Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: a1vTD1UMvQDZ+R5F2nr9eBaSUlEA8KO+I20CYd6mBXA=
Subject key identifier: C6:6B:45:18:C5:06:A7:F5:57:9C:A0:C7:DF:ED:3C:59:FF:66:83:2D
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 019F9323D0B0C9EA0732E0B8BA8347A176B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 0A2B
Signing time: Fri 24 Jul 2026 08:00:25 +0000
Manifest this update: Fri 24 Jul 2026 08:00:25 +0000
Manifest next update: Sat 25 Jul 2026 08:00:25 +0000
Files and hashes: 1: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: sPGEtY3BL9caF6KPEK8OVn1Fi8ZEZ2x/ROJeVPqQy9M=)
2: ilf77_-o9-q6za7MOsqeG7F-F18.roa (hash: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:d0:b0:c9:ea:07:32:e0:b8:ba:83:47:a1:76:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Jul 24 08:00:25 2026 GMT
Not After : Jul 25 08:00:25 2026 GMT
Subject: CN=c66b4518c506a7f5579ca0c7dfed3c59ff66832d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bd:67:e6:ff:4c:5c:01:38:6d:79:1e:9b:d5:
a1:63:24:43:91:9f:60:f4:04:70:54:0d:42:23:71:
f6:de:e2:f7:dc:3c:75:63:f0:84:b3:34:8c:95:01:
49:bc:bc:a6:42:c8:f6:89:05:92:70:dc:71:51:48:
2b:50:6a:a1:e4:c7:d0:d9:20:6b:b8:9b:25:84:8f:
51:7d:70:cd:4a:d4:46:34:b1:b8:7a:87:3a:78:b1:
4d:1c:04:70:8b:7f:cb:19:9e:21:5d:9e:21:06:56:
30:20:e5:ad:4c:d3:f1:c5:ae:f2:48:61:38:b0:b0:
e3:04:99:86:be:27:32:80:cb:2c:a8:b1:0a:6b:a1:
04:93:b6:1f:4f:8b:27:37:e5:3e:71:c1:26:86:06:
d3:32:13:27:0b:e8:d0:a8:04:d8:e5:76:b8:66:e1:
67:af:52:e2:13:2e:23:b9:dc:da:68:b0:b8:81:b5:
06:64:1a:63:99:11:12:15:d3:86:b4:6e:7b:e9:35:
53:83:3f:f4:86:be:b0:0e:c2:ee:12:7d:38:25:e0:
ae:2e:01:c5:6c:cd:3e:96:a8:71:b8:8d:2f:78:38:
cd:e7:d5:90:22:78:fe:ad:be:f9:54:bb:06:26:95:
41:dc:10:c9:19:7e:92:c3:b5:c6:59:bf:0e:8b:b0:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:45:18:C5:06:A7:F5:57:9C:A0:C7:DF:ED:3C:59:FF:66:83:2D
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:45:df:ea:27:2b:3f:85:7b:08:b2:32:35:08:0a:74:b0:25:
8c:c6:27:90:39:65:ec:79:10:35:d4:13:e2:1f:2f:1a:1c:b5:
8d:a3:1b:c9:1c:61:c5:7b:64:cf:2f:6f:e8:45:a9:09:28:45:
f9:90:ef:54:d8:76:70:c9:00:f3:91:eb:72:42:db:27:c4:20:
d6:4d:c3:34:62:b8:8f:fd:fd:2b:09:48:4a:3a:a0:7b:55:da:
b4:95:fb:6c:e3:ed:9b:4b:2a:0a:87:e3:b3:24:75:c6:8a:44:
e4:ce:4a:63:3b:4b:84:da:af:e0:2b:b0:a2:15:1b:95:61:08:
b3:1a:1f:5e:3f:92:66:78:d7:02:f7:88:4b:58:76:79:2f:a7:
45:7f:38:68:be:79:bb:71:b1:26:b5:f1:ca:7a:3c:36:4c:cb:
13:8d:89:b9:68:c9:ba:d0:ef:13:70:cc:a6:ed:f4:12:d5:6c:
b5:3b:d3:3c:19:62:32:1f:7b:36:08:c0:c0:db:09:4d:59:f8:
b9:fe:cd:b8:d6:7c:52:a2:b2:05:22:cb:15:4b:4e:ee:2d:e4:
00:8a:3d:ca:e7:46:39:09:c1:f8:0a:24:b2:f2:71:10:ec:58:
34:60:92:de:33:e9:4c:73:59:6f:2f:68:be:8c:31:9e:87:94:
0b:43:85:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:27 2026 by rpki-client