Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
File: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft (raw, json)
Hash identifier: +9rJ2oOvqXk3QquiOkoOM/hKzTXFfUZB4B4RqCWLxqk=
Subject key identifier: F2:C9:C2:65:74:52:EC:1C:8B:9A:00:26:FC:70:37:C0:43:2A:BB:15
Authority key identifier: 84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
Certificate issuer: /CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Certificate serial: 019F8EA26138ACAC3456835BE704BF6164F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
Manifest number: 02F7
Signing time: Thu 23 Jul 2026 11:00:34 +0000
Manifest this update: Thu 23 Jul 2026 11:00:34 +0000
Manifest next update: Fri 24 Jul 2026 11:00:34 +0000
Files and hashes: 1: 82t5-hxlbBokWJ95cU6-iNwwzGE.roa (hash: /vM2wNO4llhGTKJMkB3GroMrqeVphHqzb5ESd4v5N4Q=)
2: hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl (hash: w33+jORl4Y5h42Olo4Wm5T+GiscnrH8hoIIYbktfZRE=)
3: pvFUrI_A5H0R-SC8Obxd0M4wuXA.asa (hash: ClaCHktyajo1QODXjIflQSjewdTjeYxeK2EbW8lhLgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:61:38:ac:ac:34:56:83:5b:e7:04:bf:61:64:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e1583c6d2b94878c5a9839ef67f56144b8565
Validity
Not Before: Jul 23 11:00:34 2026 GMT
Not After : Jul 24 11:00:34 2026 GMT
Subject: CN=f2c9c2657452ec1c8b9a0026fc7037c0432abb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:e1:48:77:93:d3:46:f5:5c:39:4a:2b:90:
bb:38:da:b2:1f:12:a6:47:68:e4:90:53:72:70:79:
f1:64:94:47:b4:a5:49:6f:7f:57:a5:e4:20:2a:58:
cc:38:8c:9d:da:3f:52:3a:6d:89:5d:47:b6:14:f8:
65:09:fe:30:f6:d4:5d:05:6b:d3:e0:ee:e0:54:69:
18:5f:07:f4:29:57:0a:33:37:6e:3f:f0:ae:c9:84:
ef:94:39:70:72:64:e7:b1:84:f1:e9:76:36:55:88:
1b:79:8c:02:a8:43:84:e3:9d:a2:98:c9:24:fe:a2:
d8:68:8d:a4:f4:c7:e9:70:94:01:f6:76:8c:f1:cd:
de:eb:a7:f3:aa:b1:04:3e:2e:05:f1:70:c9:3f:10:
00:0b:f1:08:14:f2:ae:38:a6:b4:51:ac:97:dc:ea:
ae:2e:04:f9:79:06:b1:97:14:fa:14:6c:33:83:b3:
96:ce:02:df:98:47:6c:ec:e1:5d:10:ae:39:18:bb:
1a:ef:3f:67:56:a1:11:24:35:79:70:d2:88:59:e6:
bd:39:08:1d:ce:bb:49:bf:ca:f8:1d:80:29:aa:34:
c9:d5:83:cd:1d:1c:11:05:00:32:0d:77:a2:73:c7:
86:a7:ef:76:96:e0:80:de:e5:77:0a:a2:4d:dd:4e:
59:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C9:C2:65:74:52:EC:1C:8B:9A:00:26:FC:70:37:C0:43:2A:BB:15
X509v3 Authority Key Identifier:
keyid:84:2E:15:83:C6:D2:B9:48:78:C5:A9:83:9E:F6:7F:56:14:4B:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d4ee9-a29c-4859-819a-8cceeed62cd5/1/hC4Vg8bSuUh4xamDnvZ_VhRLhWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:41:00:16:d9:09:68:5f:59:9b:ca:68:e6:15:63:35:98:7f:
6a:41:a4:77:d4:ad:8b:f9:64:2f:1a:5f:2e:10:80:04:54:d5:
e8:c2:aa:ab:cf:28:07:96:16:d0:a1:82:0b:0f:8e:f6:83:09:
38:65:a2:21:d2:9f:53:c7:d6:00:f9:09:0f:c0:d2:bf:b9:51:
37:85:86:6c:74:b3:84:79:bb:6f:af:21:f6:c9:34:fd:7c:63:
f9:58:52:7b:b2:74:f8:7d:3a:aa:14:f1:84:13:50:e5:77:1b:
5d:c9:5d:9f:70:5c:48:a9:24:81:9c:76:4c:96:d6:2f:49:da:
39:ba:35:7f:81:f2:66:7b:30:29:fe:0e:1f:4a:b3:b1:5d:39:
79:e0:82:fc:89:2f:41:9b:ff:99:74:cb:d0:47:e5:32:c4:b0:
30:4c:6b:86:ab:c4:84:90:22:c6:7e:6a:dd:3c:c6:d0:5b:fa:
92:45:f2:d7:2d:47:c2:9e:ac:92:1f:1b:96:6b:04:58:ac:9c:
e0:89:d7:c7:64:d7:3d:99:0b:8d:22:e9:7f:60:50:e0:b8:da:
5b:69:ba:d5:ba:72:91:c3:a0:80:0b:4c:af:c8:43:ef:ab:1e:
1b:cf:2f:02:84:aa:86:5e:fc:ee:21:99:61:95:54:fe:ae:82:
e5:b6:81:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:10 2026 by rpki-client