
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: UDvwVOc8n6/lEYqXKUPzgLARfcfDCGEZ9rGpsGH8fhw=
Subject key identifier: 21:7D:DC:66:FD:70:0A:C6:23:93:AC:46:DB:D1:D0:40:9F:CE:94:5D
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 019F8F47261B6655B050380F80193DED7DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 14:00:32 +0000
Manifest this update: Thu 23 Jul 2026 14:00:32 +0000
Manifest next update: Fri 24 Jul 2026 14:00:32 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: au_k5KTkHwmYgyGwQL9kaGDMGdc.roa (hash: TQ4e7aFpXjYOcX/z8GmwxlZOtaffODMat2Hj3Al3L2Y=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: pQD8V9SQaM8i4Kz5eEFi3gMs80+0iSuNaCWYNHsQEKo=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:26:1b:66:55:b0:50:38:0f:80:19:3d:ed:7d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Jul 23 14:00:32 2026 GMT
Not After : Jul 24 14:00:32 2026 GMT
Subject: CN=217ddc66fd700ac62393ac46dbd1d0409fce945d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:08:b3:57:12:42:f7:0e:18:86:81:3f:6a:
27:da:4e:76:26:bd:0f:d2:cd:9e:f9:9f:72:35:a4:
40:d4:20:20:7a:c9:37:1d:07:40:0b:c9:89:c8:9c:
18:e1:65:31:bb:04:b4:07:e5:dc:a3:5c:50:a1:8c:
cc:c9:fc:03:fd:fa:6c:2a:36:57:91:a9:db:de:76:
25:2a:d4:fd:9b:22:9d:40:4a:ac:1c:bc:07:0b:bc:
9d:90:35:0e:da:de:b9:f3:27:de:5c:39:9f:c2:26:
05:50:dd:9d:39:77:4e:9b:98:c9:9e:6a:e9:1f:af:
d0:b7:2f:7f:f0:51:72:84:f5:0d:d2:70:1a:87:d7:
84:f2:d6:1c:a4:b5:e3:6f:da:25:b6:79:8f:a1:2f:
11:8c:88:ff:5b:1a:a1:06:43:8f:7e:70:bb:dc:55:
6d:a2:04:2e:ee:27:5b:9b:2b:4e:78:3e:26:69:e9:
cc:95:e5:d8:64:28:83:50:c3:b8:71:77:7b:eb:09:
c7:f7:c7:63:40:a0:be:bd:e1:b3:1d:8d:93:40:35:
52:43:30:d2:aa:b6:27:14:b0:c2:5c:4a:a7:90:df:
43:78:00:dd:4b:e1:11:14:93:83:17:a4:ec:35:c5:
16:0d:b7:6e:fe:2a:7f:55:70:62:78:e0:1f:b0:76:
3a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:DC:66:FD:70:0A:C6:23:93:AC:46:DB:D1:D0:40:9F:CE:94:5D
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:92:04:34:a0:f2:ef:25:8b:a0:93:9c:bd:ea:1b:c3:88:68:
dc:8d:7d:4a:64:f5:fe:a1:ed:08:a2:dd:b0:d8:7b:41:9f:74:
95:c8:23:fb:9b:aa:b7:8b:7a:59:c1:0f:e7:3e:58:52:83:84:
c6:5b:46:26:8b:7e:a5:b3:15:65:b1:a1:41:e6:32:4a:d6:54:
5d:a4:d4:1e:92:04:bb:53:bd:56:04:57:28:7e:07:bc:e4:06:
bf:e1:5c:dd:ca:f3:34:92:f4:f3:8f:1e:ca:ff:6f:38:8d:9d:
e1:8b:98:99:82:cb:75:31:8f:6e:92:b9:c6:75:cd:0f:41:b9:
5f:ba:9d:11:a9:ea:b0:27:c2:03:7d:0d:36:c1:db:b9:9c:ec:
5f:fb:46:a1:54:a4:d8:c2:e5:0a:1b:9a:b6:42:eb:bd:33:b0:
ab:0c:c7:40:ee:73:b6:0b:aa:f1:31:87:cd:f4:13:ee:6a:b9:
fe:7b:8d:e6:c1:f6:e9:e1:9d:74:5a:5c:23:20:7d:78:72:81:
c9:5b:55:90:a5:3b:1c:21:29:7c:6c:a9:ee:a1:48:c1:cb:8a:
f2:b7:51:2b:70:ac:59:4e:b9:93:4f:44:6f:9b:6d:ae:76:46:
8c:e1:a9:fa:3e:5c:ff:07:01:cb:87:cf:fd:f3:a3:89:a0:cf:
7d:1e:05:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:04 2026 by rpki-client