Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File: hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier: mD2rmMqLMUmxnYVaMAAEDOa0DNFerqDZS8VYTE8v0KU=
Subject key identifier: AD:13:C0:8B:1F:AE:2B:AA:FB:5F:4B:46:06:92:44:B4:C7:6D:B8:19
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 019F91A3FF0737D81C1A8FFA0358DC84ED41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number: 0306
Signing time: Fri 24 Jul 2026 01:01:11 +0000
Manifest this update: Fri 24 Jul 2026 01:01:11 +0000
Manifest next update: Sat 25 Jul 2026 01:01:11 +0000
Files and hashes: 1: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: PNv/k3ijTXl8OYVK7ClER9sa8CyeeReYbDkp2NJStGI=)
2: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (hash: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=)
3: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (hash: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:ff:07:37:d8:1c:1a:8f:fa:03:58:dc:84:ed:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Jul 24 01:01:11 2026 GMT
Not After : Jul 25 01:01:11 2026 GMT
Subject: CN=ad13c08b1fae2baafb5f4b46069244b4c76db819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:7f:46:33:de:a0:e4:eb:75:b4:1c:7c:ad:
39:c0:f0:02:64:19:ef:4a:95:fb:5e:5c:a2:4c:f7:
92:a8:06:e9:93:ff:79:de:84:ed:06:5e:e0:5e:fc:
69:cd:60:78:30:71:f2:9c:4b:a0:43:7d:4b:ec:49:
74:0c:65:c0:cf:55:14:d2:32:48:ad:b4:b9:61:1d:
1f:22:ad:60:26:9b:e6:a0:a6:11:43:4e:b5:2d:69:
43:aa:e9:f4:21:62:eb:54:99:4e:1b:ae:94:f4:a6:
14:a4:57:90:e9:c7:69:28:02:3e:d1:96:a7:42:d0:
18:b1:fd:52:17:c8:aa:18:ad:55:d7:c4:83:16:eb:
fa:c5:a7:36:a1:73:29:92:b2:80:24:62:da:84:bc:
64:a9:8f:58:1c:6f:b8:ba:15:fc:72:f4:09:08:1f:
9d:8c:57:94:a3:b4:0f:8a:d5:ac:0d:b6:6b:f4:30:
6b:a4:d9:21:49:9b:cd:b4:02:a1:0a:6f:49:b3:84:
fb:81:9d:bc:d7:08:1c:75:8b:0e:65:81:d6:ad:b1:
5d:58:9d:1c:2a:bd:3e:7b:02:2a:d8:2a:2b:2d:c1:
6a:fa:ad:9d:93:7a:8b:6f:78:d7:ee:28:a0:a6:dc:
7c:91:bb:28:59:5e:52:28:12:98:1d:a9:59:f2:04:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:13:C0:8B:1F:AE:2B:AA:FB:5F:4B:46:06:92:44:B4:C7:6D:B8:19
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e6:59:28:c6:90:ec:e8:ff:e6:a5:38:f3:49:2f:96:2b:1e:
11:7b:f1:b6:d9:bd:72:96:cd:06:39:34:14:8e:bc:e2:42:e5:
fa:5e:ed:4a:fc:2d:f8:d8:94:b2:25:4d:c4:7d:60:57:3d:7a:
b4:2e:de:dd:b4:06:a4:7e:2c:50:df:a0:19:11:03:18:55:cf:
2f:69:db:69:8d:40:22:20:ad:3f:85:b5:86:ef:b2:ff:9f:eb:
88:ba:ae:71:16:cd:20:7a:1a:3d:cc:27:95:44:5d:5a:aa:3d:
31:ac:dc:90:cf:f8:5f:cf:71:7d:32:55:78:58:56:de:a6:8a:
7a:e3:de:9e:ef:db:04:bb:ea:9b:b8:81:a1:40:eb:32:04:a2:
e9:af:23:f5:08:46:12:25:01:3a:66:7d:33:bc:97:31:cc:0f:
e5:17:33:30:16:8f:6e:6a:7d:ea:b3:3d:b2:ea:6f:e9:27:13:
2a:b3:43:bc:1f:8b:84:87:3a:bf:35:da:95:ae:e8:55:a4:c9:
6c:c8:c4:8a:d6:bc:cf:69:bb:36:73:cb:55:9d:98:f2:25:88:
72:89:03:2a:47:ae:6d:c8:95:50:3d:db:2c:d6:e7:c3:2f:07:
a6:81:23:cf:b2:23:60:6f:e5:d9:d4:7c:fe:43:97:52:6b:1c:
e8:55:2b:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro/8HN9gcGo/6A1jchO1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDg1OGJjMmRjYmIzNzZkNzkxYTliZTlhZjE1MjAyMzg1
MzVkOWYwHhcNMjYwNzI0MDEwMTExWhcNMjYwNzI1MDEwMTExWjAzMTEwLwYDVQQD
EyhhZDEzYzA4YjFmYWUyYmFhZmI1ZjRiNDYwNjkyNDRiNGM3NmRiODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE9/RjPeoOTrdbQcfK05wPACZBnv
SpX7XlyiTPeSqAbpk/953oTtBl7gXvxpzWB4MHHynEugQ31L7El0DGXAz1UU0jJI
rbS5YR0fIq1gJpvmoKYRQ061LWlDqun0IWLrVJlOG66U9KYUpFeQ6cdpKAI+0Zan
QtAYsf1SF8iqGK1V18SDFuv6xac2oXMpkrKAJGLahLxkqY9YHG+4uhX8cvQJCB+d
jFeUo7QPitWsDbZr9DBrpNkhSZvNtAKhCm9Js4T7gZ281wgcdYsOZYHWrbFdWJ0c
Kr0+ewIq2CorLcFq+q2dk3qLb3jX7iigptx8kbsoWV5SKBKYHalZ8gTuDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0TwIsfriuq+19LRgaSRLTHbbgZMB8GA1UdIwQY
MBaAFIYIWLwty7N215GpvprxUgI4U12fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQt
OTkwYmIxY2NkMjBjLzEvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC84NjEzYTAtZDllYy00YzhhLWIzMzQtOTkwYmIxY2NkMjBj
LzEvaGdoWXZDM0xzM2JYa2FtLW12RlNBamhUWFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeuZZKMaQ
7Oj/5qU480kvliseEXvxttm9cpbNBjk0FI684kLl+l7tSvwt+NiUsiVNxH1gVz16
tC7e3bQGpH4sUN+gGREDGFXPL2nbaY1AIiCtP4W1hu+y/5/riLqucRbNIHoaPcwn
lURdWqo9MazckM/4X89xfTJVeFhW3qaKeuPenu/bBLvqm7iBoUDrMgSi6a8j9QhG
EiUBOmZ9M7yXMcwP5RczMBaPbmp96rM9supv6ScTKrNDvB+LhIc6vzXala7oVaTJ
bMjEita8z2m7NnPLVZ2Y8iWIcokDKkeubciVUD3bLNbnwy8HpoEjz7IjYG/l2dR8
/kOXUmsc6FUreA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:35:01 2026 by rpki-client