Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: YXMkdcnuG3SsFuLCY/KEjmhzY/ZjwnjqRxFObgrYfoo=
Subject key identifier: AA:C5:0E:50:13:05:3E:E2:EE:90:7D:CA:DA:83:19:CD:AC:73:B1:9C
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 019F9436C2AD14174678C407B84EDD1D3AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 195C
Signing time: Fri 24 Jul 2026 13:00:44 +0000
Manifest this update: Fri 24 Jul 2026 13:00:44 +0000
Manifest next update: Sat 25 Jul 2026 13:00:44 +0000
Files and hashes: 1: HGJ3ZEnNk3YpVjp51uFW7fVRLgc.roa (hash: cUV79+nq1UfEgnpECvrj1jXV8gIvKA75fQt4Y8wK7Xg=)
2: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: VDcsPUKohm0t7qmYHaTWHDsOfLF4+nrDjMS9BEwLwb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:c2:ad:14:17:46:78:c4:07:b8:4e:dd:1d:3a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Jul 24 13:00:44 2026 GMT
Not After : Jul 25 13:00:44 2026 GMT
Subject: CN=aac50e5013053ee2ee907dcada8319cdac73b19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:a7:0b:b5:9c:ee:ba:22:f5:27:97:d2:d1:
20:06:66:07:37:d0:0a:7b:71:88:c4:d6:b4:54:cd:
78:53:b4:7c:6f:af:84:b3:12:10:8c:70:23:ca:3b:
04:f2:de:54:82:c5:91:14:72:73:04:02:49:fb:b8:
c6:fe:d2:50:1c:1f:d7:11:bd:8c:81:52:67:fb:e0:
4b:a0:67:f8:b5:53:32:95:31:39:19:7f:2f:82:9a:
16:37:63:32:46:eb:da:a4:2f:6e:a2:5f:4e:1b:f8:
df:db:ce:f6:c2:ff:f3:4c:05:22:67:34:ee:1a:f7:
81:07:c2:75:91:45:dd:19:b6:92:9b:1c:6d:50:18:
4a:a8:a1:d9:f4:e6:4f:a2:60:e4:3d:5f:3e:13:9c:
43:e8:28:18:b4:07:5d:d7:25:4b:5a:21:bc:81:b3:
4a:20:fa:3f:4d:cd:7a:86:52:11:ea:ed:36:24:c2:
00:1f:c0:9e:63:66:6e:72:e3:69:69:5d:33:8f:a5:
7a:b1:32:7a:7e:20:14:01:77:e8:4e:fc:08:11:fd:
94:36:e8:35:6b:c9:d4:39:58:49:48:63:0d:23:ac:
19:91:fe:78:11:8e:33:66:96:6d:51:09:e7:aa:d2:
50:bf:d6:af:f3:b1:85:24:3e:55:c8:4f:f3:e2:29:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C5:0E:50:13:05:3E:E2:EE:90:7D:CA:DA:83:19:CD:AC:73:B1:9C
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2d:a6:cc:49:93:4f:76:66:89:e4:46:f4:ee:ab:b4:75:d9:
2d:b7:cc:16:36:71:c7:d9:2f:75:29:a8:16:30:db:bd:71:08:
16:86:7d:ba:32:85:8a:fa:93:92:01:76:15:50:cb:ec:70:e0:
39:90:8c:93:8a:22:54:76:48:42:1e:fa:d1:68:46:54:7b:0d:
7e:13:0a:ac:74:dd:28:57:15:b6:81:1d:f8:6c:e1:a3:2b:51:
4d:eb:35:88:27:72:87:82:aa:e9:6b:b8:d4:cf:75:ed:08:81:
8b:03:4e:4c:21:1a:c4:ca:2e:51:8b:a6:ee:1c:11:ac:b5:d3:
bb:4d:f6:71:21:93:16:dc:54:a8:80:5d:ca:f2:da:83:20:d6:
e9:10:30:ad:80:4f:14:bc:9e:f9:c2:a0:f1:ad:df:11:0e:a2:
7c:af:44:0e:c5:a1:20:5b:15:e0:29:7e:8f:6b:40:25:8c:82:
6b:ef:36:ca:4c:61:bd:67:d1:97:00:37:7b:60:fa:a9:4b:d5:
c5:d0:ab:30:cf:2a:f1:49:23:06:7f:ca:3b:e5:9b:ca:f5:1d:
82:8e:d4:77:37:b0:8e:aa:e4:f6:70:19:25:d5:36:8f:00:3b:
8f:4d:f8:f2:21:97:0c:31:af:35:bd:5f:97:59:21:1e:37:2e:
a3:b5:26:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNsKtFBdGeMQHuE7dHTqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMWM1MmYxNTUyZjZlYTBmMDY0ZDdhM2I3OWRiNWMxY2Yx
NjZiZDAwHhcNMjYwNzI0MTMwMDQ0WhcNMjYwNzI1MTMwMDQ0WjAzMTEwLwYDVQQD
EyhhYWM1MGU1MDEzMDUzZWUyZWU5MDdkY2FkYTgzMTljZGFjNzNiMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOKnC7Wc7roi9SeX0tEgBmYHN9AK
e3GIxNa0VM14U7R8b6+EsxIQjHAjyjsE8t5UgsWRFHJzBAJJ+7jG/tJQHB/XEb2M
gVJn++BLoGf4tVMylTE5GX8vgpoWN2MyRuvapC9uol9OG/jf2872wv/zTAUiZzTu
GveBB8J1kUXdGbaSmxxtUBhKqKHZ9OZPomDkPV8+E5xD6CgYtAdd1yVLWiG8gbNK
IPo/Tc16hlIR6u02JMIAH8CeY2ZucuNpaV0zj6V6sTJ6fiAUAXfoTvwIEf2UNug1
a8nUOVhJSGMNI6wZkf54EY4zZpZtUQnnqtJQv9av87GFJD5VyE/z4ilkoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrFDlATBT7i7pB9ytqDGc2sc7GcMB8GA1UdIwQY
MBaAFB0cUvFVL26g8GTXo7edtcHPFmvQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjIt
MjAxZDVhOWJiOGFhLzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82NGY1MzktZmVkYS00OWZjLWE5MjItMjAxZDVhOWJiOGFh
LzEvSFJ4UzhWVXZicUR3Wk5lanQ1MjF3YzhXYTlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALy2mzEmT
T3ZmieRG9O6rtHXZLbfMFjZxx9kvdSmoFjDbvXEIFoZ9ujKFivqTkgF2FVDL7HDg
OZCMk4oiVHZIQh760WhGVHsNfhMKrHTdKFcVtoEd+GzhoytRTes1iCdyh4Kq6Wu4
1M917QiBiwNOTCEaxMouUYum7hwRrLXTu032cSGTFtxUqIBdyvLagyDW6RAwrYBP
FLye+cKg8a3fEQ6ifK9EDsWhIFsV4Cl+j2tAJYyCa+82ykxhvWfRlwA3e2D6qUvV
xdCrMM8q8UkjBn/KO+WbyvUdgo7Udzewjqrk9nAZJdU2jwA7j0348iGXDDGvNb1f
l1khHjcuo7Um0A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:24 2026 by rpki-client