Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
File: hp2fc3396q0-lfhm6NMqZsT4oLI.mft (raw, json)
Hash identifier: mnNrXF7PtgVLbVx8Sf6RNN1NaOJyqeXqYGaIvn2qqFQ=
Subject key identifier: 94:AE:C9:ED:C6:D7:60:C3:5E:BC:93:C4:DB:A2:4F:CC:C5:B7:D3:A6
Authority key identifier: 86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
Certificate issuer: /CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Certificate serial: 019F8F7F1E2A99D2B032F6C3289800D793DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:40 +0000
Manifest this update: Thu 23 Jul 2026 15:01:40 +0000
Manifest next update: Fri 24 Jul 2026 15:01:40 +0000
Files and hashes: 1: 7Tyv75qflu1MI2EbiYIYOe-EMOs.roa (hash: VD2V/Wqx8qVUzX6JNvOF1zN+nPxKD5Y7QjXuUoG/ZVc=)
2: hp2fc3396q0-lfhm6NMqZsT4oLI.crl (hash: 31WbXvwipEJearGpPwh5SwNL6rMiwtO45ajhi5P3NZ0=)
3: ylnh5jHJGqU5w3NKWDSXLJQlbV8.asa (hash: DhXmkIGv0YJ5BrhiAQaTPI3U/c809JbcweCxcOd5t5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:1e:2a:99:d2:b0:32:f6:c3:28:98:00:d7:93:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Validity
Not Before: Jul 23 15:01:40 2026 GMT
Not After : Jul 24 15:01:40 2026 GMT
Subject: CN=94aec9edc6d760c35ebc93c4dba24fccc5b7d3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:82:ad:59:43:eb:01:38:ba:94:9c:c7:17:
95:05:08:52:de:b9:26:9a:67:cf:95:6a:8f:da:a8:
3b:91:8e:47:ae:e2:b0:cd:ac:06:87:2a:12:d2:6e:
b4:5f:1d:b2:41:61:47:c5:56:9e:38:69:72:0a:1d:
56:5c:a0:88:99:a9:dc:b6:d3:96:b7:a4:eb:f1:cf:
d5:87:6a:19:0c:3e:56:1c:b9:79:f9:d2:a1:3f:be:
99:d4:5a:47:3c:10:a4:62:45:ce:45:98:53:92:b4:
95:11:70:10:78:b3:58:9a:0a:ca:b6:5b:15:f4:b3:
6b:11:ce:0f:c4:3a:b0:ce:00:25:ae:76:a0:59:0e:
96:68:89:dd:7d:83:9f:9e:64:1f:b0:b3:12:8a:d9:
56:ed:8e:1f:d9:99:c5:c6:e8:91:a2:46:7b:f2:1c:
80:72:79:e9:2b:a4:37:c2:ce:ea:02:26:71:c5:c7:
c1:87:bf:14:59:bf:78:9a:11:0d:0c:c2:4a:22:ab:
47:53:f2:4f:f0:77:b8:31:41:3f:7d:3b:f4:fe:cc:
31:fa:9f:e9:dc:d0:ea:fa:e9:b4:b5:c1:7f:ad:d4:
15:4c:4d:6e:f1:4d:e0:9d:81:00:1d:06:b3:aa:b7:
08:97:4f:d9:71:1e:ee:fb:1b:62:54:ea:ea:99:c1:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:C9:ED:C6:D7:60:C3:5E:BC:93:C4:DB:A2:4F:CC:C5:B7:D3:A6
X509v3 Authority Key Identifier:
keyid:86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:dc:d9:15:2c:62:6d:5d:2b:28:31:6e:ec:3f:18:54:85:07:
51:fa:14:d8:f4:dc:f4:4f:3b:ea:70:d3:57:a9:4c:11:8f:5f:
6c:7c:a6:f5:75:98:a4:af:7b:b1:ad:10:0e:58:d7:4d:a3:75:
39:7a:8f:cc:74:95:ce:70:ed:a3:87:67:da:55:2d:05:f0:94:
de:72:18:51:51:f2:b9:0b:7b:65:ac:d3:5e:ae:16:4d:5b:d3:
39:3b:88:53:7d:dc:0a:0c:17:e6:29:fb:10:cb:b1:48:52:1a:
bf:fd:ce:f4:e9:4a:03:33:29:1d:18:23:be:80:8b:ea:07:be:
a3:5e:c8:60:a7:f5:e6:46:d9:60:9d:43:f6:0e:d6:56:c8:f4:
8a:c9:e9:c3:87:20:f0:74:8a:19:35:bc:15:55:26:9c:e8:45:
d5:8f:2d:66:ae:43:0d:d0:bf:80:80:82:67:15:27:44:ae:35:
7b:9d:48:16:e7:c9:37:ca:0c:7d:0c:f8:cf:1a:8b:69:83:55:
08:a7:5b:65:71:d7:87:d7:10:95:ae:b1:11:2f:9f:a2:81:62:
1e:d8:a8:d2:fc:87:22:a2:83:be:43:3c:d1:f5:ce:c4:72:ac:
e6:81:9f:bc:d8:eb:51:e5:82:38:6c:23:85:56:a1:bf:1f:ba:
b8:81:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:40 2026 by rpki-client