Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: RLmZPvO6ejGRqhlvZiA3SqqSxdg72QiHlzAwPfp0W3Q=
Subject key identifier: B6:3B:49:C6:57:F7:57:78:1B:AE:90:72:8F:0E:A0:26:8E:F6:A9:B5
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 019F92115EB9160FDA87C55BAC734E1AD5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 13FB
Signing time: Fri 24 Jul 2026 03:00:39 +0000
Manifest this update: Fri 24 Jul 2026 03:00:39 +0000
Manifest next update: Sat 25 Jul 2026 03:00:39 +0000
Files and hashes: 1: Kj0HsXicjlUn-679OFq2n6YXriA.roa (hash: oCViwBHC3VWx+KMwr83UJNJcJLGK68aAWyXoMhEGcUQ=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: K1MBt/4esLFRGIdCFLonlYrQ6g78/2yn3yggipgsbmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:5e:b9:16:0f:da:87:c5:5b:ac:73:4e:1a:d5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Jul 24 03:00:39 2026 GMT
Not After : Jul 25 03:00:39 2026 GMT
Subject: CN=b63b49c657f757781bae90728f0ea0268ef6a9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:d4:28:df:58:fd:e0:d9:23:36:4c:d9:88:
95:9f:e0:42:5d:79:49:f7:58:d9:dc:b3:cb:bb:c3:
ef:e8:0d:50:69:af:ad:dc:47:b7:c8:fa:9f:52:a6:
fb:9c:2f:3b:71:f5:c5:c5:42:04:1d:6e:b6:1e:c0:
08:51:d2:04:9a:f4:0e:55:fa:d2:9e:5a:33:b9:d4:
82:38:2e:d4:e6:1f:a7:92:21:d9:d1:6f:13:df:84:
39:46:f7:b8:75:6a:dc:36:62:52:be:7b:50:8e:26:
d3:d7:0e:ce:5e:74:99:19:94:67:14:41:12:5c:d1:
8f:25:07:36:15:48:e4:34:28:b4:7e:a5:0d:ad:1e:
bc:c2:4e:05:ab:d8:99:d3:a8:b2:4f:5a:6d:03:c0:
9d:94:b7:d4:c9:f6:d7:bb:ff:46:3d:44:77:cd:26:
d6:49:16:26:00:db:8e:46:e6:7f:2d:a7:5c:57:29:
08:0d:be:09:28:c9:3d:63:cf:86:fa:17:4b:80:f2:
81:44:70:9d:77:6c:17:bc:d3:53:bb:b5:1c:ab:87:
7e:88:9a:a6:fd:eb:c5:ed:68:cf:ae:a7:01:e4:a7:
ed:8a:c4:e9:2e:07:df:75:87:9e:12:61:4c:16:87:
32:ab:33:1c:c3:ac:a1:ba:51:05:17:d3:80:d8:72:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3B:49:C6:57:F7:57:78:1B:AE:90:72:8F:0E:A0:26:8E:F6:A9:B5
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:09:83:eb:9c:31:b6:92:c1:5e:13:19:69:78:cb:8d:af:68:
73:7c:14:14:cf:f3:d5:3e:e5:e4:c3:e4:2f:4b:19:d9:87:e9:
c6:d1:8d:17:d7:62:65:fb:be:ca:0e:50:b0:85:63:19:1a:39:
e3:07:fd:83:6c:27:ba:24:75:48:99:79:88:91:6c:92:c2:09:
e2:33:a3:01:d4:bc:af:ed:1e:37:03:59:9e:61:84:eb:cc:39:
ae:8c:18:ed:09:9d:df:9f:01:29:26:78:c1:d2:ad:a8:97:3c:
ec:24:31:54:51:ac:f2:56:d4:4f:09:e3:e2:df:9f:37:83:a7:
29:84:70:4d:a3:00:71:26:38:7f:7b:78:aa:ea:07:d7:0b:14:
94:cf:0b:05:9b:60:cc:7d:2c:ab:22:dc:d0:2c:1f:54:46:39:
96:8b:21:fc:02:82:14:03:6d:c3:9d:89:47:8b:6b:31:9b:fd:
f9:bb:10:06:17:f8:53:7d:9d:03:61:e4:3c:21:49:65:c9:fd:
a3:7e:06:a1:0f:b3:7e:73:d7:a3:4c:8f:43:37:0c:ce:33:50:
af:8d:df:c0:83:99:f9:98:3c:ce:df:56:86:0d:78:07:a1:92:
3c:91:81:4a:6f:ed:fc:7f:99:99:5a:94:5a:9d:8e:13:a7:06:
d6:64:8c:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEV65Fg/ah8VbrHNOGtW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NTA1OTdhNjA2NGM4ODJhZTJhZjNmYTU3NTlmMTNmOGJk
MWRkZmMwHhcNMjYwNzI0MDMwMDM5WhcNMjYwNzI1MDMwMDM5WjAzMTEwLwYDVQQD
EyhiNjNiNDljNjU3Zjc1Nzc4MWJhZTkwNzI4ZjBlYTAyNjhlZjZhOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHDUKN9Y/eDZIzZM2YiVn+BCXXlJ
91jZ3LPLu8Pv6A1Qaa+t3Ee3yPqfUqb7nC87cfXFxUIEHW62HsAIUdIEmvQOVfrS
nlozudSCOC7U5h+nkiHZ0W8T34Q5Rve4dWrcNmJSvntQjibT1w7OXnSZGZRnFEES
XNGPJQc2FUjkNCi0fqUNrR68wk4Fq9iZ06iyT1ptA8CdlLfUyfbXu/9GPUR3zSbW
SRYmANuORuZ/LadcVykIDb4JKMk9Y8+G+hdLgPKBRHCdd2wXvNNTu7Ucq4d+iJqm
/evF7WjPrqcB5KftisTpLgffdYeeEmFMFocyqzMcw6yhulEFF9OA2HIyVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY7ScZX91d4G66Qco8OoCaO9qm1MB8GA1UdIwQY
MBaAFIVQWXpgZMiCrirz+ldZ8T+L0d38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8xYzcyYzUtMjk5YS00ZjcwLTgxMmMt
MjVjNWYwNWFlYjVmLzEvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8xYzcyYzUtMjk5YS00ZjcwLTgxMmMtMjVjNWYwNWFlYjVm
LzEvaFZCWmVtQmt5SUt1S3ZQNlYxbnhQNHZSM2Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgmD65wx
tpLBXhMZaXjLja9oc3wUFM/z1T7l5MPkL0sZ2YfpxtGNF9diZfu+yg5QsIVjGRo5
4wf9g2wnuiR1SJl5iJFsksIJ4jOjAdS8r+0eNwNZnmGE68w5rowY7Qmd358BKSZ4
wdKtqJc87CQxVFGs8lbUTwnj4t+fN4OnKYRwTaMAcSY4f3t4quoH1wsUlM8LBZtg
zH0sqyLc0CwfVEY5losh/AKCFANtw52JR4trMZv9+bsQBhf4U32dA2HkPCFJZcn9
o34GoQ+zfnPXo0yPQzcMzjNQr43fwIOZ+Zg8zt9Whg14B6GSPJGBSm/t/H+ZmVqU
Wp2OE6cG1mSM4A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:03:53 2026 by rpki-client