Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
File: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json)
Hash identifier: e+26JraH7qrZy924D33QS5gZliB9VhkZFvFf2fXb5NU=
Subject key identifier: 5B:A2:C2:F7:E6:4A:BD:23:71:D6:1A:EC:97:E8:53:AA:43:E1:42:B6
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Certificate issuer: /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial: 019F93C94E055B5AA9F87894AA4FB9F976A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 11:01:11 +0000
Manifest this update: Fri 24 Jul 2026 11:01:11 +0000
Manifest next update: Sat 25 Jul 2026 11:01:11 +0000
Files and hashes: 1: 2r56-7c4rzlH_MkXpf4EVQxFefI.roa (hash: hSJijlNMgIG+anYeveOsK+OFXlzwcZe8DVit+XV01Ts=)
2: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: ogK81Kx0baWVmtJGCCXICiYX3tDzPkk0oWSre7Oc6oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:4e:05:5b:5a:a9:f8:78:94:aa:4f:b9:f9:76:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Validity
Not Before: Jul 24 11:01:11 2026 GMT
Not After : Jul 25 11:01:11 2026 GMT
Subject: CN=5ba2c2f7e64abd2371d61aec97e853aa43e142b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:e3:e9:8b:b7:98:ee:1a:47:c2:0b:32:cd:
d9:56:f6:e6:35:0d:b5:f9:91:af:a4:57:22:ee:81:
d7:60:65:33:63:b8:c8:5d:44:5c:43:6f:d0:55:8f:
b0:27:97:12:87:9b:11:7c:5a:8c:6d:e8:8b:67:c5:
3d:28:0b:f7:46:35:b2:b0:a4:11:f1:c4:ad:3c:42:
a8:96:de:fc:d2:71:7d:b7:64:47:12:e2:27:51:50:
44:c4:ab:b0:0e:db:6a:65:f1:16:4e:ba:08:58:53:
cd:58:18:0e:ed:5c:db:4d:ea:88:d3:f1:1f:88:8c:
da:d1:34:84:7d:ee:0a:54:6f:c7:b9:16:5a:52:b4:
5e:0a:4c:0f:94:53:85:b5:a7:24:b5:c9:a3:6b:5a:
b1:3f:ed:af:b5:60:77:cc:89:19:19:c9:f1:d4:73:
ba:c1:6c:8a:b7:3e:06:87:9a:b8:5c:06:b7:dc:fc:
1e:b2:66:f2:cb:e2:94:62:5b:5b:64:3e:5c:c9:e8:
5b:0d:99:2b:83:0e:bc:a6:a1:5e:6d:d1:58:eb:c3:
cf:63:25:47:51:e1:72:52:d5:4b:d3:c3:dd:a8:f7:
10:36:cc:8d:ed:50:0d:5f:ce:fb:e7:a5:75:d6:4b:
a5:a3:8e:b3:18:2e:59:01:d5:c9:a5:d5:22:f1:88:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:C2:F7:E6:4A:BD:23:71:D6:1A:EC:97:E8:53:AA:43:E1:42:B6
X509v3 Authority Key Identifier:
keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9f:8a:19:14:a7:81:f9:52:16:fd:0d:8b:c8:bf:c5:59:35:
34:f8:f6:c6:d0:99:84:1c:e4:52:d4:3d:6b:83:a4:ad:94:96:
0d:f2:7c:d4:5e:d7:e7:c8:85:f9:66:49:5a:64:5c:ac:63:b5:
83:3a:46:0e:cf:54:f9:c0:76:5b:76:6f:44:45:ee:fb:27:e5:
ef:de:7b:67:a9:77:5e:1e:a7:a8:a6:95:79:88:bd:cc:7a:ff:
59:e8:3f:8b:ab:e9:22:19:8a:ce:40:a4:91:c6:2a:86:7d:ce:
74:1b:e2:ac:57:20:12:01:39:55:82:9d:19:8e:fb:9f:33:9c:
c7:d4:89:9a:63:31:d6:e3:f3:a0:a1:db:7b:5c:64:d8:54:e2:
90:f3:0f:39:86:7d:f7:97:1d:61:3b:a3:aa:4c:b0:b1:84:6d:
19:45:ca:95:41:71:15:a1:31:ee:fa:bb:ea:dd:10:c3:cd:75:
72:15:9a:55:75:f7:a4:84:be:a9:33:67:95:ca:20:24:9b:44:
6d:bc:61:2e:42:98:50:62:04:45:94:35:4b:ce:f9:cc:08:d3:
54:89:e2:fd:ca:31:3e:ed:9a:84:57:57:cd:38:a1:5a:c4:a5:
71:2f:e9:a9:c1:1e:d5:af:c6:c3:d3:65:74:8a:d0:6a:29:8a:
ad:78:59:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:42:31 2026 by rpki-client