Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
File: hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft (raw, json)
Hash identifier: HHb3yb27/Qf+H4hCv2lfrWycyCnKoKSNF+AYSeqCs8c=
Subject key identifier: 97:99:87:0A:CF:1C:32:EE:A3:0B:5B:BF:50:32:49:81:A5:11:C9:7D
Authority key identifier: 86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
Certificate issuer: /CN=863841506d026131965057409a1604a5671f0541
Certificate serial: 019F9436E8F803BFF7E875E1AF12E9BE95C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
Manifest number: 0790
Signing time: Fri 24 Jul 2026 13:00:54 +0000
Manifest this update: Fri 24 Jul 2026 13:00:54 +0000
Manifest next update: Sat 25 Jul 2026 13:00:54 +0000
Files and hashes: 1: A_-FW985zbY15HsoQHY3jzaLsqE.roa (hash: eSJY0BewKa72GIdMnrs7+2x+KiKuirCjSmv68OLB6u4=)
2: hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl (hash: cxkRRom7D6gCiymb2b4COEECeCt3g6D3hcsuEKzxCrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:e8:f8:03:bf:f7:e8:75:e1:af:12:e9:be:95:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863841506d026131965057409a1604a5671f0541
Validity
Not Before: Jul 24 13:00:54 2026 GMT
Not After : Jul 25 13:00:54 2026 GMT
Subject: CN=9799870acf1c32eea30b5bbf50324981a511c97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ff:e0:42:9f:73:60:48:a6:ae:6b:96:0a:5b:
35:4b:bd:db:b9:e3:a4:1a:3a:dd:7b:c6:26:25:09:
4f:c5:0d:f1:1e:fa:3e:5b:38:c4:5a:23:b7:c0:71:
ba:47:8c:af:c1:53:60:b8:87:76:b5:aa:a0:33:ce:
39:ed:a4:45:43:fd:18:d3:19:97:97:6c:31:47:37:
90:9f:50:2b:c4:1f:ab:22:b2:77:53:74:b9:00:85:
56:a3:e7:21:60:01:e9:c1:e5:67:c7:9b:f1:5f:ed:
dd:e8:d9:62:25:eb:e7:61:09:45:9c:43:0d:29:c3:
a8:2b:74:17:4e:15:23:27:97:31:9f:0d:9b:ba:b4:
48:9a:70:b5:d0:b3:a6:85:87:62:27:e3:83:ea:2f:
c7:76:8a:b6:65:55:19:5d:7a:d0:4f:e0:29:2a:29:
87:5a:2d:cb:d8:d9:77:07:23:a9:3b:0b:10:7f:4b:
5e:7f:64:bc:3b:96:be:dc:86:3e:5c:9b:32:7b:b3:
5e:20:af:76:82:b1:f3:4e:26:cd:62:64:db:f4:a5:
79:a1:10:8d:29:9e:46:69:e8:c7:da:ed:4d:d2:1d:
fd:05:0f:68:33:c3:7a:a6:21:b0:21:a0:4f:bc:0b:
1f:e4:55:b6:1f:66:47:cd:7c:bd:ae:f2:31:70:53:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:87:0A:CF:1C:32:EE:A3:0B:5B:BF:50:32:49:81:A5:11:C9:7D
X509v3 Authority Key Identifier:
keyid:86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c3:71:86:ef:fd:57:1f:03:81:ca:ff:06:cc:19:b3:bf:50:
1a:3d:5f:d5:e2:38:b5:e7:63:21:14:d1:58:97:28:7a:29:4f:
2b:7b:23:64:95:9a:93:88:dc:21:eb:5e:11:ec:f9:c4:c1:db:
b0:06:e7:e4:55:16:e3:a7:92:3a:d1:d0:5f:f9:8f:e2:43:16:
55:2f:ca:06:0f:07:6c:31:d2:99:9e:59:32:3b:62:6f:06:80:
8f:56:dc:e3:1e:82:7e:08:2a:c5:0d:26:25:42:a1:df:c0:9c:
b3:cd:15:0a:e1:b6:5a:bb:3d:ef:fb:0e:21:06:ab:60:d3:b0:
b6:8c:cb:41:32:9c:3e:5c:aa:d9:95:4a:17:a6:c5:99:0c:1c:
7d:33:da:21:97:77:6b:5d:03:f4:7c:59:6e:63:ad:45:bf:26:
16:89:70:e3:7d:e7:9d:58:bf:c5:9f:4b:a3:b1:3c:51:17:72:
d0:54:bd:d2:3c:e1:6b:78:48:03:b3:53:5f:ac:54:bb:60:47:
53:2e:e8:bc:01:22:da:57:55:1a:d2:6d:01:20:85:55:a4:ee:
1e:40:78:50:e3:4c:49:9a:e0:57:46:44:5d:3f:90:62:1f:66:
aa:e9:42:4f:87:35:1d:30:5d:9f:c8:88:09:5d:66:29:ad:40:
4d:c9:56:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNuj4A7/36HXhrxLpvpXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Mzg0MTUwNmQwMjYxMzE5NjUwNTc0MDlhMTYwNGE1Njcx
ZjA1NDEwHhcNMjYwNzI0MTMwMDU0WhcNMjYwNzI1MTMwMDU0WjAzMTEwLwYDVQQD
Eyg5Nzk5ODcwYWNmMWMzMmVlYTMwYjViYmY1MDMyNDk4MWE1MTFjOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv/gQp9zYEimrmuWCls1S73bueOk
Gjrde8YmJQlPxQ3xHvo+WzjEWiO3wHG6R4yvwVNguId2taqgM8457aRFQ/0Y0xmX
l2wxRzeQn1ArxB+rIrJ3U3S5AIVWo+chYAHpweVnx5vxX+3d6NliJevnYQlFnEMN
KcOoK3QXThUjJ5cxnw2burRImnC10LOmhYdiJ+OD6i/Hdoq2ZVUZXXrQT+ApKimH
Wi3L2Nl3ByOpOwsQf0tef2S8O5a+3IY+XJsye7NeIK92grHzTibNYmTb9KV5oRCN
KZ5GaejH2u1N0h39BQ9oM8N6piGwIaBPvAsf5FW2H2ZHzXy9rvIxcFPwYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeZhwrPHDLuowtbv1AySYGlEcl9MB8GA1UdIwQY
MBaAFIY4QVBtAmExllBXQJoWBKVnHwVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2Mt
M2JmYTA1MDkyMDFmLzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2MtM2JmYTA1MDkyMDFm
LzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsNxhu/9
Vx8Dgcr/BswZs79QGj1f1eI4tedjIRTRWJcoeilPK3sjZJWak4jcIeteEez5xMHb
sAbn5FUW46eSOtHQX/mP4kMWVS/KBg8HbDHSmZ5ZMjtibwaAj1bc4x6CfggqxQ0m
JUKh38Ccs80VCuG2Wrs97/sOIQarYNOwtozLQTKcPlyq2ZVKF6bFmQwcfTPaIZd3
a10D9HxZbmOtRb8mFolw433nnVi/xZ9Lo7E8URdy0FS90jzha3hIA7NTX6xUu2BH
Uy7ovAEi2ldVGtJtASCFVaTuHkB4UONMSZrgV0ZEXT+QYh9mqulCT4c1HTBdn8iI
CV1mKa1ATclW0w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:09 2026 by rpki-client