Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: Zh07Whv9OmHylY14t8Unx5W/ZeI0Mx4x4MoWUZR8MsA=
Subject key identifier: F7:70:75:39:9A:98:37:46:5A:12:DC:33:60:51:F7:07:C9:78:64:05
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019F9248DF248CDBAAAC5EE201E6A6506887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0A16
Signing time: Fri 24 Jul 2026 04:01:17 +0000
Manifest this update: Fri 24 Jul 2026 04:01:17 +0000
Manifest next update: Sat 25 Jul 2026 04:01:17 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: 8CzvDer9ajiOFElSbcaoRBO1ml+8dBwO2BDiQ+gxuBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:df:24:8c:db:aa:ac:5e:e2:01:e6:a6:50:68:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Jul 24 04:01:17 2026 GMT
Not After : Jul 25 04:01:17 2026 GMT
Subject: CN=f77075399a9837465a12dc336051f707c9786405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:7c:63:f2:ed:5e:bd:29:b6:c3:e3:35:ce:
25:df:29:d6:a7:ac:82:1b:0c:cb:8b:6e:89:fc:74:
22:7f:f5:d7:bc:44:ba:c6:98:e2:5c:cd:47:8d:f8:
72:8e:d0:c0:24:d1:9e:b4:b0:ad:40:60:6f:86:ee:
a7:cf:1b:d3:55:c5:89:92:e3:18:70:90:b2:35:84:
4f:6b:f9:96:d8:6b:33:dc:03:06:54:d3:ea:24:4d:
2a:7c:be:89:c0:8b:4e:bb:5c:79:78:ad:71:19:f0:
42:17:45:cc:e3:e1:4d:22:4b:a7:b5:d7:82:a0:b6:
65:fe:fb:05:06:99:88:dc:f4:c0:6b:e2:f2:0c:9f:
65:a1:0c:88:d2:a2:4b:5b:d8:d9:97:55:be:8e:76:
b3:a9:54:2f:c7:32:2e:93:7b:ad:25:72:35:a7:ee:
8b:54:7c:d1:7f:12:57:81:ae:06:8c:65:12:71:d2:
cf:cc:10:23:92:5e:ea:04:06:26:59:ed:14:2f:df:
10:62:a1:f5:21:c1:b3:48:b4:6e:d1:f1:13:6d:82:
ce:d8:b6:67:71:77:9c:99:dd:74:f0:a5:fd:96:a4:
4b:c8:96:99:fc:07:f6:fb:39:8a:95:43:c5:b2:eb:
5b:24:5f:66:96:98:cb:29:a4:dc:80:7e:64:f0:33:
ed:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:70:75:39:9A:98:37:46:5A:12:DC:33:60:51:F7:07:C9:78:64:05
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bd:09:d0:10:b6:f4:e7:b3:62:1c:21:0f:9e:8b:85:9f:76:
4c:1d:b9:c7:8c:0e:eb:a7:6d:7c:8f:99:bb:9c:00:00:10:fe:
66:1c:c5:ab:f0:aa:75:12:9d:c2:e8:92:0d:62:31:67:e9:e6:
30:0c:57:f2:f2:b3:b5:aa:a7:b2:e1:0b:7c:de:11:64:40:42:
65:47:77:e0:cc:33:42:bc:53:0f:c2:40:c6:05:be:75:f1:2c:
db:a0:2f:58:ba:7f:67:ec:77:75:e3:e6:48:7c:87:14:52:e3:
cb:07:e5:c9:95:68:54:6e:f8:4e:66:60:6b:93:0f:19:6e:b1:
f7:c0:4f:1b:e8:a3:e2:7d:9e:fe:73:89:48:78:1e:22:99:4f:
ad:06:dd:8e:0d:21:a4:ca:74:14:20:7f:56:4c:d7:8e:ed:eb:
69:eb:01:00:4c:fc:96:0d:b2:ef:db:62:db:5c:e3:f2:a0:2a:
e8:fa:74:a9:b3:bb:bb:bb:b7:53:6d:c3:86:79:f1:2a:be:42:
bf:12:ac:fe:e8:a7:cd:39:c0:08:e6:ad:f7:fc:cb:fb:49:53:
b0:3b:28:1f:2b:a3:42:8e:04:3c:6f:50:4f:63:d6:c9:9f:ab:
3b:44:49:8a:74:19:c2:d7:49:f2:90:3b:86:72:a8:f1:c3:7a:
3e:a3:6f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:41 2026 by rpki-client