Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
File: 8HHkN5gsw0b26BfKZIknI-21QZo.mft (raw, json)
Hash identifier: 6jlwDch1OZ/Mq33/h5oiI3OjfvBLw5V60O/+jU3G6aY=
Subject key identifier: 46:D2:58:65:C3:6D:C2:C9:AA:E6:84:BF:10:97:77:5D:03:14:F9:0E
Authority key identifier: F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
Certificate issuer: /CN=f071e437982cc346f6e817ca64892723edb5419a
Certificate serial: 019F91A361F8E16F635FA33B1B1516ECF80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
Manifest number: 1328
Signing time: Fri 24 Jul 2026 01:00:31 +0000
Manifest this update: Fri 24 Jul 2026 01:00:31 +0000
Manifest next update: Sat 25 Jul 2026 01:00:31 +0000
Files and hashes: 1: 4dTiivW_bvCIIr9OKslRJ2ttAH0.roa (hash: nywsABEuvSZWyJVu4fBV0raW88OjCnUfbkwJDiN85oo=)
2: 8HHkN5gsw0b26BfKZIknI-21QZo.crl (hash: DR997Zwm300tVBecSPq2DPYirrpuG7Q4o1VwucDZg7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:61:f8:e1:6f:63:5f:a3:3b:1b:15:16:ec:f8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071e437982cc346f6e817ca64892723edb5419a
Validity
Not Before: Jul 24 01:00:31 2026 GMT
Not After : Jul 25 01:00:31 2026 GMT
Subject: CN=46d25865c36dc2c9aae684bf1097775d0314f90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2b:71:9d:e3:65:39:68:8b:bc:54:68:20:4c:
bb:28:28:1d:f8:b7:c1:0f:92:6d:fc:65:b8:35:cc:
5a:c7:99:f9:76:5e:3f:c1:04:e0:e8:f3:00:1b:19:
01:e7:9a:4b:2c:93:9f:3f:0d:63:26:66:23:44:43:
f5:2c:10:03:5e:6c:44:bb:9d:76:be:f4:6c:d0:9d:
d4:64:cc:95:49:a8:ee:2f:5c:8c:d9:55:e2:01:ab:
45:c5:28:47:ec:0f:d6:55:9f:1a:99:4a:9e:00:31:
31:4e:58:c2:7f:39:10:66:69:0d:f8:80:77:98:8e:
d9:ce:0b:2e:60:ab:a4:65:8b:4f:ce:66:2f:6d:e7:
6d:52:4b:40:e9:15:41:a7:e1:6b:a1:61:72:c0:57:
5c:f6:ef:f0:48:7c:51:8d:e3:1b:45:11:bd:7a:8c:
e9:c4:67:55:7d:79:0d:5d:1c:27:d8:94:13:50:c1:
4c:a7:b4:2c:fc:d0:c0:0c:ef:bb:87:4b:45:5f:d1:
cc:36:ba:82:f7:66:be:ad:ee:2a:ff:ad:f5:0a:8d:
1d:46:38:71:37:73:50:f7:c9:db:57:f2:ac:d5:a8:
ce:c9:19:57:42:a6:4e:c6:6a:eb:fb:e3:26:b8:de:
11:bf:0f:1e:68:e8:c4:06:6b:0d:60:96:bf:97:0c:
ff:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D2:58:65:C3:6D:C2:C9:AA:E6:84:BF:10:97:77:5D:03:14:F9:0E
X509v3 Authority Key Identifier:
keyid:F0:71:E4:37:98:2C:C3:46:F6:E8:17:CA:64:89:27:23:ED:B5:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HHkN5gsw0b26BfKZIknI-21QZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/00725a-19ef-4244-8897-78cb59b78a4f/1/8HHkN5gsw0b26BfKZIknI-21QZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0f:43:af:14:39:1d:ea:7e:94:ae:1a:35:13:ed:83:e1:83:
