Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: A3lyZfJPJS8Kkepsr/GiOtJsdoLg8q0CeyNQ5Iuuxso=
Subject key identifier: A4:D2:84:47:8F:58:8D:4A:E4:7C:B9:34:AF:02:A4:FF:0E:CF:80:2F
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019F92110BD3AB8A4A8E8129053FDF094D42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 06CE
Signing time: Fri 24 Jul 2026 03:00:18 +0000
Manifest this update: Fri 24 Jul 2026 03:00:18 +0000
Manifest next update: Sat 25 Jul 2026 03:00:18 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: R/QqYp/2fS6uK7/HkskVeqThDxR6uVp4c2KX+lKp1ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:0b:d3:ab:8a:4a:8e:81:29:05:3f:df:09:4d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Jul 24 03:00:18 2026 GMT
Not After : Jul 25 03:00:18 2026 GMT
Subject: CN=a4d284478f588d4ae47cb934af02a4ff0ecf802f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:74:cb:bc:a3:5f:11:93:3d:33:42:6e:da:
fd:14:35:8f:68:65:72:32:b4:ae:a5:dd:36:67:8d:
39:10:ba:a1:15:81:f6:09:fa:7b:29:60:c6:3c:0f:
97:04:71:87:2a:3a:f7:79:9f:f8:83:90:8a:b8:06:
f2:46:7f:7a:73:5a:52:23:e5:01:4d:9a:ed:30:95:
ee:59:2d:9e:5c:de:bf:ac:a0:6c:99:64:a0:38:b3:
bc:03:2f:b3:f9:f8:8b:de:42:f2:0b:1f:25:c9:ba:
3b:2b:87:52:8e:de:49:8e:a4:11:d0:11:f8:1f:39:
90:20:c7:60:62:90:ba:9f:de:c4:06:e3:3d:7a:e4:
fe:eb:71:f8:83:58:58:58:ab:9f:ee:1b:02:60:89:
49:0e:16:a8:a8:aa:f1:84:a1:6f:c0:1c:f4:ee:26:
01:cd:9e:4c:99:4c:4b:02:ca:cf:27:bc:09:f5:e1:
b1:cf:ff:ad:b5:d0:89:6c:80:70:75:fa:0f:b1:be:
8a:d9:d8:e4:cb:c4:d1:0b:b7:0f:68:6d:24:67:d8:
ee:19:b2:6e:2d:cc:a1:45:d3:ec:32:79:8e:21:0c:
c7:03:4a:88:5a:d5:f0:61:5f:ec:6a:61:b3:36:78:
61:61:c2:10:1d:3b:74:73:12:ca:f1:36:a1:27:db:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:84:47:8F:58:8D:4A:E4:7C:B9:34:AF:02:A4:FF:0E:CF:80:2F
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:52:58:9d:0b:5c:73:69:c8:d5:a3:38:89:96:54:bf:38:4d:
23:ba:25:96:1d:aa:24:1c:c3:dd:b7:eb:d9:64:6e:b8:f0:13:
d7:6a:ac:20:60:f2:d3:0b:d0:59:c6:ee:86:44:37:6e:4f:01:
b5:93:2d:c9:cd:ab:8d:c0:57:54:ca:70:7d:e9:fc:cd:7d:0b:
fb:a0:b5:d6:9e:22:ae:4c:03:75:68:f6:07:3b:76:4f:c3:16:
1f:bc:7b:7a:c8:c9:2a:db:81:fd:48:c8:0e:dc:88:11:3f:b0:
89:a1:90:46:33:c7:76:40:92:32:83:fa:16:eb:38:2c:d0:19:
96:7b:45:ec:0e:82:de:ac:95:9f:2e:ef:28:e5:5a:bb:7a:ff:
c9:12:c9:57:26:db:17:f1:ae:7d:c2:f5:30:96:89:74:c4:ec:
3a:9f:a9:e2:75:7e:43:ae:b9:08:8c:a6:02:7d:48:c1:d0:e6:
06:1f:43:c7:d0:a5:a7:45:5c:7e:74:1a:82:b9:0d:6b:d5:2f:
74:80:a7:f5:3d:95:15:e5:ba:cc:0f:7c:12:7b:5d:1a:e8:64:
40:12:a6:85:c0:83:06:8a:3c:c4:50:95:a5:b9:53:d9:13:72:
78:0f:19:61:a2:32:33:72:92:86:4c:1b:4b:13:c4:9d:29:9c:
bf:44:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:19 2026 by rpki-client