Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: XRBnqfZKo0guQaCjRpj3Az3fMrrST3kqef71ZNvV/WU=
Subject key identifier: BE:D4:97:2A:A2:32:56:09:28:08:A1:07:7A:CA:C2:FC:6C:AD:B5:8F
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 019F927F1D2D9971E3FF8E8E4D5AAB704AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 19E3
Signing time: Fri 24 Jul 2026 05:00:31 +0000
Manifest this update: Fri 24 Jul 2026 05:00:31 +0000
Manifest next update: Sat 25 Jul 2026 05:00:31 +0000
Files and hashes: 1: 1jXhnTlNcIH-F__GRf4PM4BYn8I.roa (hash: E3HlVuT6hxf5ksKsL0iXZwkml17Q9oBpWogpOAGlEwU=)
2: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: i/skdh35zsHGvnjw6O0WcgE9oh7rzgIsZDlNu64hzzo=)
3: 5n_LJIXVhPPzdEHOUXNI628ingY.roa (hash: NQCHGHitMzomWbvAOfmN/9PVUkWlzv9zSoGTskUkpNQ=)
4: uhVewxHevpMHT9Vwqhs2oxQFyCs.roa (hash: wVttK0CYjEZiRPDjwBZLejNRTkNAN3AqB1UHgInSwjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:1d:2d:99:71:e3:ff:8e:8e:4d:5a:ab:70:4a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Jul 24 05:00:31 2026 GMT
Not After : Jul 25 05:00:31 2026 GMT
Subject: CN=bed4972aa23256092808a1077acac2fc6cadb58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:0d:e8:04:38:96:63:cb:b1:84:9a:bb:47:
27:dd:4e:ef:af:dc:81:a0:09:0d:e5:d2:3b:66:f7:
28:6b:b6:ac:a7:19:5f:27:02:27:47:7d:14:0d:ac:
90:77:3b:bd:6d:76:f3:10:b2:ee:2d:3e:43:c7:8c:
00:64:ff:81:cb:21:ec:c4:f8:0b:75:b0:14:51:a2:
71:2f:75:ff:44:fb:4d:5f:e2:35:0a:d9:d5:c2:ac:
72:d0:53:da:f7:1e:85:d4:3d:4c:b5:65:a5:ce:1e:
24:91:00:d2:8d:86:b5:c2:b9:33:32:f1:a7:df:67:
f2:f8:32:d3:21:56:b3:ad:db:4d:64:80:2a:c6:5d:
ef:82:a5:bb:ec:18:e2:03:f2:1b:71:7c:2b:e0:19:
aa:0a:00:a9:83:e9:ce:d3:0c:15:e1:9b:92:96:4a:
3b:c1:f5:31:9e:39:ad:dc:c7:5d:d9:80:b4:78:a5:
7b:f0:50:82:25:2e:82:a8:26:d7:3c:14:da:4e:c6:
9f:96:4d:3c:62:d2:25:dc:75:26:e6:5a:45:20:3a:
d8:db:03:c9:55:83:16:85:b3:8d:a6:31:98:bf:0f:
e8:f2:2a:87:06:02:d0:d2:93:6e:8d:2b:fb:e8:cf:
91:a9:ec:2f:ee:57:9e:0d:6b:46:09:ab:e5:03:14:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D4:97:2A:A2:32:56:09:28:08:A1:07:7A:CA:C2:FC:6C:AD:B5:8F
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:cb:b1:24:0f:5f:a8:5a:0f:4f:ee:07:eb:1e:65:33:65:9c:
4e:ec:13:01:62:18:96:cf:2c:cf:f7:50:3a:73:5f:4a:43:c6:
77:76:bd:c9:9a:da:77:ee:9e:7d:00:c0:ee:24:f9:ef:30:49:
77:3a:92:3a:63:4b:14:c8:16:6c:32:88:fa:52:b9:3d:4e:74:
bb:20:45:a4:ea:30:77:36:6c:f8:2d:2b:f8:72:41:bb:f5:7a:
db:7b:a0:47:23:72:98:d2:fd:74:27:eb:86:d5:45:91:04:4c:
19:81:0e:3b:22:9d:73:2f:77:2f:a6:1f:76:2c:5b:37:23:fd:
24:cd:3f:f8:c1:56:88:d4:44:c3:fc:f3:de:78:d9:99:84:eb:
4b:f0:4e:d0:21:d0:cf:38:1c:4c:58:fc:1e:16:8f:9d:4a:74:
34:c6:bc:da:9d:d1:94:67:54:e7:8c:75:35:68:ef:b8:17:9a:
6f:28:33:14:46:40:e2:c3:eb:a1:44:3b:a4:fd:3b:d4:76:e5:
58:b5:19:25:49:80:7e:61:5e:8c:1b:7d:ed:82:5b:28:f2:5c:
a4:e9:eb:97:6c:06:8a:8c:18:d2:c8:ae:16:cd:5d:f5:d0:47:
e4:0f:4e:9c:25:fb:2e:39:10:34:aa:07:7b:5d:a9:48:bc:5e:
3c:48:81:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:20 2026 by rpki-client