Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: MHdh+Mh6cgfjvqtNH6pI8cJu8XqGg7Fk+WVR48BVECg=
Subject key identifier: 1E:78:B3:1F:C9:FA:3C:78:49:8D:72:7C:C6:17:99:0E:49:0A:F1:C2
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 019F90235DEC80A3E2D8CAFB9238678F3201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 14EF
Signing time: Thu 23 Jul 2026 18:01:04 +0000
Manifest this update: Thu 23 Jul 2026 18:01:04 +0000
Manifest next update: Fri 24 Jul 2026 18:01:04 +0000
Files and hashes: 1: 2E1p8fabJ0AaZVQtK27is72W3zA.roa (hash: seOc2odI/aAB9kmMiUcr+Fn5jR9zKFiFx7mITmVnxdg=)
2: hSHIj4UWxpZV5CJ62FEUxANmmx4.roa (hash: DokJgpyiq/4HexdzVhkwpYdCq1bUBWCyEOpnC3xmI30=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: lU/P8U2X3wUZ3T1pzbTTlUrCi3ghyAQSYZx/JzGsjJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:5d:ec:80:a3:e2:d8:ca:fb:92:38:67:8f:32:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Jul 23 18:01:04 2026 GMT
Not After : Jul 24 18:01:04 2026 GMT
Subject: CN=1e78b31fc9fa3c78498d727cc617990e490af1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2c:e5:bc:85:af:da:56:0c:c1:05:16:72:a1:
c1:1f:35:27:02:f8:a2:8a:2c:7a:ed:7f:c0:d2:45:
c9:4d:cf:ac:dc:be:be:bf:2b:07:73:33:f7:4d:dc:
97:40:73:f4:cd:21:ab:18:69:b0:39:d4:e7:e0:30:
0f:ff:05:01:4e:67:4b:44:65:ef:5a:f4:15:c3:b5:
19:69:94:0d:88:8e:95:25:3b:de:b2:b1:b5:db:d1:
e5:e3:cd:f0:1a:84:45:e7:58:df:7b:6d:80:1d:7c:
bd:2b:a6:b2:cb:10:34:cf:3e:e3:ba:c1:ad:1b:94:
93:23:cd:a4:9f:59:46:60:3b:31:60:0b:69:c1:b9:
d6:d1:a2:ae:f4:77:1a:9c:39:b2:f2:36:0c:a5:9f:
39:91:42:9c:4c:37:ab:c4:62:92:f0:0e:3e:0d:0a:
13:bf:ed:aa:4d:9d:22:1f:50:56:28:40:4b:e1:5d:
6b:19:05:46:41:b2:ae:96:27:25:48:69:34:b9:c1:
dd:18:fe:5f:7b:2a:0a:55:8c:7d:83:03:71:98:74:
b2:09:33:46:d9:6d:fd:95:e9:b1:73:2f:c3:c5:a0:
b1:39:55:48:6f:1b:bc:2b:e1:c8:7b:84:4b:24:4c:
d0:cf:7e:e3:a3:9b:d4:75:3c:de:a3:73:24:6c:9c:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:78:B3:1F:C9:FA:3C:78:49:8D:72:7C:C6:17:99:0E:49:0A:F1:C2
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e3:21:15:4a:45:5c:13:55:7c:ec:79:9a:41:79:63:97:8d:
38:6e:2b:b5:56:6f:e6:3f:b7:89:3f:8a:22:b9:f7:75:70:f0:
ed:22:52:a2:17:bb:8f:5e:3c:e0:28:c7:13:c8:48:51:cd:87:
c1:db:df:84:d3:dc:ee:c1:0d:3b:25:69:17:85:90:78:93:2e:
ef:07:4d:49:c3:2b:d9:9a:98:b3:c6:53:1f:59:6d:23:12:54:
36:71:b7:87:2a:32:f8:84:ae:88:54:ba:e6:13:df:f2:f1:97:
6f:4c:4c:66:03:61:24:b7:db:fb:aa:69:28:9c:fe:b8:41:7b:
6b:d6:83:ff:93:9e:fa:1a:e8:98:6d:cf:72:04:a5:0f:80:8f:
d4:ac:6d:36:5c:b5:d0:b6:07:cd:39:a0:6f:e9:76:b2:d4:4d:
c9:ea:1a:36:82:f0:c8:c3:46:9f:4f:aa:cd:c2:ea:14:0a:10:
b9:bc:b9:5c:6e:77:3e:18:de:49:7b:a9:90:a6:20:af:95:87:
50:75:64:8f:67:eb:63:72:88:2f:c2:17:c4:cf:0f:2d:f4:64:
97:19:44:d9:e3:26:eb:e8:bd:bb:56:72:f5:d2:32:c6:54:85:
0a:5a:41:7f:6d:9f:41:f8:38:97:90:b2:bd:f5:0d:8a:f3:1a:
92:36:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:46:32 2026 by rpki-client