Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
File: hB6IIdAaloi57nryrruVnLvtBys.mft (raw, json)
Hash identifier: 4OaPTXsFO0rm4CtOn0exkoeLyubZMZrx0sNrFOomAbI=
Subject key identifier: 94:15:2C:36:9E:78:44:D3:6D:9F:81:C4:1C:32:09:70:1F:57:CB:4D
Authority key identifier: 84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
Certificate issuer: /CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Certificate serial: 019F946D57534BC5F89953F6AD6E1A391665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
Manifest number: 01FD
Signing time: Fri 24 Jul 2026 14:00:21 +0000
Manifest this update: Fri 24 Jul 2026 14:00:21 +0000
Manifest next update: Sat 25 Jul 2026 14:00:21 +0000
Files and hashes: 1: OBBBpbRLtAoopWvDF4V0_36vRjc.roa (hash: rORQCAXSnhZhLeVmf7l/rxG4Y1xlgxBiqBOAQvHavUw=)
2: eQ8pUqqadp9cp4FYzeNplhCqiz8.roa (hash: RF09/EJZQF5XIgJSe7QHfYgaZkhCRVhxSpLB2BRdPks=)
3: hB6IIdAaloi57nryrruVnLvtBys.crl (hash: 1fTs3yp1x6DUExkzILxt4wylCtq5Mj4xBn3mDBIgFDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:57:53:4b:c5:f8:99:53:f6:ad:6e:1a:39:16:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Validity
Not Before: Jul 24 14:00:21 2026 GMT
Not After : Jul 25 14:00:21 2026 GMT
Subject: CN=94152c369e7844d36d9f81c41c3209701f57cb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:10:14:9f:3b:e2:a5:bf:cb:a8:58:61:89:
4f:92:22:0e:36:1f:7f:76:81:f7:df:ea:8d:a7:a2:
24:44:d7:56:a3:1d:51:08:0d:4a:41:fe:ce:4b:43:
12:6f:a1:22:25:a0:ca:c8:37:ce:1d:bc:30:e1:5e:
6c:51:c8:ff:e2:aa:6d:2b:61:20:e2:63:44:57:ed:
9f:25:02:97:46:8a:60:bf:d9:44:9e:47:f9:a4:6f:
ce:64:9f:aa:90:7b:f5:3f:95:29:30:08:3d:1d:ca:
6e:f3:d5:e7:95:3a:94:30:ba:5d:3e:37:e6:90:c8:
60:e8:6b:a9:fe:b5:78:0e:fd:b3:5c:bb:9b:76:37:
58:75:70:4d:f6:c9:f1:b9:22:dc:75:9a:5c:43:ef:
45:43:42:e8:00:7f:2f:61:bb:02:88:de:a3:f1:06:
3e:5f:2a:90:04:61:54:4a:2b:4c:d5:9e:63:c6:b5:
b7:11:8d:b3:b6:6b:45:20:27:05:75:81:85:56:07:
46:2d:9b:4e:e9:ab:4a:ea:43:93:1b:c1:5d:9c:f8:
88:ed:25:38:36:7b:fc:52:c0:2c:07:e1:3b:79:e5:
9b:41:db:2f:1e:8e:74:e1:06:61:ed:cb:63:55:55:
14:1d:e5:08:b4:40:8b:51:e1:ea:df:55:fb:fc:a1:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:15:2C:36:9E:78:44:D3:6D:9F:81:C4:1C:32:09:70:1F:57:CB:4D
X509v3 Authority Key Identifier:
keyid:84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b1:1e:44:70:b8:d0:69:e3:24:09:50:f5:e7:b2:f3:e3:f1:
b3:23:3b:2e:26:8c:40:5d:90:4b:cb:7c:08:f9:8d:f3:0f:eb:
0a:90:76:17:64:24:3e:d4:ed:01:01:5f:92:b6:57:fb:9b:14:
82:77:ba:2d:59:14:37:16:53:6a:af:0a:7c:6e:4a:cb:1c:6d:
f7:7e:b0:05:5a:f3:d3:37:a0:9c:40:2f:f8:21:6d:6b:3e:7e:
5e:03:65:c1:cb:78:77:7a:e1:0d:07:5d:68:cb:2d:80:89:57:
0c:92:4a:f8:12:ce:52:2b:c9:b4:bc:5e:6a:4c:45:2f:6f:4f:
1d:08:20:54:5d:b5:69:60:c2:06:e4:57:41:9c:cb:40:82:e4:
ef:40:ed:6a:2f:22:b1:15:1d:06:f3:af:2c:04:4a:e1:21:3b:
b9:5a:ac:bb:80:00:29:4a:89:7a:81:69:c1:d8:1c:e4:83:fd:
38:2a:f2:cb:3c:d2:2e:97:6f:f6:c0:53:cc:d2:c3:85:44:e7:
10:f6:ed:15:79:24:bc:d6:3c:e2:19:a7:a3:9c:8a:54:5c:9a:
33:e9:79:c8:f0:d1:ee:96:c2:3d:10:e6:c6:13:32:f3:5e:59:
7e:af:30:a2:74:bf:eb:5b:a3:e3:e1:c0:b8:a0:57:30:f3:65:
7c:c1:48:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:10:22 2026 by rpki-client