Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: pmB7vplk0RL2/I197sWYwlbIGUxeeY8ro2moWxbXTic=
Subject key identifier: 47:9F:28:A7:97:A8:FD:3E:95:9E:84:FD:68:CB:38:EA:FA:78:5A:8E
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 019F951281482B4F15C2F65CC495950292B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 0303
Signing time: Fri 24 Jul 2026 17:00:45 +0000
Manifest this update: Fri 24 Jul 2026 17:00:45 +0000
Manifest next update: Sat 25 Jul 2026 17:00:45 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: UUttuXjEfWStcvqEYLbVLVBqH5rEcgXE8s5rI62iPu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:81:48:2b:4f:15:c2:f6:5c:c4:95:95:02:92:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Jul 24 17:00:45 2026 GMT
Not After : Jul 25 17:00:45 2026 GMT
Subject: CN=479f28a797a8fd3e959e84fd68cb38eafa785a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d3:6b:92:8f:eb:32:2c:ca:44:09:b0:09:e5:
41:e3:11:8c:16:03:6f:51:dd:7a:56:1e:b4:7f:60:
a3:26:f9:98:b7:a1:4f:27:5e:4c:48:f6:41:50:2c:
0b:1a:69:60:82:0f:93:fb:29:27:43:44:66:08:ca:
41:c5:8d:dd:22:3a:e9:79:b6:78:6c:a0:97:1e:b6:
43:75:57:29:a3:70:2a:5e:de:7f:53:e0:49:87:01:
3f:4f:dc:fb:f1:7b:79:79:f6:3e:ff:72:92:e0:7b:
09:a1:86:8a:33:55:54:4c:be:94:2c:f3:8d:df:53:
fb:3c:b9:34:df:01:4c:a9:5c:a7:f0:94:b5:da:0d:
84:da:e2:b0:9c:9d:1a:f8:cb:80:98:6e:0f:b3:91:
d1:59:82:78:99:9c:7a:83:c5:a6:74:be:7f:e9:31:
07:a5:32:f8:8c:20:45:9f:63:8c:b3:18:07:9e:ad:
4c:25:42:f2:ea:f5:58:ee:6a:e6:dc:71:2e:f4:eb:
96:18:fc:5c:a2:ce:8a:46:fb:2d:aa:c9:fc:c3:f1:
85:12:ae:6d:9f:2b:bb:73:a9:fd:71:df:e7:c6:32:
bf:31:a0:91:bf:4d:8b:a3:8b:a4:d1:2c:cd:2c:78:
74:b6:50:27:e9:87:12:52:2e:c4:0c:8e:74:52:df:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9F:28:A7:97:A8:FD:3E:95:9E:84:FD:68:CB:38:EA:FA:78:5A:8E
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cd:00:ed:c7:09:30:44:64:09:8f:14:03:99:86:12:da:45:
41:5b:55:3a:c2:d5:d1:68:38:b6:b7:f1:3e:57:c1:fb:be:b4:
c4:ea:c6:31:ef:9a:82:0d:47:7a:8a:44:e2:7e:56:7c:80:1b:
64:96:a5:6d:eb:56:ab:9e:c8:11:f4:4f:d7:54:40:93:0e:23:
7b:e9:29:21:cc:dd:71:8c:41:b1:6c:15:e3:2f:5e:56:44:e2:
1d:36:00:6c:05:0c:f5:da:a4:a6:66:1f:2f:d5:62:23:28:a5:
e0:94:da:8c:b6:48:62:75:0d:40:53:6a:3c:e7:d9:45:63:ed:
38:d6:08:2e:5c:b2:ca:63:89:e8:76:1c:b1:ef:02:42:53:05:
d4:b1:57:2c:7d:e9:0d:21:ca:92:5d:53:13:80:1a:1c:e6:7c:
a6:ef:6e:b6:32:a8:b4:85:b2:c0:e0:27:39:82:d9:ac:d7:5b:
2a:06:2a:08:3d:23:36:f6:bd:33:2c:89:be:af:f9:33:c5:e3:
1b:da:84:ec:9f:6d:d5:df:a5:17:79:bf:b2:1e:9b:ae:5b:72:
11:76:c2:60:cc:f5:78:59:02:74:a4:5a:1c:7c:37:62:c3:51:
4a:90:7b:35:00:e1:46:a1:7a:e3:7b:f8:29:93:dc:d3:16:59:
6b:dd:66:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEoFIK08VwvZcxJWVApK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1M2YxZDVhMTg4YWU2YjJiNWYyYWExMzhkYjhmOTlhYTVh
YWQ3YTEwHhcNMjYwNzI0MTcwMDQ1WhcNMjYwNzI1MTcwMDQ1WjAzMTEwLwYDVQQD
Eyg0NzlmMjhhNzk3YThmZDNlOTU5ZTg0ZmQ2OGNiMzhlYWZhNzg1YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69Nrko/rMizKRAmwCeVB4xGMFgNv
Ud16Vh60f2CjJvmYt6FPJ15MSPZBUCwLGmlggg+T+yknQ0RmCMpBxY3dIjrpebZ4
bKCXHrZDdVcpo3AqXt5/U+BJhwE/T9z78Xt5efY+/3KS4HsJoYaKM1VUTL6ULPON
31P7PLk03wFMqVyn8JS12g2E2uKwnJ0a+MuAmG4Ps5HRWYJ4mZx6g8WmdL5/6TEH
pTL4jCBFn2OMsxgHnq1MJULy6vVY7mrm3HEu9OuWGPxcos6KRvstqsn8w/GFEq5t
nyu7c6n9cd/nxjK/MaCRv02Lo4uk0SzNLHh0tlAn6YcSUi7EDI50Ut+FUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEefKKeXqP0+lZ6E/WjLOOr6eFqOMB8GA1UdIwQY
MBaAFIU/HVoYiuaytfKqE424+ZqlqtehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MmMwOTUtZDY0MC00MWVjLWEwYmQt
OGQzMjAwNjJhZTg5LzEvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MmMwOTUtZDY0MC00MWVjLWEwYmQtOGQzMjAwNjJhZTg5
LzEvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa80A7ccJ
MERkCY8UA5mGEtpFQVtVOsLV0Wg4trfxPlfB+760xOrGMe+agg1HeopE4n5WfIAb
ZJalbetWq57IEfRP11RAkw4je+kpIczdcYxBsWwV4y9eVkTiHTYAbAUM9dqkpmYf
L9ViIyil4JTajLZIYnUNQFNqPOfZRWPtONYILlyyymOJ6HYcse8CQlMF1LFXLH3p
DSHKkl1TE4AaHOZ8pu9utjKotIWywOAnOYLZrNdbKgYqCD0jNva9MyyJvq/5M8Xj
G9qE7J9t1d+lF3m/sh6brltyEXbCYMz1eFkCdKRaHHw3YsNRSpB7NQDhRqF643v4
KZPc0xZZa91mBQ==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:06 2026 by rpki-client