Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File: hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier: CAmIfLCxxVgNLX7rZv1dJkAVjawALYkKewyGIn0PEKI=
Subject key identifier: C4:8F:EC:78:77:6A:37:14:84:36:45:6A:33:DE:40:F4:D4:0C:10:4B
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial: 019F92118D944E6E0B35C52EA92A06B34AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number: 1600
Signing time: Fri 24 Jul 2026 03:00:51 +0000
Manifest this update: Fri 24 Jul 2026 03:00:51 +0000
Manifest next update: Sat 25 Jul 2026 03:00:51 +0000
Files and hashes: 1: EApMV8-N-zmao3CAo-NQpD3Lz2A.roa (hash: aR54mqSnxFgOPc79I9yN0jBUTDGkCFj+YEV/eOtu4c4=)
2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: hVAcBineHQeNfHNVAOLFWXprrUe6IKfd1Gks7zJHz0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:8d:94:4e:6e:0b:35:c5:2e:a9:2a:06:b3:4a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
Validity
Not Before: Jul 24 03:00:51 2026 GMT
Not After : Jul 25 03:00:51 2026 GMT
Subject: CN=c48fec78776a37148436456a33de40f4d40c104b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:92:dc:52:b3:3b:3a:b8:46:56:72:05:20:
0d:b8:f4:81:d4:3d:33:d0:7b:ee:85:cb:2c:84:7c:
c7:86:fa:3a:3f:cb:70:6b:f0:a4:7f:f5:d3:23:9a:
43:00:d5:b8:c9:ea:b2:c0:92:c3:e5:f3:6d:a5:55:
08:03:03:28:65:e6:ff:e9:4a:25:9a:30:d5:a6:5b:
1f:d8:2d:cb:b2:c4:85:59:65:1b:97:96:91:ee:e3:
dd:68:53:34:6c:e1:3c:16:03:5a:63:ad:90:01:0a:
50:e9:55:5c:12:58:2a:84:b1:da:0f:06:66:ba:1f:
1a:cb:20:b7:eb:68:22:44:b9:b4:75:7e:03:c6:e2:
64:31:0a:31:f9:8f:9a:1b:df:ac:51:76:cb:84:7c:
a5:54:36:aa:25:c2:69:63:29:1a:93:4c:89:c3:df:
b0:7d:6f:5b:3e:fe:d2:19:8a:a7:99:fb:34:44:1d:
b5:5a:9c:3a:b6:75:ab:1c:a9:72:9c:c6:00:35:02:
44:4d:b5:56:87:18:ad:0f:39:63:63:c4:03:66:5b:
05:ad:1d:50:0c:fc:8d:c3:65:29:c1:73:40:49:f7:
c6:13:22:75:75:bb:5b:ee:6a:b1:11:32:83:8a:21:
43:f1:1d:08:a1:b6:19:66:37:62:c3:39:70:f4:10:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8F:EC:78:77:6A:37:14:84:36:45:6A:33:DE:40:F4:D4:0C:10:4B
X509v3 Authority Key Identifier:
keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6e:e8:b5:0a:e9:09:28:e4:ca:08:e1:4d:1e:b3:a7:fa:cb:
fb:35:0b:bc:2f:8f:de:e0:62:47:ad:a0:77:6f:3a:14:f8:24:
bd:dc:98:1e:81:af:7b:04:39:7c:e3:0e:d2:17:3a:9f:94:90:
81:5f:c7:5a:75:76:07:fa:fb:34:6a:4d:60:d1:e4:e9:a1:3c:
c2:29:f9:b9:c2:62:ac:9e:bb:7c:89:d9:51:d8:ee:c1:3a:22:
73:96:79:d1:e0:4e:bc:e9:6e:d1:fd:5a:24:b4:e7:9d:0e:ac:
c3:ac:29:bc:50:43:3d:43:d7:ae:98:6f:d7:8d:7b:33:dd:2c:
01:4e:c8:22:8c:b6:07:42:06:01:c0:ee:fd:76:20:74:32:86:
a7:79:cd:0a:d7:15:55:e5:fe:ad:96:c9:67:18:4f:5a:9c:8f:
04:7f:05:e2:04:62:b8:94:d2:0b:70:5e:23:3f:f4:7f:a0:9e:
16:0d:e7:28:23:42:20:d8:ea:aa:48:f1:15:c7:6c:eb:31:a7:
91:f7:65:eb:50:5d:21:1d:d8:18:4d:e7:ca:3b:15:43:90:4e:
8d:fa:aa:8d:de:d3:f8:ff:f1:33:ed:89:85:86:bd:d2:ed:ae:
cc:b3:f7:48:33:e1:25:55:98:da:74:a9:64:20:ef:71:26:b1:
81:23:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:30:10 2026 by rpki-client