Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
File: hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft (raw, json)
Hash identifier: xQwiRSdGZfH9aAyrbpfp7TwtaJpJQ7EihiEbyPJtIB0=
Subject key identifier: A7:CB:76:DF:9B:BA:53:AA:78:1F:BE:15:E9:95:BE:0C:BD:9B:2F:5D
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 019F8FEC5E766645FDCBC2504446288CC0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 17:01:00 +0000
Manifest this update: Thu 23 Jul 2026 17:01:00 +0000
Manifest next update: Fri 24 Jul 2026 17:01:00 +0000
Files and hashes: 1: 2nQB2E6BUhwfRdMk7xQATWi9kI0.roa (hash: O2K+jT0p/eGe0P+/wXfc4p3/RWSSlNcPnUldJ8hZwb8=)
2: ZiIT5OhZn0JiaasZbuP3uCS9AcE.roa (hash: i/9UjekMAEXyuNGuXA/iLPrAIaabwapuTorDmhrfiqM=)
3: gRe574DN90lJZ-bbAAqI3B__Ym0.roa (hash: mI4D0v2VpyRqI8+dI4PhrtBe5RLqPKBNt/GXRECvJ9M=)
4: hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl (hash: f0TTZwM50MsSc5bGe2TXcWDk+l8IpoizD5WRzVIyAug=)
5: lt2RQoiJxINGyPOZ-bRlph3vQrg.roa (hash: CGu5ggy6o1wED0YF45U1fR3Q8X7j53Rf+ZjOfgKxzaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:5e:76:66:45:fd:cb:c2:50:44:46:28:8c:c0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jul 23 17:01:00 2026 GMT
Not After : Jul 24 17:01:00 2026 GMT
Subject: CN=a7cb76df9bba53aa781fbe15e995be0cbd9b2f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:cd:38:43:7a:86:16:ed:07:9d:3d:96:78:
eb:02:41:b0:40:63:20:18:01:20:ce:b5:2a:6c:20:
dc:41:3e:d3:a1:08:0a:3f:1d:e3:b2:d3:18:d8:f6:
f3:e3:7a:72:dc:e3:7a:65:95:24:c5:db:3f:e0:d4:
9c:18:8e:74:4f:98:b4:fb:b1:a9:b6:59:5c:a3:25:
6f:ea:67:02:0d:68:39:c6:f1:e2:1f:c0:b9:ae:51:
5b:d0:09:50:b8:6d:9a:54:50:45:66:a1:d5:51:53:
2c:a2:e6:22:96:a8:31:d8:65:2c:85:f7:f3:ee:44:
d9:76:2f:73:3f:48:35:16:d4:34:ae:75:a0:ae:a7:
13:bc:28:24:e1:4a:5a:8a:8f:19:dd:60:d8:12:d3:
e8:be:dc:72:91:60:ef:32:a1:4c:77:ba:ec:a1:c8:
0f:2b:cb:17:a5:e4:13:3c:68:85:2f:f1:b6:47:3b:
84:90:ab:82:28:e3:54:c0:29:67:67:c8:ab:1b:76:
7b:a3:57:eb:97:49:05:bd:ed:bc:a8:c7:c0:ab:68:
e2:f1:19:9c:76:15:21:a5:eb:82:6c:57:d1:93:9c:
4b:5a:c2:a7:93:70:33:df:45:1e:05:9f:7f:ca:b8:
f2:cc:1d:47:95:f2:5d:54:b5:7a:d6:f8:84:1b:9d:
98:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:76:DF:9B:BA:53:AA:78:1F:BE:15:E9:95:BE:0C:BD:9B:2F:5D
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7c:b4:19:78:a8:b9:68:21:8d:41:97:a8:4b:3e:0e:5f:c4:
74:a9:ed:8e:6b:2a:94:f6:7a:d7:c4:b0:70:0c:4e:d1:9a:3b:
ef:01:d4:16:cf:c7:08:0b:d3:45:8b:27:1c:5e:dc:5c:0f:21:
fc:7a:7c:14:78:c7:75:d1:da:1d:c6:9f:50:26:64:1c:76:6b:
87:ed:90:92:b7:f9:d5:a8:c6:44:cf:e4:d8:76:de:bf:4b:0e:
fc:53:9d:f8:4f:1f:ea:48:0b:9e:0a:9d:1c:77:a3:0e:c3:63:
dc:70:66:28:46:f2:9c:6d:6b:6f:da:ac:1e:37:31:7f:c1:b7:
72:8d:52:47:03:93:90:7f:2d:41:67:a8:b1:c1:07:0b:53:1f:
0f:0c:98:ce:44:d5:ca:ef:b5:a8:34:7f:f0:69:f4:bd:1d:44:
6e:35:aa:19:e4:17:6b:25:a8:f6:a0:bd:eb:66:d7:54:00:c9:
85:a8:27:e6:72:ab:75:79:45:86:16:f4:10:e4:d0:80:3e:9e:
e2:40:7b:5c:2a:8a:e2:8a:e4:fc:75:37:6e:11:88:ec:90:05:
b7:af:6f:ad:dd:24:69:b5:50:32:15:28:76:ba:35:f0:de:ef:
79:bc:ac:03:cd:05:49:19:d0:e3:69:d1:c2:25:e1:81:6b:d5:
f6:bf:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:26 2026 by rpki-client