Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: OMfyntQAMnnenpjVspst9XyHGOyCUPPnvk8FXFYhc7U=
Subject key identifier: A8:DE:CF:9B:B7:2C:55:B2:D4:F8:6D:B5:1F:A2:5E:4C:66:19:E4:5C
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 019F946D663DD59396D9CBC9F9A504AAC39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 1866
Signing time: Fri 24 Jul 2026 14:00:25 +0000
Manifest this update: Fri 24 Jul 2026 14:00:25 +0000
Manifest next update: Sat 25 Jul 2026 14:00:25 +0000
Files and hashes: 1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: sdlrWQDVWhrahNhOiRiJL7GsiB0rAJeEikHcfrZ7MC4=)
4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:66:3d:d5:93:96:d9:cb:c9:f9:a5:04:aa:c3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Jul 24 14:00:25 2026 GMT
Not After : Jul 25 14:00:25 2026 GMT
Subject: CN=a8decf9bb72c55b2d4f86db51fa25e4c6619e45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:62:b0:ac:79:3b:d8:55:4d:00:40:94:1f:
24:9e:de:df:e2:90:ec:5e:a5:a8:66:7d:e4:f2:e9:
0f:54:df:ed:d9:8a:b8:25:2d:60:cf:53:4e:46:e5:
35:18:29:7f:4e:f1:fe:0d:62:99:a9:ae:35:d3:48:
62:04:ce:69:78:a1:fb:3e:af:56:35:27:29:d5:cb:
fb:e1:3b:74:79:6b:0e:ee:54:57:6f:a5:d0:0c:b1:
1a:6c:d8:b7:80:a8:15:4e:61:83:6b:e8:77:27:37:
1f:df:40:8a:2c:3d:63:c4:60:ce:ab:39:bc:70:5e:
71:ec:a1:df:a8:f4:9c:e0:ad:3a:32:d9:04:80:55:
c7:78:75:76:45:82:b5:70:53:9a:8a:f5:4c:a8:4d:
1e:80:7a:ca:6f:29:1c:ee:b1:67:ca:19:96:78:7a:
77:69:2f:a3:a2:77:ce:2a:7f:ad:62:cb:48:f7:23:
29:fe:5f:a3:cf:68:1e:d3:1f:95:ba:d8:94:f5:14:
d2:9e:2f:df:8d:8d:1f:84:bb:db:3b:7b:36:26:0b:
ef:48:d9:f5:ee:de:c2:d8:19:1b:03:38:97:32:50:
f4:64:a1:0f:b5:c9:a6:e9:62:c8:29:17:aa:03:ce:
24:4f:39:28:a9:9b:7e:54:25:58:c3:31:33:07:9d:
7e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:CF:9B:B7:2C:55:B2:D4:F8:6D:B5:1F:A2:5E:4C:66:19:E4:5C
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0e:9f:b9:6f:31:e4:2a:de:ae:4b:01:3e:de:81:a0:64:23:
10:93:d0:dc:73:51:ab:95:b1:27:14:72:06:1d:9e:7d:1b:0d:
8b:88:86:a6:21:79:fd:92:85:d3:22:fd:04:10:a1:b0:c5:29:
77:1e:a0:9b:af:9c:78:bf:24:5d:d8:ef:e9:f9:6c:69:99:c6:
e6:df:b3:5a:c5:3e:d4:fd:b1:81:52:03:54:a6:0e:7c:b3:c8:
23:61:49:53:0d:cc:85:3c:17:67:b2:3c:03:29:e7:6e:ff:fb:
bd:45:b4:6f:3a:1c:29:f3:8e:8e:3a:43:d4:a9:d0:ff:5d:83:
af:ad:68:c1:db:6b:4d:8b:d6:83:1f:e7:6f:16:34:27:4c:02:
d6:d3:96:37:f5:f4:70:44:a8:fb:ef:08:e0:45:67:c8:50:f8:
b4:a3:30:cf:13:58:27:8d:da:a4:99:f6:c8:f5:af:d5:ec:ba:
a2:79:21:89:a5:ea:9a:cc:d4:e0:9b:1c:f8:bb:a3:2b:c6:9a:
60:f5:95:9f:3e:dd:69:77:2f:b0:6c:c7:5b:f1:c0:72:14:fe:
2f:3a:c3:f3:5f:30:72:83:db:cb:c7:73:e4:33:9b:39:d9:bd:
6d:1d:f9:10:57:55:8b:c8:23:19:b4:eb:06:c7:d2:d1:13:cc:
58:dc:be:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:56 2026 by rpki-client