw, json)
Hash identifier: tLucpjAClchw7tDP+2Yyqr+Ccl5PwugPKruoOvDYwEQ=
Subject key identifier: 57:98:85:32:F9:D2:45:45:A2:0D:3D:B1:F1:18:A7:5C:EA:40:08:6F
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 019F94DB879092B15B07952E1B262649E795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
Manifest number: 0A4D
Signing time: Fri 24 Jul 2026 16:00:42 +0000
Manifest this update: Fri 24 Jul 2026 16:00:42 +0000
Manifest next update: Sat 25 Jul 2026 16:00:42 +0000
Files and hashes: 1: LXqYHZ-ZPGUTxzVaTVtl0COHTWo.roa (hash: 5NQrQW9N3IgSM0PQCJC1g2KETpNZ4HSxzHK048rjxU8=)
2: VMwkQbgZsaD1modLD1OCZoOdaP0.roa (hash: hFT/2DxMA5YwrG6LBI7zWfiz+2OyUaLWWeHm7RJ0nXg=)
3: cPKzl4MAM1VPvGgqdoHotmjF_TQ.roa (hash: Kwq91RaELM7PU5xhh1ZgTtP0NFXJmqvp86LKfBSRLfM=)
4: hESS25y7Cg62v2nCXIaWH0kYPJs.crl (hash: dyXnfwKSs+KZsVtSyYzxcYyt7SnXnptTt8f7npHNON4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:87:90:92:b1:5b:07:95:2e:1b:26:26:49:e7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Jul 24 16:00:42 2026 GMT
Not After : Jul 25 16:00:42 2026 GMT
Subject: CN=57988532f9d24545a20d3db1f118a75cea40086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:72:ed:67:f5:87:13:e4:55:d1:9e:d9:b5:b1:
2a:08:10:63:68:69:12:a0:9a:44:6a:dc:13:1c:ec:
94:ec:9b:61:28:2f:ed:b6:60:5c:25:c7:38:31:4c:
1c:b1:5f:76:4c:19:64:5c:76:38:d6:be:15:01:61:
33:7a:1d:c1:c0:29:31:7f:8e:00:5a:1e:bb:31:78:
af:e5:66:4f:e3:32:d9:be:15:53:a4:3b:0d:3a:ff:
93:38:5e:e3:6b:24:00:6f:4b:43:49:19:b0:a1:f5:
5c:94:2d:c9:e4:55:03:69:66:86:7f:69:1d:16:c6:
97:9e:36:59:25:b9:d5:c5:7e:a2:c8:d1:82:b7:ce:
6f:c0:5d:0e:47:c5:26:01:a3:12:18:fc:ec:66:65:
aa:07:4d:c2:a1:93:9a:9a:10:f9:2e:52:63:04:6e:
7a:f4:3f:89:cf:66:cd:a4:48:0e:f5:ab:d4:96:59:
c0:5a:b2:c4:a9:0c:e6:0b:23:4c:63:53:f4:87:de:
24:f9:b5:d1:ff:bc:08:b4:1b:a6:26:b0:b1:c2:cd:
64:7b:7f:15:d2:c7:b0:85:82:17:43:3b:b9:cf:5d:
33:6b:16:62:9f:85:9b:c5:d1:d4:78:92:0f:dd:95:
4f:11:0e:ec:14:16:3d:75:43:8f:a8:79:00:bd:ff:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:98:85:32:F9:D2:45:45:A2:0D:3D:B1:F1:18:A7:5C:EA:40:08:6F
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e9:80:47:14:6e:af:a3:f4:14:a3:9b:98:64:19:51:ab:f5:
a5:52:71:b6:05:10:25:ab:ff:b8:cd:49:54:0f:ed:b2:7b:c8:
7f:03:81:4c:0b:c9:8e:bb:cf:a4:07:41:dd:f4:7d:e4:3b:05:
25:44:dd:5d:75:2c:d0:cb:7c:a3:a3:4c:38:3b:d8:a1:e9:45:
84:78:6b:ad:78:4f:d7:e0:c5:e0:a0:5b:ab:ea:ee:9c:89:47:
78:e6:b9:b8:fe:61:ce:ef:36:ce:cf:0a:5c:3f:e9:6b:05:4c:
b7:68:de:07:ef:05:6c:52:b7:30:66:49:c9:1c:e1:db:f3:21:
55:44:83:d8:3b:b8:59:41:f1:8a:db:59:0e:9d:0f:7d:16:3a:
0b:6a:c3:86:49:79:c1:3c:b6:f8:c1:8a:9e:42:a4:2d:41:36:
cd:f9:c0:8d:2c:cd:bd:d7:6f:33:c0:52:7c:96:f6:8b:e7:da:
2d:41:d4:e1:0b:d5:21:f7:86:7c:f9:e9:91:9d:bd:8b:0d:73:
2c:07:75:0b:84:f8:90:1b:ed:00:80:f5:66:1c:e7:c1:a4:78:
bb:d6:51:5d:78:65:5e:73:f0:cc:0d:f8:64:2f:05:86:56:f0:
f7:9f:cf:86:e5:a6:03:34:80:2a:94:9c:d3:b6:5a:e0:29:f3:
3c:35:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:45:56 2026 by rpki-client