Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
File: hps2AP1zjmmNEv7yDhBuapTjtnQ.mft (raw, json)
Hash identifier: VjZsHXpq3tV88wqKzzyqq6O4Y3oyBWo146Ngf+x0diE=
Subject key identifier: 95:E2:B3:C4:CD:06:96:43:2E:CB:54:D0:CD:A3:99:8C:43:AB:A1:BA
Authority key identifier: 86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
Certificate issuer: /CN=869b3600fd738e698d12fef20e106e6a94e3b674
Certificate serial: 019F95EDEBCD01EA4DA0959277B47213C2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
Manifest number: 0EBA
Signing time: Fri 24 Jul 2026 21:00:25 +0000
Manifest this update: Fri 24 Jul 2026 21:00:25 +0000
Manifest next update: Sat 25 Jul 2026 21:00:25 +0000
Files and hashes: 1: D07dxDXxrFaWAK13Zm1gQWe6sqM.roa (hash: WEmuyO7ijZIUqK6Kdgpk4wxDQKr57OBRHR5wIMw0Uxo=)
2: hps2AP1zjmmNEv7yDhBuapTjtnQ.crl (hash: XsrH5NED6B0/qX/nDAa34DHJbtYFuVUWvkHYffznv+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ed:eb:cd:01:ea:4d:a0:95:92:77:b4:72:13:c2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869b3600fd738e698d12fef20e106e6a94e3b674
Validity
Not Before: Jul 24 21:00:25 2026 GMT
Not After : Jul 25 21:00:25 2026 GMT
Subject: CN=95e2b3c4cd0696432ecb54d0cda3998c43aba1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:48:6e:b8:d8:64:0c:d6:9b:dc:74:3e:27:
70:27:31:a9:e4:43:0e:3a:8c:3c:5b:c4:c1:df:52:
c9:81:29:ef:da:38:a7:68:ce:44:7c:34:a1:0d:c2:
4c:5c:ce:b3:59:8f:5a:bc:d8:6c:0b:3d:b4:74:a8:
18:f1:2a:20:4c:7d:6b:02:17:a0:2d:92:2a:7f:93:
49:8c:29:37:d4:4a:77:9c:a2:ec:92:9e:9f:07:98:
7b:28:d7:08:6c:d1:45:f8:0d:46:23:75:0b:21:a7:
f9:55:35:14:a3:4a:30:97:61:4e:d2:d0:2e:8f:79:
7a:3e:e9:ff:af:29:4f:f4:e3:bb:6e:60:12:e5:0e:
23:c2:b8:5c:94:ec:ab:63:6a:02:34:4a:ad:47:f1:
df:16:36:cd:ab:75:07:23:e3:ec:07:eb:af:63:f3:
79:42:5f:bc:58:4f:1f:3d:42:1a:2b:a0:f9:08:4d:
d3:5b:53:c3:75:00:c6:78:0c:40:52:2f:2a:e9:3c:
09:b1:0f:80:c0:50:34:86:cc:dc:17:22:8f:de:0a:
12:84:c8:54:29:d6:de:3b:ff:f4:d9:13:9c:ae:82:
36:13:79:34:d2:2e:b4:df:e2:a8:ed:df:35:93:c3:
3e:76:36:50:a1:1d:2a:10:48:81:64:d2:0f:87:93:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E2:B3:C4:CD:06:96:43:2E:CB:54:D0:CD:A3:99:8C:43:AB:A1:BA
X509v3 Authority Key Identifier:
keyid:86:9B:36:00:FD:73:8E:69:8D:12:FE:F2:0E:10:6E:6A:94:E3:B6:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hps2AP1zjmmNEv7yDhBuapTjtnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/609976-1ace-444f-bcb5-4243e88bd76c/1/hps2AP1zjmmNEv7yDhBuapTjtnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:04:d5:91:64:30:63:0a:d0:52:a9:d6:ef:c7:14:ce:42:d1:
dd:87:48:a2:41:b3:43:d4:3b:31:e8:ac:0f:40:0d:bd:c5:c9:
92:d8:fd:b6:46:49:60:62:42:82:c1:ad:8f:49:b2:af:aa:06:
94:12:cf:bc:f7:25:aa:3c:9a:d9:f9:0c:ff:0e:5e:de:b7:07:
a5:fd:78:0c:66:b4:5e:bb:3f:b4:90:55:90:44:39:c0:29:3a:
5e:9d:7f:f5:75:84:51:6b:08:4d:4d:a7:43:c7:6a:f0:31:f2:
8f:f8:5e:9a:a0:02:87:20:5d:68:fa:4c:ab:ad:0e:93:70:f5:
60:c9:01:c9:35:f1:e4:ac:a1:c5:a2:34:22:67:0e:3e:0e:f4:
1e:09:b6:f1:f3:36:53:b5:cb:cd:0a:72:30:e1:c5:6a:2d:fd:
c7:6e:0c:a9:18:78:f9:8b:d6:30:f6:c4:ac:de:22:2e:05:33:
ce:21:ad:84:6b:9f:a0:92:ce:db:7c:8f:40:fc:c5:e6:5d:ff:
b6:fd:15:59:80:ee:68:48:03:88:e0:29:05:00:8b:23:57:9f:
dc:3b:1a:e6:c8:8e:26:a7:76:7c:8d:da:49:89:00:a2:09:df:
82:99:63:40:a5:34:90:61:26:7f:9b:e3:40:56:ab:e1:15:e2:
2f:70:17:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:40:46 2026 by rpki-client