Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: 8//OZPGNq1xXNU68t5GvmESFnzwZUiPEK44KOQVvYgY=
Subject key identifier: FE:E5:46:36:D4:0B:82:DF:97:00:E5:82:82:4A:58:56:BB:32:33:C8
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 019F95495FBFEB011850F0A0FF351EA3AAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0FD1
Signing time: Fri 24 Jul 2026 18:00:41 +0000
Manifest this update: Fri 24 Jul 2026 18:00:41 +0000
Manifest next update: Sat 25 Jul 2026 18:00:41 +0000
Files and hashes: 1: 4n7f8hSe_-4Wy2bDVW-WXjUIx0g.roa (hash: 5C3gCij/JOO8iJfKMKfHtP05aLMSh42RFLgeNEwUl6g=)
2: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: 4GYgjMX68GOkVGfXbv8daRiTj/BlBrrpOXeSSsUZcn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:5f:bf:eb:01:18:50:f0:a0:ff:35:1e:a3:aa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Jul 24 18:00:41 2026 GMT
Not After : Jul 25 18:00:41 2026 GMT
Subject: CN=fee54636d40b82df9700e582824a5856bb3233c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:62:17:9a:14:83:6f:fb:5a:67:26:bd:54:
7d:9b:9c:73:e5:84:b2:cc:54:a3:28:23:14:0b:3a:
6a:58:f9:91:14:a7:93:59:2b:55:17:69:9f:ac:88:
65:27:68:a9:0e:a4:8e:b5:47:ba:7c:cd:36:91:11:
d5:12:a1:fc:1d:fb:37:26:fd:e4:38:51:57:a2:2a:
d4:55:70:31:28:42:50:a5:26:ba:e3:53:b2:34:b4:
e4:0c:e8:c7:7e:a5:dd:9e:6a:96:f3:56:3f:8c:88:
f0:c7:1b:b3:89:0b:cf:ad:b6:b6:e0:1a:2c:55:ba:
bb:70:a3:ab:fc:b4:6f:61:5f:88:3f:9e:5c:4f:a9:
33:a6:65:05:55:ac:db:7f:21:3d:5e:b2:0d:a6:5f:
65:a8:14:58:84:cd:e7:16:50:ee:20:35:d0:b4:3f:
8b:19:a6:4d:7d:15:03:2c:18:2c:bb:0d:35:c7:20:
2f:63:38:71:2e:5d:8a:d6:bf:da:af:86:e6:20:9d:
16:10:bd:be:2d:e4:50:fc:dc:7d:a5:1b:23:4a:38:
28:d4:6b:3d:a8:32:f4:00:e3:8f:76:ff:15:d5:34:
99:0b:38:ca:fc:c9:5f:ef:72:78:9f:37:f1:ce:94:
7a:7d:54:02:3d:01:be:45:d2:cb:6e:2f:1b:61:3e:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E5:46:36:D4:0B:82:DF:97:00:E5:82:82:4A:58:56:BB:32:33:C8
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e6:94:10:4d:62:0b:79:ba:d6:0c:0d:25:9c:a3:ee:29:f2:
b5:b3:a6:f6:32:dc:3c:55:f1:31:53:cd:01:f0:f2:1d:bf:b8:
55:8c:73:8f:52:12:b3:99:94:03:49:cd:51:5c:56:c1:a3:1e:
e5:26:86:a5:10:89:e9:a3:21:33:8c:d8:91:13:d8:78:e6:67:
3a:71:b5:c6:e2:aa:41:15:ea:f7:eb:7b:5b:c2:6d:cf:3d:c7:
52:69:93:eb:66:59:9b:e4:5f:c8:3c:74:f4:65:2f:80:9c:78:
df:37:09:b6:8d:0d:46:18:9d:7d:f0:00:a4:81:c0:4a:14:1b:
39:f4:1b:7e:2a:73:db:17:e1:bb:97:69:04:b1:b9:42:df:ff:
d1:a9:76:05:0c:13:89:1c:5a:53:68:c0:2b:6d:fc:96:1e:e0:
bb:02:9d:1e:ef:62:69:c2:d9:b5:94:73:fa:81:65:69:ed:34:
5d:26:95:5f:d4:e1:cd:ae:19:5f:7f:b7:3a:17:81:1f:55:44:
fd:0d:fa:67:22:65:01:e0:bf:58:56:dd:39:a8:97:95:f9:c0:
f7:2d:42:dc:60:65:01:09:33:9d:34:7d:58:de:43:fd:55:f1:
4e:2b:91:1a:23:c0:ec:a8:55:1f:a5:98:a6:c5:ba:a0:97:0d:
de:db:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:26 2026 by rpki-client