Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: HF2rSLlAAWghScII5j83LsiNeohvpJH+pmMSWYXfBTY=
Subject key identifier: B2:D6:38:E6:C0:C7:80:2B:BD:7E:98:00:9D:39:C8:53:B8:47:14:AC
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 019F916CC7A1593540227DF3EE308625244D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 12D3
Signing time: Fri 24 Jul 2026 00:00:52 +0000
Manifest this update: Fri 24 Jul 2026 00:00:52 +0000
Manifest next update: Sat 25 Jul 2026 00:00:52 +0000
Files and hashes: 1: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (hash: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q=)
2: KhePy2KSChqSTO56xjFNB88Adhw.roa (hash: jSbx1Mp1yMnht16w7llcf9K2ZLPdIRkxkGJ6/eCHfII=)
3: Z-DKyWN4NlE9Oe6WxuczFCionOA.roa (hash: DCMKgnjrJbcUZjEDqwNnXXjpRG/93HbByWia9wwVNVM=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: Q2QKE/K4dUgsRE1COkEClPyk3mqMloYziHh7VQxQr7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:c7:a1:59:35:40:22:7d:f3:ee:30:86:25:24:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jul 24 00:00:52 2026 GMT
Not After : Jul 25 00:00:52 2026 GMT
Subject: CN=b2d638e6c0c7802bbd7e98009d39c853b84714ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:31:73:ef:6b:ca:f4:44:92:31:c1:69:1a:
52:f6:2a:3a:be:3e:61:20:9b:5f:6a:87:65:5b:66:
5a:92:69:99:a0:56:c3:32:dc:cf:5f:49:40:0d:85:
d4:fb:33:db:5d:30:0a:8b:e4:86:66:6c:5b:5a:67:
01:81:32:e6:40:ba:68:bc:51:46:57:84:60:dc:8b:
ea:13:3c:40:00:fc:87:c7:08:79:53:cb:b0:93:c6:
d6:94:28:14:91:5f:45:b8:9b:ae:1d:33:c9:61:71:
f2:1a:5e:80:64:6e:70:28:f1:c5:1a:4c:42:ec:28:
31:71:9e:c9:2d:59:8a:ec:6b:5c:b5:30:58:91:8c:
fe:27:7b:f4:cf:9c:c9:73:b3:e6:d7:25:2f:52:72:
0d:6c:f9:95:af:b2:1a:fb:6f:d4:ab:76:bf:be:6d:
70:2d:4b:ca:64:92:44:41:05:f3:31:3d:73:ec:0d:
62:91:de:2d:e3:96:f7:bf:94:84:9e:c0:52:9d:d4:
0a:a3:ae:fd:7b:6c:8d:79:46:a0:b2:b6:b2:ba:8c:
8f:ff:56:e2:96:87:3d:65:da:80:78:c3:48:fc:f4:
ab:c1:8b:6d:a2:50:93:7a:9c:fe:fd:7d:af:34:1b:
07:d5:02:8f:39:16:43:c5:44:89:db:61:8d:8b:5d:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D6:38:E6:C0:C7:80:2B:BD:7E:98:00:9D:39:C8:53:B8:47:14:AC
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8b:fa:dc:2b:03:d6:d7:34:aa:d0:b3:7f:33:2d:56:ed:e3:
f9:50:e8:2e:c0:b3:bc:dc:0a:bd:7d:de:4d:ce:98:cc:35:d0:
69:bc:f7:ec:77:c8:45:e2:a0:5d:f6:37:bc:33:1a:99:ab:46:
d3:c7:12:1d:3d:bf:0a:d7:97:51:60:d9:73:c6:48:57:af:5a:
2f:b5:bd:3e:12:d2:28:f9:1d:03:75:7e:96:ce:1f:41:4c:37:
c4:ac:09:db:27:10:d5:c5:10:ea:4a:43:19:b5:41:b6:17:c1:
c6:01:36:a7:f4:1f:91:18:8b:f0:a9:02:42:d0:35:da:34:60:
3e:e0:3a:80:6a:d8:72:8e:29:4f:d2:f0:15:a1:91:0d:b0:1d:
e8:95:50:e1:eb:3e:48:32:22:49:13:96:80:da:11:f9:68:da:
20:b4:81:ca:d6:cb:e3:96:fe:dc:76:08:6f:2a:0b:1d:55:89:
92:72:cc:a5:b2:cd:de:5b:00:7f:9e:bb:4d:70:77:7b:f0:f1:
2e:d5:ee:e6:8a:15:c8:6f:f1:0b:aa:7d:48:88:8a:2f:9c:0f:
ec:23:c7:ab:a8:83:df:c4:d6:3e:13:87:a7:71:4f:59:97:02:
01:ed:e8:06:69:0d:45:21:42:42:00:92:5c:af:30:f4:19:90:
17:69:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:05 2026 by rpki-client