Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: p+BclvAiZ6DgX/2DS8D5pcS6+xXC/RR805rZkswaVtY=
Subject key identifier: 0E:89:EF:34:90:75:48:8D:E2:DD:6F:52:28:7B:3F:B8:53:2A:06:88
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019F9248CE436BD0F75304F7E3C373BC5031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 1959
Signing time: Fri 24 Jul 2026 04:01:12 +0000
Manifest this update: Fri 24 Jul 2026 04:01:12 +0000
Manifest next update: Sat 25 Jul 2026 04:01:12 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: r6HE6FtkenrnGUkLmNWqpQcs8Tn6mc9DU2VtosuiNCo=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:ce:43:6b:d0:f7:53:04:f7:e3:c3:73:bc:50:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jul 24 04:01:12 2026 GMT
Not After : Jul 25 04:01:12 2026 GMT
Subject: CN=0e89ef349075488de2dd6f52287b3fb8532a0688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:17:97:43:de:75:fa:b1:c5:ac:24:05:0f:0e:
f7:24:9c:bb:52:bb:2d:9a:72:02:ae:3e:1d:df:2a:
5b:64:ba:eb:1a:67:76:a6:ae:ce:2b:67:bf:16:e2:
73:ea:35:fd:c3:43:7b:3d:e2:90:60:f7:74:d4:15:
47:89:c3:77:c3:0e:35:27:19:bf:2a:c9:92:0c:a0:
d1:12:e9:ec:03:7b:dc:37:28:45:89:d4:f1:f2:f4:
82:c8:2f:55:05:ff:f2:3c:cc:59:97:e3:bd:e8:51:
d9:35:9d:e4:a8:0b:1c:f8:62:41:d8:de:93:3c:2a:
47:a6:68:a5:92:d2:77:87:c4:62:41:0c:93:8b:10:
6c:82:82:39:28:77:7b:4a:39:3b:51:ff:1a:23:56:
fd:66:a1:e0:a0:4f:ab:c6:2e:58:d4:a4:32:c9:d1:
ac:35:14:3b:19:ca:27:3d:4c:2b:27:c2:24:b5:48:
85:ad:c7:7d:39:da:da:20:83:2d:b1:a6:3e:5c:c7:
74:20:fc:f8:89:6f:26:88:f8:92:ce:95:48:5d:63:
ab:ee:50:e7:22:98:51:cd:42:33:fd:84:6d:59:5d:
ff:f3:e7:b7:40:fb:b0:d9:fe:cd:e9:5c:4a:70:6e:
64:4b:f5:5a:e7:8c:f7:61:90:04:dd:e8:3a:4a:ac:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:89:EF:34:90:75:48:8D:E2:DD:6F:52:28:7B:3F:B8:53:2A:06:88
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:67:c8:d8:5e:83:f2:67:b7:8d:93:ec:06:e2:49:20:9a:35:
f4:ed:ae:12:03:b9:13:5d:be:70:dc:0c:c4:ca:2c:f7:30:09:
de:2a:a3:5c:f1:3e:90:d4:67:75:92:76:8a:de:8a:fb:75:7f:
43:12:16:74:33:ff:9d:89:98:04:f0:d2:5e:e0:bc:32:37:89:
9b:0c:0a:f5:1d:fe:c3:2f:63:87:70:05:64:54:6e:92:9a:4e:
84:6a:8d:75:fb:2e:24:d1:9d:5e:91:eb:3c:a4:f0:ba:19:73:
f9:74:f5:8a:29:39:c8:75:e4:50:6c:0e:48:c5:c7:38:99:71:
ec:bb:4a:86:0e:d0:91:ca:45:8e:d4:1d:a4:7e:32:65:42:03:
ab:2a:c6:0a:bf:95:35:bd:07:19:97:82:a4:a4:cd:31:65:84:
90:f8:bf:7c:c9:6a:ee:a7:b1:cb:4c:dc:0a:7c:df:ef:00:8a:
2b:3c:d6:b3:e9:83:ac:3a:6d:1d:62:53:48:71:32:ce:76:59:
44:e0:32:e0:5a:27:00:f6:fd:21:e2:61:19:85:07:80:c5:c5:
b2:a8:e7:da:07:27:51:4e:db:62:f5:a3:e6:b4:5e:f1:51:7e:
3e:5a:1f:f2:0c:86:64:0b:58:e7:72:48:68:59:38:3b:39:9f:
a5:b6:03:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:42 2026 by rpki-client