Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
File: hRwoH1drQ6HKuVPJIEHOlZknDHg.mft (raw, json)
Hash identifier: hoSMZ1D1UyjfLGv0Ku4bjNc+zusSqVtyteqPdVSAsSY=
Subject key identifier: F0:8B:BC:75:15:50:B3:59:8A:AD:2C:DA:AD:E8:DA:EC:AD:D4:18:B7
Authority key identifier: 85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
Certificate issuer: /CN=851c281f576b43a1cab953c92041ce9599270c78
Certificate serial: 019F9624D084134BEEB2D0BA74737CD5E2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
Manifest number: 1850
Signing time: Fri 24 Jul 2026 22:00:22 +0000
Manifest this update: Fri 24 Jul 2026 22:00:22 +0000
Manifest next update: Sat 25 Jul 2026 22:00:22 +0000
Files and hashes: 1: VpPJ4ZzReaEohaymqptLaOAjr1o.roa (hash: lqwSOhzaFJrXfe0L7Qw99FbYMDPv5g1eewbWIKteNLY=)
2: hRwoH1drQ6HKuVPJIEHOlZknDHg.crl (hash: G8GTJpMOs5Z10m8rxwzcwEaKRVNByAWm1/49cRJmnB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:d0:84:13:4b:ee:b2:d0:ba:74:73:7c:d5:e2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851c281f576b43a1cab953c92041ce9599270c78
Validity
Not Before: Jul 24 22:00:22 2026 GMT
Not After : Jul 25 22:00:22 2026 GMT
Subject: CN=f08bbc751550b3598aad2cdaade8daecadd418b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:41:5e:ef:fd:82:6b:f0:c1:09:a0:26:4e:
1a:a6:14:a6:a1:db:f6:1f:e0:de:ab:df:98:c9:c2:
fc:f4:d2:30:f9:4d:27:56:fe:5b:ef:a3:29:e3:de:
9f:2b:af:42:80:b7:3d:d0:25:98:f5:84:ed:fc:03:
58:49:f4:ea:34:2e:6a:75:8d:e1:f8:2b:17:d5:88:
e9:55:74:fa:26:33:43:cc:69:5f:98:d2:da:17:dc:
ea:d1:1f:a0:3c:a0:9b:68:59:9f:76:d1:ee:44:f2:
fc:cf:71:98:f2:fd:d0:98:59:f4:4f:80:f7:33:1a:
2e:f7:e6:95:08:f3:02:29:cb:23:0b:bd:bc:b6:16:
8c:89:15:40:eb:b1:9b:af:ab:be:43:31:09:70:28:
80:b4:15:e4:0e:58:68:83:f7:4f:51:8f:07:7b:f7:
82:b3:7b:78:4f:29:e9:28:2d:f3:da:1a:36:e9:79:
65:d9:ba:f2:8e:49:b9:5d:39:c2:3d:28:f6:65:bd:
c0:22:2a:99:d7:82:34:71:1c:00:41:6b:97:bc:7b:
45:b8:c0:62:99:30:d7:d1:9b:5d:9c:bf:c3:07:86:
1a:00:bd:52:a1:a7:c6:71:73:5d:ad:bf:c8:22:f7:
b2:eb:b4:31:1f:21:9b:06:af:d5:f9:12:d0:ee:f8:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8B:BC:75:15:50:B3:59:8A:AD:2C:DA:AD:E8:DA:EC:AD:D4:18:B7
X509v3 Authority Key Identifier:
keyid:85:1C:28:1F:57:6B:43:A1:CA:B9:53:C9:20:41:CE:95:99:27:0C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRwoH1drQ6HKuVPJIEHOlZknDHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4a68a7-dc31-40fa-a110-91d56200baf4/1/hRwoH1drQ6HKuVPJIEHOlZknDHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:05:90:86:3f:1e:47:56:b5:2e:5e:6d:e0:5a:57:c8:c6:f0:
c5:d3:62:27:00:4a:05:a7:97:37:6b:7c:4b:e3:77:5a:86:24:
85:5f:04:1b:04:3b:02:30:a9:fe:34:bb:b7:f3:cb:01:95:b8:
88:53:6e:ee:90:89:57:24:df:79:b9:2c:05:99:1d:94:c5:3f:
f1:01:65:f3:fa:15:76:28:b5:e0:ef:2a:be:24:6d:f6:20:c8:
31:c8:fe:a7:49:25:3d:a3:e6:a2:7d:ce:c4:af:3d:89:b0:a1:
3a:0a:54:6c:c2:ce:ff:e7:74:be:01:11:d7:be:f7:4b:56:63:
c5:22:b7:70:ca:38:07:ce:79:79:3f:78:4d:b6:f6:43:1c:05:
28:b8:8a:2e:3c:32:af:31:bb:26:9d:f4:cf:49:3e:90:84:b6:
42:c7:04:47:5c:af:ae:af:d8:5c:92:2a:e3:90:b6:df:3b:24:
69:89:35:e5:2c:4e:42:02:7e:8b:c6:ef:bd:b9:b4:69:59:9d:
25:e8:dd:1a:1e:00:bd:68:e5:e7:06:fc:77:5d:51:6c:06:4f:
c4:5c:b3:3a:3d:be:9d:95:35:e1:19:31:d7:21:08:0c:9c:a7:
b4:a2:87:12:64:11:1d:fb:ef:bb:0c:e1:0e:3c:79:08:43:93:
0b:22:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:53:06 2026 by rpki-client