Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: lx0Fe3WxSefhc2Kw1DYQO+V54EehOljDOs73Ds/yJW8=
Subject key identifier: C7:84:B5:BF:29:F8:9E:23:A9:58:02:EC:A1:78:2A:F7:75:E5:93:13
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019F848C561BC6E19BB0705F75A65D0664EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 06C7
Signing time: Tue 21 Jul 2026 12:00:17 +0000
Manifest this update: Tue 21 Jul 2026 12:00:17 +0000
Manifest next update: Wed 22 Jul 2026 12:00:17 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: 3FaF50HdfBPPOudq9O5H08ePA3kJso9e+gE+JZNB3ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:56:1b:c6:e1:9b:b0:70:5f:75:a6:5d:06:64:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Jul 21 12:00:17 2026 GMT
Not After : Jul 22 12:00:17 2026 GMT
Subject: CN=c784b5bf29f89e23a95802eca1782af775e59313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:9d:d0:a9:5f:e3:bf:e0:c3:2b:ae:98:e2:
a6:c5:11:d9:6a:21:83:51:4f:39:00:c3:93:6a:f8:
5d:13:4f:c7:42:65:7c:14:e7:f2:c8:6c:22:92:e6:
87:c5:19:ba:5b:64:8d:f5:96:b1:aa:d2:a0:e8:a4:
5a:c4:7a:20:b3:da:75:22:df:25:86:83:ef:80:a5:
10:7e:c6:d2:87:04:b0:09:36:ad:b7:7f:24:93:0f:
63:ab:c0:4b:d9:d6:e1:59:75:5e:86:be:c2:05:bd:
3b:3d:71:4e:41:e9:a1:b8:1d:51:d8:31:f7:03:33:
12:49:6c:87:e0:ba:da:f0:0f:9b:7e:74:60:b0:69:
90:d9:53:7e:d2:2c:c7:89:5e:20:01:d4:8f:39:2d:
d4:ea:cd:8a:e8:13:32:27:d8:ae:dd:d8:8d:15:e8:
c6:17:b3:56:12:7b:b9:42:9c:e8:92:ef:99:76:af:
07:8e:45:72:75:ac:af:e6:1f:d9:ab:fd:72:35:25:
5e:b1:6b:c2:3d:40:28:00:8b:62:70:28:87:43:9c:
46:4b:bc:09:61:1e:36:61:9e:36:1b:4d:a5:72:f3:
d1:e2:a4:eb:0e:c3:98:9a:8c:b3:05:90:32:13:4d:
df:b6:6a:b3:2b:18:6a:2f:e6:7b:5f:d0:21:28:28:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:84:B5:BF:29:F8:9E:23:A9:58:02:EC:A1:78:2A:F7:75:E5:93:13
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f5:77:07:78:0c:4d:e1:32:fe:4a:17:7a:37:4e:42:20:3b:
27:8e:9e:3a:4c:35:52:1b:0a:a1:71:b9:d5:bb:72:53:02:76:
b5:9f:bd:43:8a:3c:df:fd:69:88:32:4e:35:1d:90:3d:90:d3:
b3:5a:51:2b:66:64:e5:10:a9:c5:ab:8f:a9:5d:ec:52:04:f6:
fa:a6:0b:ee:83:54:b4:bd:eb:25:34:9b:21:2b:6c:c8:59:01:
2c:e6:16:6b:b5:d5:b4:2e:05:2e:37:ea:65:d0:a6:52:37:eb:
1d:ed:b7:e9:8d:a6:fe:41:d3:b8:62:a0:1e:f7:10:1b:15:20:
c0:a8:07:65:9a:4b:fb:67:c9:78:dd:46:24:19:25:35:50:be:
5a:68:2f:65:40:3e:1c:23:d7:c5:73:42:1d:e6:84:79:4a:86:
76:61:5f:8b:54:c6:c5:1b:1f:49:e2:1c:1b:a2:cb:e5:07:ab:
47:50:a0:43:96:dd:35:2e:6a:75:3c:aa:5b:05:50:a1:26:3a:
e0:78:b4:5e:1e:54:46:b7:5a:e8:24:be:44:66:dd:4d:f2:73:
73:5a:3a:5f:e9:0b:21:c0:6b:0e:31:83:9d:c9:15:dd:34:56:
26:c8:e4:30:9f:0c:bd:03:9e:3b:88:8b:e0:d9:db:14:28:f4:
57:17:b6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:55:53 2026 by rpki-client