41:19:0d:b7:ba:63:30:bc:3f:c1:e7:8d:a9:41:85:80:34:cc:
75:c5:93:c3:95:05:72:0d:a1:c1:98:13:5f:da:39:8b:e2:a8:
27:da:af:2b:61:a1:25:a6:73:12:12:33:04:ca:2d:b0:d9:f6:
d1:0e:8a:4d:c7:ed:45:c7:78:72:f8:a7:a5:12:44:80:c7:5f:
6d:3d:b0:46:23:54:8b:09:af:02:cd:a1:e5:bc:ab:fe:25:70:
a2:9b:ee:c3:6a:84:a0:cb:32:db:ed:2f:68:09:9c:18:0c:d8:
3c:72:c8:35:a2:f9:c5:df:78:ca:a9:9c:6b:1e:24:cc:af:77:
93:d8:12:ad:60:50:95:4b:f7:5f:8c:a0:88:3f:ce:c7:cc:b0:
15:d5:7e:d4:ff:6b:85:aa:33:6d:24:97:3f:69:89:d1:11:5e:
e4:d9:01:05:1c:c3:69:02:6f:af:a0:92:72:05:02:82:bb:cf:
bc:48:0c:5b:6f:92:27:42:63:c6:d2:0e:71:a8:b2:f4:7c:26:
3a:a3:cd:19:d6:6f:52:99:50:52:7f:4f:a4:8f:5b:5b:13:71:
46:24:32:00:2f:32:84:e4:9e:e2:b2:d5:79:3c:60:f1:c1:ea:
8a:fa:b8:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro2H44W9jX6M7GxUW7PgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNzFlNDM3OTgyY2MzNDZmNmU4MTdjYTY0ODkyNzIzZWRi
NTQxOWEwHhcNMjYwNzI0MDEwMDMxWhcNMjYwNzI1MDEwMDMxWjAzMTEwLwYDVQQD
Eyg0NmQyNTg2NWMzNmRjMmM5YWFlNjg0YmYxMDk3Nzc1ZDAzMTRmOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApytxneNlOWiLvFRoIEy7KCgd+LfB
D5Jt/GW4Ncxax5n5dl4/wQTg6PMAGxkB55pLLJOfPw1jJmYjREP1LBADXmxEu512
vvRs0J3UZMyVSajuL1yM2VXiAatFxShH7A/WVZ8amUqeADExTljCfzkQZmkN+IB3
mI7ZzgsuYKukZYtPzmYvbedtUktA6RVBp+FroWFywFdc9u/wSHxRjeMbRRG9eozp
xGdVfXkNXRwn2JQTUMFMp7Qs/NDADO+7h0tFX9HMNrqC92a+re4q/631Co0dRjhx
N3NQ98nbV/Ks1ajOyRlXQqZOxmrr++MmuN4Rvw8eaOjEBmsNYJa/lwz/uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbSWGXDbcLJquaEvxCXd10DFPkOMB8GA1UdIwQY
MBaAFPBx5DeYLMNG9ugXymSJJyPttUGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEhIa041Z3N3MGIyNkJmS1pJa25JLTIxUVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wMDcyNWEtMTllZi00MjQ0LTg4OTct
NzhjYjU5Yjc4YTRmLzEvOEhIa041Z3N3MGIyNkJmS1pJa25JLTIxUVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8wMDcyNWEtMTllZi00MjQ0LTg4OTctNzhjYjU5Yjc4YTRm
LzEvOEhIa041Z3N3MGIyNkJmS1pJa25JLTIxUVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ9DrxQ5
Hep+lK4aNRPtg+GDQRkNt7pjMLw/weeNqUGFgDTMdcWTw5UFcg2hwZgTX9o5i+Ko
J9qvK2GhJaZzEhIzBMotsNn20Q6KTcftRcd4cvinpRJEgMdfbT2wRiNUiwmvAs2h
5byr/iVwopvuw2qEoMsy2+0vaAmcGAzYPHLINaL5xd94yqmcax4kzK93k9gSrWBQ
lUv3X4ygiD/Ox8ywFdV+1P9rhaozbSSXP2mJ0RFe5NkBBRzDaQJvr6CScgUCgrvP
vEgMW2+SJ0JjxtIOcaiy9HwmOqPNGdZvUplQUn9PpI9bWxNxRiQyAC8yhOSe4rLV
eTxg8cHqivq44A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:54 2026 by rpki-client