Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: bWW9kV54xmb8qQkxA7nA+Okgb11B08wprORvPyUHkFI=
Subject key identifier: 3C:1B:04:28:A8:3B:19:55:F8:85:01:68:A4:2D:84:0C:31:C2:01:4E
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 019F946DD9C75D847238D8769E817FFE5AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 165C
Signing time: Fri 24 Jul 2026 14:00:54 +0000
Manifest this update: Fri 24 Jul 2026 14:00:54 +0000
Manifest next update: Sat 25 Jul 2026 14:00:54 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: kMaKIWICiO3U22DYa1g8R+pwTz2lAMhDrWEgt09sFyU=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:d9:c7:5d:84:72:38:d8:76:9e:81:7f:fe:5a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Jul 24 14:00:54 2026 GMT
Not After : Jul 25 14:00:54 2026 GMT
Subject: CN=3c1b0428a83b1955f8850168a42d840c31c2014e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:86:f4:ac:00:0d:22:1e:ff:4c:8d:e3:37:4f:
75:f0:18:52:21:54:b9:dc:42:ef:7b:ad:bb:36:1a:
2e:b5:54:dc:02:50:c7:f6:75:18:9a:9d:5c:ff:a2:
dc:26:a5:c8:54:38:83:ab:76:2a:7e:47:c6:1a:e8:
3f:7d:c5:dd:03:82:2c:57:df:a8:7d:41:b8:bd:1e:
cc:5e:c3:1d:97:a8:89:b7:e1:31:c3:7e:91:07:8f:
ba:8d:f4:ac:a0:50:d5:20:5f:37:d8:1e:28:39:8c:
5d:4f:cc:0d:1a:e1:a3:02:1e:c8:a2:75:90:86:12:
82:b8:df:bf:52:46:93:73:b4:94:78:fe:66:04:af:
13:9a:43:e6:c6:04:d3:19:d2:fa:93:20:36:32:3f:
1c:ed:2f:86:de:63:9c:86:3b:0f:3a:ec:27:ca:41:
2c:58:e2:7f:54:d7:4c:e6:d2:d9:bb:7c:e3:e4:8e:
be:09:9c:87:3a:1c:31:1d:43:84:5d:02:60:4a:5b:
70:05:d1:49:f4:03:1b:c5:68:a8:71:0e:35:86:52:
fd:58:1a:ce:ae:cb:4d:86:6a:5a:9c:bf:f8:d7:5c:
37:bb:f4:dc:2d:94:18:48:11:a1:53:4b:05:03:7c:
f3:bd:d9:cc:95:95:7f:6b:a7:bc:f8:37:03:9e:79:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1B:04:28:A8:3B:19:55:F8:85:01:68:A4:2D:84:0C:31:C2:01:4E
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f5:f8:c9:f6:34:ff:a5:e2:68:53:0c:19:68:5c:5e:ec:2b:
79:4d:70:fa:5b:53:84:8e:5a:26:bc:8e:f9:c4:64:8d:7f:4f:
1d:c3:55:2a:dc:74:b8:e5:18:9c:a8:38:51:c0:fa:1d:a8:d8:
0f:5d:af:66:51:15:60:30:d2:9e:cb:86:66:74:01:20:74:f7:
57:67:33:16:7c:e1:6e:d0:75:bf:e5:0e:23:37:74:19:71:42:
9f:59:88:91:44:64:a4:77:f1:6d:89:bd:b2:f3:de:a0:f1:0e:
c7:d0:18:fd:82:cd:f3:72:ca:76:c5:ed:ad:08:d5:b9:e7:34:
10:2e:c0:d7:cd:d3:2a:f4:18:04:4d:2e:83:35:76:df:55:03:
0c:c1:8a:e1:19:57:1d:f0:7b:7a:09:f1:6a:d4:2e:4d:32:46:
29:51:81:3a:a6:b2:fe:ed:d6:1d:d9:4d:3b:b1:de:e6:56:2d:
f5:71:18:79:e4:ed:3a:ea:4f:78:fb:07:ed:5b:da:b1:ab:91:
1a:9c:59:a0:35:5a:71:6f:c0:b9:af:0c:20:74:4e:7b:1c:eb:
7b:47:91:82:0d:9e:78:5a:66:70:87:ad:07:67:9b:c8:5d:73:
04:dd:a6:78:4e:94:de:a8:cf:96:05:51:8d:38:95:c3:31:de:
98:49:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:08 2026 by rpki-client