Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: WwBnwnCIpX8vqPBh8bbUmTBazWPmwlgeHv73OBAZuLg=
Subject key identifier: 73:08:A7:1E:24:F4:7B:15:56:0B:51:00:73:FD:D9:C2:E5:53:F1:06
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 019F965C31B310A72EAB7644FD088B083529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 23:00:52 +0000
Manifest this update: Fri 24 Jul 2026 23:00:52 +0000
Manifest next update: Sat 25 Jul 2026 23:00:52 +0000
Files and hashes: 1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: Q/4r7bVbwY16xk2kkUkbeGT9u7frjzM8fHMcKEuQ8tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:31:b3:10:a7:2e:ab:76:44:fd:08:8b:08:35:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Jul 24 23:00:52 2026 GMT
Not After : Jul 25 23:00:52 2026 GMT
Subject: CN=7308a71e24f47b15560b510073fdd9c2e553f106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:a4:30:e4:9d:05:6c:03:ad:ae:41:d7:6e:
e9:70:fa:93:50:66:c0:aa:e8:d0:4f:f5:67:7f:35:
73:fe:d1:c8:5a:d6:c7:ed:1f:f6:d4:f2:57:01:dd:
83:e0:e3:a1:24:79:58:2d:2f:bb:c8:1f:58:62:43:
c6:c0:90:1d:db:1d:d1:72:fa:ce:e1:95:e7:15:b1:
41:94:f5:32:86:14:16:1a:74:91:39:6e:34:71:3e:
cf:46:2b:4a:33:03:37:ec:2c:d3:ff:84:24:e7:38:
87:a8:f3:1d:14:f2:5d:67:78:cb:1a:33:9b:b1:91:
d8:e6:c5:af:e8:c1:81:1c:e8:68:ac:25:00:91:ed:
83:d9:7f:cd:7e:d8:f4:ad:59:04:a7:71:60:62:e3:
49:be:ad:53:be:39:97:b5:06:33:34:ee:60:6c:5a:
e1:6d:46:96:23:0f:d8:b5:92:fb:91:90:99:9b:d0:
32:2e:07:54:5a:fe:48:71:f8:10:61:4f:43:e5:a2:
e6:bd:4a:56:52:2d:68:26:a7:3c:90:eb:fd:37:51:
04:1e:40:44:11:e7:3b:54:48:6b:31:34:1c:3f:d3:
2f:71:0f:83:f1:90:50:67:1f:b7:be:6b:8b:92:c6:
bb:de:e6:e3:b0:bd:58:b8:4c:7c:c0:a9:df:65:4b:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:08:A7:1E:24:F4:7B:15:56:0B:51:00:73:FD:D9:C2:E5:53:F1:06
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a0:1d:59:e9:42:93:1c:4d:bb:70:85:e3:09:3e:e5:20:4f:
95:01:db:db:4d:20:e9:ef:7f:c7:2e:30:32:9c:6e:4a:67:8b:
36:14:ec:a2:87:98:37:af:b2:ef:61:95:42:e3:49:55:69:68:
e3:48:bc:0f:05:d9:60:c3:45:56:51:1e:b8:d8:49:b6:61:5b:
b2:f4:44:28:a2:04:bd:05:60:2a:a3:e3:6c:99:66:01:b2:41:
15:b9:59:48:1d:ed:b7:4c:67:ce:d2:b3:bd:4f:c7:57:f0:90:
1e:b1:55:9a:a6:51:b0:cd:8a:44:0b:a9:06:c8:6a:8c:8f:e8:
82:70:d9:ee:ce:ab:2e:ed:93:9d:5c:69:e9:97:07:9f:59:34:
0b:17:96:1e:e6:9e:59:29:63:96:8b:9b:5b:0e:60:76:04:70:
74:3d:c0:81:3a:52:1c:67:4a:6f:56:ec:4b:e7:53:2f:c8:fc:
b5:c2:f0:2f:75:d1:ec:11:88:48:ef:f3:51:49:66:06:38:39:
db:69:49:61:5c:58:27:d7:4c:ba:b9:79:0c:b1:89:b9:7c:24:
d2:54:f6:86:f4:00:44:fc:c1:37:9b:39:32:2e:f5:99:ba:f1:
62:cf:94:33:eb:74:fb:a8:69:2b:11:d2:0b:c3:2b:f0:d6:1a:
19:9d:8d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:10:57 2026 by rpki-client