Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: 3kYryC+V3VsUyQv3fG7HIqcFsVwi0D3QVeTEXiObexM=
Subject key identifier: 5C:00:F0:F5:72:6B:08:52:7D:E8:B1:DD:36:5B:E9:55:AD:7B:82:C4
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019F8EA27116F915B22A505D7FFF095AD164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 06A2
Signing time: Thu 23 Jul 2026 11:00:38 +0000
Manifest this update: Thu 23 Jul 2026 11:00:38 +0000
Manifest next update: Fri 24 Jul 2026 11:00:38 +0000
Files and hashes: 1: YEZIYMekfV4MSTcSWZQWUheIYSA.asa (hash: RvCtRmtfiK0V0w8kYFvxJFZ93JlcgF8ks3HVxGrymb8=)
2: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: TIXCVK3e8tB34rxoR6v2lNw/3eVCg4fHBvBXzuNN37w=)
3: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:71:16:f9:15:b2:2a:50:5d:7f:ff:09:5a:d1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Jul 23 11:00:38 2026 GMT
Not After : Jul 24 11:00:38 2026 GMT
Subject: CN=5c00f0f5726b08527de8b1dd365be955ad7b82c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:21:ca:0e:b8:3c:a6:46:95:a8:87:43:af:
b0:da:57:cf:89:f4:c0:99:33:ce:b6:76:c4:98:be:
f2:f1:31:8e:50:8e:31:95:14:06:df:bd:d8:62:ab:
fd:db:fd:12:2d:ae:ef:88:06:e7:38:ce:61:0c:c8:
8b:bf:1c:45:9d:48:95:41:ad:7a:2c:9b:39:39:ed:
fd:10:45:34:e3:bc:d9:f2:c2:7c:2b:57:97:b0:1b:
d2:46:22:77:62:5a:ca:13:28:12:43:7e:3d:b2:19:
88:73:fb:db:52:e0:bd:5e:69:e7:06:c9:cb:aa:33:
41:99:3a:ab:65:fc:e9:4f:2e:c8:b2:5c:bf:68:2d:
0d:52:ea:1e:2b:51:29:f3:67:9a:11:4a:71:2e:13:
4e:8b:28:45:2b:92:00:09:f7:98:71:42:82:22:e5:
b1:8d:ae:00:0a:e5:7d:d3:86:e0:5b:66:2b:94:5c:
28:df:71:aa:61:a3:63:30:4e:a2:4b:ef:14:5f:93:
54:e0:5d:57:ab:ba:53:46:8c:be:6e:33:ba:12:75:
0f:b3:b9:a8:65:4d:9a:a8:62:2a:c4:41:c9:6c:1e:
d5:a4:87:35:99:68:7c:fb:ef:1c:d2:9e:5e:ce:bd:
fe:1e:66:38:dd:76:9b:15:47:8f:d6:dd:f0:f0:b1:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:F0:F5:72:6B:08:52:7D:E8:B1:DD:36:5B:E9:55:AD:7B:82:C4
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1a:44:a2:47:dc:dc:04:9a:f7:01:8e:5c:cb:0f:07:11:71:
a3:7e:57:fe:9a:81:32:9a:ee:1e:5c:40:80:7e:06:a8:ba:6a:
95:c3:37:57:84:6f:e3:f2:cd:54:72:99:7e:8f:ed:da:91:ed:
43:a4:06:b6:e8:95:8d:04:24:84:a3:6d:2b:88:cb:b2:95:ef:
e0:24:70:6b:6a:a9:de:04:62:76:20:a2:64:81:c0:1e:5a:ea:
8d:f9:8f:9e:3c:e1:f1:4a:c4:46:7b:b1:28:96:a7:f7:e0:7b:
50:c6:b9:12:53:5b:0e:76:61:f4:96:95:b3:c8:fd:67:dc:df:
c3:ef:36:91:24:7f:ae:1b:84:2e:10:23:fc:a7:c9:09:df:e4:
f5:2f:f3:28:28:ed:15:57:a3:5e:76:20:75:0e:3a:82:0d:a2:
d5:71:05:37:21:c8:ff:d6:c4:a1:c1:c6:81:33:de:61:82:ad:
bd:db:55:34:5d:78:bd:b9:d6:dd:97:f5:fa:06:08:cf:3a:95:
bb:5f:de:ac:cb:92:5c:e4:bd:fb:1f:d1:39:53:45:e7:20:98:
2b:b3:25:ca:e1:54:3e:ac:a2:69:53:c3:b0:e5:20:66:a4:a1:
a9:9b:a1:9c:98:6a:ae:42:1b:76:ec:91:e6:3a:47:b9:08:20:
92:b2:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:13 2026 by rpki-client