Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: cO5b7NOF+Oj7twSLCO/CmSJ6Wv0eGUW9YL+8mKHfwZs=
Subject key identifier: 81:1D:E4:DC:46:2D:DD:9D:FD:27:B3:E3:0A:5B:4E:AC:A9:A4:10:CA
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 019F95B76D6CA201F329266824C54C18A411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 146A
Signing time: Fri 24 Jul 2026 20:00:54 +0000
Manifest this update: Fri 24 Jul 2026 20:00:54 +0000
Manifest next update: Sat 25 Jul 2026 20:00:54 +0000
Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: tUuUAg0RbDgz59zD1lNzvHjjHoDlo9f2pqBNEBeH+qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:6d:6c:a2:01:f3:29:26:68:24:c5:4c:18:a4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Jul 24 20:00:54 2026 GMT
Not After : Jul 25 20:00:54 2026 GMT
Subject: CN=811de4dc462ddd9dfd27b3e30a5b4eaca9a410ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:4c:9a:52:ac:3b:32:f7:2f:25:c6:4e:bc:
e2:f0:33:7c:c3:ce:e5:67:51:3c:7a:94:d0:23:7b:
2d:1f:1c:2d:ef:ff:d7:f7:c9:e4:e5:38:34:09:96:
6b:41:91:96:b0:c5:d2:93:be:e6:ee:0d:48:7f:ab:
07:53:82:16:65:75:8e:e4:d3:b7:74:28:ee:dc:d1:
d7:ce:46:de:1f:17:aa:a5:88:13:7b:25:67:46:9c:
55:94:5b:fb:f6:21:4b:66:7a:58:ba:cd:81:3b:64:
60:97:6b:ae:96:d6:f4:fd:1f:54:21:51:d7:59:c6:
db:93:1d:e3:19:36:55:cc:12:5f:7a:40:03:53:06:
c2:ef:9f:b6:dd:bf:e6:28:07:b8:6a:06:fc:8b:c1:
d0:ea:a8:99:4a:0b:c1:42:ec:1c:db:9a:5b:04:46:
dd:3f:cb:43:38:c0:a4:a8:63:5a:1b:e7:aa:fb:33:
e9:e8:a4:5e:01:ab:9a:6a:0f:45:8f:ff:d6:fe:91:
21:16:f5:ad:8b:8e:d3:aa:7f:0a:dd:46:cc:b7:fa:
91:08:93:71:dd:d0:3f:d2:c0:a8:ee:8b:f1:95:87:
87:0a:62:f0:09:fd:e8:c0:29:12:4c:a4:17:3a:3c:
30:a0:ba:52:56:4a:88:8a:fd:2b:59:55:fe:48:8a:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1D:E4:DC:46:2D:DD:9D:FD:27:B3:E3:0A:5B:4E:AC:A9:A4:10:CA
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:23:eb:f0:f0:b3:25:31:97:5b:d1:ae:27:e2:e7:f4:4c:e0:
e6:23:d0:cc:74:b2:80:62:90:78:6c:8d:71:ba:aa:28:d9:28:
9b:ea:e8:f0:6c:c2:e6:78:c6:bc:a3:24:09:40:fd:7c:66:5e:
ba:30:82:4a:20:05:a9:8c:2b:41:41:d9:a3:90:2d:7f:d2:53:
0c:d4:5e:d9:99:16:2c:18:f3:c2:0d:51:31:7a:1c:a0:ff:42:
f6:17:b1:2e:74:20:6a:70:72:b3:cd:99:07:f6:f1:25:e2:05:
c3:4d:c7:9c:c3:2c:ef:9d:5e:c9:63:7b:1e:63:b4:c2:af:9a:
c9:0e:ba:f2:9a:63:c4:e4:46:6a:1c:16:1c:7d:4b:da:5c:5a:
b6:35:79:d3:34:e9:63:36:75:80:a3:8a:61:76:82:11:1f:ac:
e6:8b:92:4d:4b:87:19:38:3c:aa:87:09:78:12:99:56:75:b6:
90:ca:74:e4:03:91:48:f8:7f:46:4d:e0:97:1c:f6:9e:16:b5:
1d:41:77:b6:51:f0:38:ca:48:28:9e:ee:1f:35:83:93:9e:84:
3c:0e:82:37:c4:fc:90:ec:a3:2f:69:34:28:32:5b:28:cd:48:
ec:c5:a2:fa:9e:ab:c5:7f:47:b1:37:cf:e0:67:73:ff:6e:53:
c9:ce:a9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:39 2026 by rpki-client