Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: L0TiA34humFUkbr7DlsZubOP3uFOBucrRlatt1H4+hA=
Subject key identifier: A1:9D:F3:36:B4:2F:F6:C4:64:A4:4E:71:59:10:23:F4:8A:4D:04:D5
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019F84C42639B0233DF21BB09B83A1C4E6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0A0F
Signing time: Tue 21 Jul 2026 13:01:15 +0000
Manifest this update: Tue 21 Jul 2026 13:01:15 +0000
Manifest next update: Wed 22 Jul 2026 13:01:15 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: YW3dqaskoc89gd2yCGe73MSoRDv+Jsw5ZhFrlG9EiNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c4:26:39:b0:23:3d:f2:1b:b0:9b:83:a1:c4:e6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Jul 21 13:01:15 2026 GMT
Not After : Jul 22 13:01:15 2026 GMT
Subject: CN=a19df336b42ff6c464a44e71591023f48a4d04d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:01:41:37:08:66:fe:6f:04:72:cb:79:bd:
19:62:fc:a8:b7:3d:34:d5:37:c5:99:4d:9e:70:13:
83:ea:68:4a:9b:08:14:88:5c:5b:25:cf:28:6e:bc:
af:af:18:76:bd:29:48:df:fd:13:84:a7:71:7c:39:
77:aa:06:b4:91:81:33:48:55:84:d3:fe:ef:0b:dc:
ba:17:af:0e:6c:0a:36:1f:c8:72:73:22:5a:2f:2e:
a8:f5:83:2b:5d:36:21:f1:8a:e3:2a:8b:6d:d1:00:
40:9a:cf:8b:d1:2f:70:99:45:2f:0b:23:60:ac:d9:
1e:9a:bb:86:d1:cd:79:71:6b:74:0f:eb:e6:38:0f:
53:a1:ee:30:18:52:4e:4e:2c:65:60:9a:3d:4d:d5:
29:56:60:e1:8e:cf:cd:34:b1:9d:75:85:ac:76:9e:
5e:7a:20:53:f4:9a:7a:02:5a:ab:9b:2e:93:74:5a:
d4:9d:a6:15:05:bf:cd:60:fc:da:57:3d:e6:bf:76:
7d:05:28:35:a5:a1:47:21:ba:6d:b6:3d:cb:c1:3f:
60:cb:e6:6c:09:84:d3:15:14:fa:e5:86:46:83:53:
10:95:ea:12:b1:a9:0b:e4:d8:d7:b7:ed:c9:a6:06:
91:08:f7:17:2f:d9:01:d4:79:7d:80:9e:ca:c3:1e:
4c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9D:F3:36:B4:2F:F6:C4:64:A4:4E:71:59:10:23:F4:8A:4D:04:D5
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:82:8d:f4:e3:80:41:a4:51:ee:d2:e2:dd:62:8d:71:1a:f0:
f8:e8:b1:c6:0d:f0:a0:48:20:83:ba:5b:5a:97:c1:1b:8d:f1:
19:a4:da:df:3a:e8:91:35:f0:f8:9f:11:d0:36:97:87:2b:d4:
8b:cd:dd:0b:98:14:c0:af:6a:53:d4:a8:d8:2a:39:87:24:0d:
7d:79:40:ae:b5:d7:08:01:da:b6:35:03:4c:17:e6:88:89:f0:
5d:fb:53:e7:a4:fc:a5:fc:5d:97:84:9c:eb:c4:05:da:ea:ac:
1c:43:93:64:2d:f0:40:27:44:7e:41:6d:70:c0:ae:05:43:0f:
8a:4d:15:20:83:ee:55:1b:8f:c7:d4:65:75:c1:5b:d4:67:74:
6d:6a:59:c8:28:a6:43:c9:39:2a:a2:9c:2e:db:8a:45:68:5e:
1a:cf:4a:fb:21:6d:22:b7:d5:91:56:c7:16:38:05:25:1b:a6:
6c:e8:4a:09:ea:da:b4:62:61:22:3c:c9:a6:3d:0b:66:b9:40:
57:02:b1:fd:16:5f:4e:0c:47:5c:25:98:0b:de:6c:0d:85:02:
9e:a8:f3:75:94:ff:6d:ff:87:94:23:ff:23:7d:4b:3c:e2:19:
a8:a8:e7:3b:77:1a:47:f8:e1:29:1f:21:1e:51:68:c6:45:e7:
11:a6:54:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:18:46 2026 by rpki-client