Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
File: hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft (raw, json)
Hash identifier: PJ5m1/xFo8SATP7eBuwEVaK9+NmDu17n6eu20orYOY0=
Subject key identifier: 54:F3:6D:C7:35:3A:C5:CF:49:45:2B:7F:4E:98:5E:B4:B6:3C:E5:FE
Authority key identifier: 84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
Certificate issuer: /CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Certificate serial: 019F94A51C3FEC58506727B449E7DBBF518B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
Manifest number: 0CE3
Signing time: Fri 24 Jul 2026 15:01:16 +0000
Manifest this update: Fri 24 Jul 2026 15:01:16 +0000
Manifest next update: Sat 25 Jul 2026 15:01:16 +0000
Files and hashes: 1: GPPNPmR8KUY_sEY8Xyw8dhEolxg.roa (hash: JjmXr+ibRaRGfx0pfBbomv1IH9Jgiuy25aSKoWiXJmg=)
2: hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl (hash: oFMSM5HxLUJaO4g68nlVKJReQyD+oDikQXYoNA1FpyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:1c:3f:ec:58:50:67:27:b4:49:e7:db:bf:51:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d601a8b0ea5cb24c5ec4f85d2267d821931c02
Validity
Not Before: Jul 24 15:01:16 2026 GMT
Not After : Jul 25 15:01:16 2026 GMT
Subject: CN=54f36dc7353ac5cf49452b7f4e985eb4b63ce5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:63:ed:50:36:80:fd:1e:23:e2:74:07:f4:
38:39:3b:0e:e2:0b:f1:c3:bf:12:58:ca:53:6d:d7:
b6:4e:ce:e5:a1:79:e0:cc:08:24:2f:09:ca:91:99:
c1:f7:aa:3b:6c:7c:21:50:67:b9:b3:5f:be:5b:76:
09:14:45:97:31:49:42:a3:1c:8b:c3:c3:e2:e9:37:
3e:58:26:2a:80:f8:37:2e:12:c4:28:34:f4:f3:c3:
61:4b:84:33:f8:8c:e7:c9:74:67:1e:74:4e:f0:aa:
d3:38:be:d9:91:40:25:61:d1:aa:66:47:d6:5b:52:
0a:2d:b8:49:12:6a:81:fd:16:35:ae:45:39:51:bd:
fd:ff:11:b9:a5:58:10:3f:4c:89:0c:1d:5f:39:c7:
76:f3:6f:f5:4a:fd:40:42:e9:85:9b:23:04:92:3a:
6c:af:49:d9:89:cc:6f:4b:bb:c7:ec:86:2f:79:f9:
a9:33:56:08:f3:9f:e1:65:01:de:1e:ef:bc:07:ff:
fd:bd:5e:d1:a7:04:44:f2:46:64:55:ad:87:ff:66:
e6:48:f6:74:6e:bc:a5:70:91:a9:13:98:d4:dc:16:
d6:dd:bf:35:df:79:66:ca:50:1a:1f:4b:e7:ae:f2:
2e:0f:98:5f:8e:18:be:79:6e:c5:c7:e9:78:c7:e1:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:6D:C7:35:3A:C5:CF:49:45:2B:7F:4E:98:5E:B4:B6:3C:E5:FE
X509v3 Authority Key Identifier:
keyid:84:D6:01:A8:B0:EA:5C:B2:4C:5E:C4:F8:5D:22:67:D8:21:93:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYBqLDqXLJMXsT4XSJn2CGTHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/250946-da66-4a94-bae6-ee77d75c325e/1/hNYBqLDqXLJMXsT4XSJn2CGTHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:03:d6:41:17:a4:66:ad:b4:94:0b:6b:10:47:13:86:7c:db:
