Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
File: hmuOBdk45F1lrjFNxnUjfeyDEaE.mft (raw, json)
Hash identifier: qEQ3WAP3s8VoQiL2SLx9qsaNzFIXZ8RPw0UgGqt/JzE=
Subject key identifier: 7F:68:EB:D0:75:22:6C:D9:84:69:ED:94:37:7B:00:AF:C8:A2:92:DE
Authority key identifier: 86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
Certificate issuer: /CN=866b8e05d938e45d65ae314dc675237dec8311a1
Certificate serial: 019F94DC75E4A3E242FBE87C376705BB3109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
Manifest number: 15E3
Signing time: Fri 24 Jul 2026 16:01:43 +0000
Manifest this update: Fri 24 Jul 2026 16:01:43 +0000
Manifest next update: Sat 25 Jul 2026 16:01:43 +0000
Files and hashes: 1: AXw1fMN4QVwh_fCCHDmmZdyjQ0M.roa (hash: 2a2VYvYjD+SKO9HMwLyzgAvBrGoGV8DCs63xNBs37UA=)
2: hmuOBdk45F1lrjFNxnUjfeyDEaE.crl (hash: P9D5iEklmlsL3cyJ7gfg9Kn+/XnpJofU6rze73iHsiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:75:e4:a3:e2:42:fb:e8:7c:37:67:05:bb:31:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866b8e05d938e45d65ae314dc675237dec8311a1
Validity
Not Before: Jul 24 16:01:43 2026 GMT
Not After : Jul 25 16:01:43 2026 GMT
Subject: CN=7f68ebd075226cd98469ed94377b00afc8a292de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:ff:a1:3a:81:26:27:11:9f:56:ec:a9:5d:
63:d5:c2:9e:ec:ee:46:a8:4d:fc:bd:69:f2:f5:e3:
d1:ca:b3:e7:8b:5c:de:a0:f5:a5:6f:6f:6e:9a:05:
90:0c:27:a5:70:49:a1:5c:5f:67:7d:15:1b:1e:58:
62:1e:d5:72:af:60:d3:79:bf:b0:c9:07:3f:70:e9:
1c:83:2f:63:b2:ed:15:a1:36:62:01:58:4f:69:ff:
a6:63:ed:64:2d:6d:e8:d9:3d:e8:8d:50:6c:e8:80:
13:e2:aa:a2:09:2d:86:31:7e:3c:d9:fd:3f:d6:21:
4b:1c:be:da:a5:15:9a:c2:30:cf:bc:cd:ef:5e:93:
9f:bd:df:30:c8:b8:82:b8:2c:01:ee:d9:91:3a:b1:
0d:ac:a0:3c:c0:f1:ce:d1:1d:ec:3b:d3:90:a9:b8:
88:cc:5b:22:7b:a3:3f:3f:c1:46:b0:82:eb:8e:a4:
92:79:23:bd:40:00:cb:4f:c0:f3:46:f2:c9:1b:dd:
b1:d0:8b:9b:85:e9:23:b3:38:a6:47:eb:59:ce:16:
32:18:de:b1:7b:0d:4b:27:21:8a:1b:24:97:1e:20:
17:2e:3f:f8:8e:81:72:19:e8:9f:ee:6f:e4:84:05:
43:81:e0:72:6e:4a:fd:77:f8:1f:2a:49:4d:e3:33:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:68:EB:D0:75:22:6C:D9:84:69:ED:94:37:7B:00:AF:C8:A2:92:DE
X509v3 Authority Key Identifier:
keyid:86:6B:8E:05:D9:38:E4:5D:65:AE:31:4D:C6:75:23:7D:EC:83:11:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmuOBdk45F1lrjFNxnUjfeyDEaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d5bce2-a92f-442a-a235-aa88a4ba58ef/1/hmuOBdk45F1lrjFNxnUjfeyDEaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:39:75:b6:f8:61:3f:1f:af:a3:87:f1:0b:84:34:02:61:1f:
e7:4e:33:ea:90:75:63:08:19:98:f8:92:92:0d:f9:0e:d1:6b:
92:96:b3:60:ea:1e:ad:cc:e7:25:f2:87:a7:6c:66:22:2d:c9:
e1:2e:81:a8:e7:e2:10:f3:42:eb:e0:52:60:c4:b9:e7:0b:78:
c0:cf:13:c6:a8:06:c3:be:a8:c3:64:b1:e5:f8:62:4c:96:53:
9d:8b:a0:f7:43:84:56:e6:d8:44:b3:72:14:fe:22:37:c3:3f:
04:27:5e:80:a6:42:bc:7e:8f:78:48:71:17:3c:71:5a:74:ea:
a2:1e:c5:5f:fe:d4:b7:77:a9:b7:76:04:46:fd:44:c7:95:ba:
ed:84:84:28:ec:02:7d:20:1b:6b:09:4d:aa:04:78:a6:61:1f:
b7:13:73:45:b6:4a:07:0d:58:6b:1b:5f:7a:71:54:a0:33:58:
df:41:7a:7f:49:64:b9:06:17:3d:b3:e3:38:07:f5:db:27:5b:
f9:b8:a5:bd:80:3f:26:b7:e5:b4:67:42:75:28:b4:bb:77:eb:
9b:d7:73:68:bd:ba:6e:88:ef:a2:da:36:00:5e:91:43:3c:0a:
29:c3:fe:2b:ae:68:68:89:df:44:e7:a8:f9:af:eb:fc:6c:98:
9d:1f:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:20 2026 by rpki-client