Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
File: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft (raw, json)
Hash identifier: N9trOGSC4r1aBmuUb1okr261Tlqsm5IAmjOQPoJ5h6A=
Subject key identifier: 66:8E:C6:42:20:AF:7B:D3:F0:33:B6:80:BD:81:97:7D:E9:42:A8:BE
Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Certificate serial: 019F9323A88490511610484FC23C355F5A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 08:00:15 +0000
Manifest this update: Fri 24 Jul 2026 08:00:15 +0000
Manifest next update: Sat 25 Jul 2026 08:00:15 +0000
Files and hashes: 1: hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl (hash: m063xoEaNFpFPmeDi/RJCPny+2uYkqZHyjz7dKzAFMQ=)
2: yfgLpeAIQyC5y-W4IaKpK2L1_yk.roa (hash: oWLVNeWnqZmGvQRxIBi9f/jmIyhTqkilRZKKYPg6VeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:a8:84:90:51:16:10:48:4f:c2:3c:35:5f:5a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac
Validity
Not Before: Jul 24 08:00:15 2026 GMT
Not After : Jul 25 08:00:15 2026 GMT
Subject: CN=668ec64220af7bd3f033b680bd81977de942a8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:12:57:1a:87:b2:c2:5d:2e:13:fc:a5:0b:
06:74:d4:e8:90:9e:cc:3f:7e:a1:94:9d:00:9c:dd:
86:90:5c:96:f6:ed:01:6a:8f:bf:54:9c:6f:cf:de:
76:26:b6:99:dc:d9:b1:f8:7d:7d:d6:41:41:30:e0:
3a:81:96:77:7e:9c:52:d9:46:db:67:73:0c:96:a8:
82:2e:92:b5:d0:06:f2:6d:2c:5d:49:78:91:a2:5a:
d8:88:3e:a3:0a:34:df:d6:65:9f:77:1d:48:83:02:
5c:5d:fd:de:c9:d2:2f:d4:ac:35:b7:61:04:16:a0:
63:9f:53:4a:13:8b:dc:c0:e7:cf:0b:3e:02:0a:13:
af:d6:b6:f6:1d:97:e8:e3:b6:84:0b:c1:39:3e:09:
5e:dd:9b:ad:de:1f:28:e2:66:03:12:e4:fc:a6:53:
bd:95:a5:30:cc:66:2e:6e:83:99:da:f4:48:17:ee:
dd:5a:28:dc:32:31:bc:45:9b:66:93:dd:e5:89:19:
3f:6b:88:a0:02:2d:56:61:4d:3a:d6:35:64:85:05:
03:a3:e7:0d:dc:b0:67:41:ae:42:f0:ab:26:b1:a5:
d6:28:5a:c2:de:57:89:fd:e4:2e:26:f5:aa:7e:38:
7b:63:7a:d6:3d:f2:86:6b:8d:b4:2a:95:dd:db:8f:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8E:C6:42:20:AF:7B:D3:F0:33:B6:80:BD:81:97:7D:E9:42:A8:BE
X509v3 Authority Key Identifier:
keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a1:ba:40:c1:eb:16:d5:b4:6a:89:c6:96:ff:2a:07:c9:97:
03:01:0d:6e:99:3b:97:a2:92:5a:23:43:09:2b:5c:55:79:e9:
c9:d0:ca:0f:8c:41:08:2f:dd:0d:31:b7:b9:6d:44:f5:22:78:
54:a0:21:ef:03:6b:5e:03:60:e8:eb:b9:b2:46:85:90:fc:2d:
83:72:d4:e8:d9:e9:65:df:20:a0:4e:87:11:22:7c:79:db:b2:
54:8b:8d:cc:e6:05:a1:7f:d5:57:05:75:f1:b4:14:c7:cb:58:
e9:fa:16:cc:db:cb:12:51:c4:8e:0b:8b:86:25:e5:e6:59:d5:
3d:3f:5d:ad:c5:00:b2:3f:b6:40:1b:34:cb:d6:80:64:fc:90:
c2:aa:8e:7b:26:78:e8:35:a5:55:4b:df:67:8b:ad:a7:70:e9:
ff:70:2f:c9:66:e0:28:db:92:fe:a4:e1:39:5d:d2:88:99:40:
11:49:8c:4a:37:91:21:c5:e4:07:1f:c4:89:2e:7d:7b:3b:2e:
61:64:54:67:3e:1c:a9:e5:88:c3:b4:c5:97:b7:fa:50:3e:56:
9c:ad:89:a6:33:45:7f:41:f5:4a:d5:22:69:5c:0c:62:a8:19:
da:11:a4:c1:66:60:26:73:89:6a:ec:19:ee:21:75:fc:51:e1:
da:c8:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:17 2026 by rpki-client