e5:ea:95:1b:0f:a9:0f:ca:93:82:2b:fa:b8:85:3a:cb:e1:c3:
88:0d:42:f7:67:0b:20:d7:da:66:17:7f:8d:9b:c3:f6:f5:54:
c9:af:53:e4:24:d8:d8:88:7f:86:48:87:af:07:b5:6b:36:f1:
ea:80:c2:8b:43:4e:9f:ca:cc:31:cd:be:b6:6c:9d:99:c4:f8:
af:e3:9c:14:f6:7a:6f:c8:22:96:52:b5:cb:8c:84:22:87:e2:
1c:0f:fb:b9:92:f4:5a:bf:b8:00:80:95:c8:58:1f:a5:c8:7c:
8b:d9:a4:be:93:1e:07:19:29:c1:fe:c5:b5:39:4e:e7:ed:ee:
70:f1:76:5f:c6:94:0f:be:af:24:a1:07:b7:61:a4:e3:99:7a:
40:1a:a5:fd:30:4c:78:0f:72:7b:99:ff:82:08:83:16:5d:3e:
6b:20:78:75:0b:3a:39:4a:bf:db:f3:75:66:08:43:29:6a:d7:
1f:66:e3:6e:18:ce:5c:de:58:09:fe:36:7a:31:52:66:b7:24:
54:48:fa:b9:e5:23:0a:df:24:42:18:95:e8:8e:66:16:80:04:
03:9e:dc:40:df:f1:66:d7:d3:e1:51:2c:dc:c5:8b:36:04:e3:
7d:5e:08:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpRw/7FhQZye0Sefbv1GLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDYwMWE4YjBlYTVjYjI0YzVlYzRmODVkMjI2N2Q4MjE5
MzFjMDIwHhcNMjYwNzI0MTUwMTE2WhcNMjYwNzI1MTUwMTE2WjAzMTEwLwYDVQQD
Eyg1NGYzNmRjNzM1M2FjNWNmNDk0NTJiN2Y0ZTk4NWViNGI2M2NlNWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0pj7VA2gP0eI+J0B/Q4OTsO4gvx
w78SWMpTbde2Ts7loXngzAgkLwnKkZnB96o7bHwhUGe5s1++W3YJFEWXMUlCoxyL
w8Pi6Tc+WCYqgPg3LhLEKDT088NhS4Qz+IznyXRnHnRO8KrTOL7ZkUAlYdGqZkfW
W1IKLbhJEmqB/RY1rkU5Ub39/xG5pVgQP0yJDB1fOcd282/1Sv1AQumFmyMEkjps
r0nZicxvS7vH7IYvefmpM1YI85/hZQHeHu+8B//9vV7RpwRE8kZkVa2H/2bmSPZ0
brylcJGpE5jU3BbW3b8133lmylAaH0vnrvIuD5hfjhi+eW7Fx+l4x+FoPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTzbcc1OsXPSUUrf06YXrS2POX+MB8GA1UdIwQY
MBaAFITWAaiw6lyyTF7E+F0iZ9ghkxwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5ZQnFMRHFYTEpNWHNUNFhTSm4yQ0dUSEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yNTA5NDYtZGE2Ni00YTk0LWJhZTYt
ZWU3N2Q3NWMzMjVlLzEvaE5ZQnFMRHFYTEpNWHNUNFhTSm4yQ0dUSEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8yNTA5NDYtZGE2Ni00YTk0LWJhZTYtZWU3N2Q3NWMzMjVl
LzEvaE5ZQnFMRHFYTEpNWHNUNFhTSm4yQ0dUSEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgPWQRek
Zq20lAtrEEcThnzb5eqVGw+pD8qTgiv6uIU6y+HDiA1C92cLINfaZhd/jZvD9vVU
ya9T5CTY2Ih/hkiHrwe1azbx6oDCi0NOn8rMMc2+tmydmcT4r+OcFPZ6b8gillK1
y4yEIofiHA/7uZL0Wr+4AICVyFgfpch8i9mkvpMeBxkpwf7FtTlO5+3ucPF2X8aU
D76vJKEHt2Gk45l6QBql/TBMeA9ye5n/ggiDFl0+ayB4dQs6OUq/2/N1ZghDKWrX
H2bjbhjOXN5YCf42ejFSZrckVEj6ueUjCt8kQhiV6I5mFoAEA57cQN/xZtfT4VEs
3MWLNgTjfV4I7Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:15 2026 by rpki-client