Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: yzAl+prxmgaOUEcDSXprmxQsWde9m7pYQDgew6T6Pxk=
Subject key identifier: 19:40:C0:4F:E3:73:30:7D:28:8F:DA:88:C4:9B:A0:57:38:4E:67:13
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 01A00401FAAAB96811BBB24017AA2BC01798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 0525
Signing time: Sat 15 Aug 2026 06:00:33 +0000
Manifest this update: Sat 15 Aug 2026 06:00:33 +0000
Manifest next update: Sun 16 Aug 2026 06:00:33 +0000
Files and hashes: 1: dE8xQiANkczZ0tAFkQGK1c1TYTY.asa (hash: TqFGlNij6y9fV1mllromoWTFgsW2Z9/zlXhLCTPAEBE=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: IHyganF6flTiUivcgfBG6pdrr92vULH8HmE+U7+avOk=)
3: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:01:fa:aa:b9:68:11:bb:b2:40:17:aa:2b:c0:17:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Aug 15 06:00:33 2026 GMT
Not After : Aug 16 06:00:33 2026 GMT
Subject: CN=1940c04fe373307d288fda88c49ba057384e6713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:71:b3:99:02:69:4c:b7:c0:94:13:b0:da:
9f:da:9e:69:14:21:0f:d6:b9:1e:e1:aa:b2:96:1b:
2b:32:35:89:a1:61:b9:16:82:18:c4:1b:bc:73:80:
d1:a8:22:09:e3:05:5f:00:66:f5:a8:b0:f7:f2:03:
58:ea:d6:0f:66:7e:13:75:b4:56:6d:f6:9a:6b:56:
82:93:6d:63:9d:41:4b:bd:ce:c9:96:1a:8d:d4:fb:
e5:a8:04:07:22:45:d1:7e:83:65:f6:81:ca:00:d7:
3d:a0:a6:66:3b:2b:53:7b:ba:c0:d1:3e:bd:d2:2f:
07:7c:99:ec:7a:91:b1:7b:7a:6f:f5:ef:38:21:99:
87:eb:c4:03:7d:09:72:ab:f8:35:31:43:46:1f:dc:
a4:30:ab:d6:72:f7:5b:d5:8d:37:c3:49:a2:b9:52:
68:e4:4d:bb:64:6d:ec:d6:d9:ef:d4:44:1e:c2:8b:
73:8e:d2:0d:db:0e:ae:3b:97:88:bf:10:80:5a:84:
da:cd:91:0d:38:b6:b5:bb:64:80:8b:a9:cd:95:82:
60:f0:d4:f5:b6:18:e1:af:bc:9a:aa:9d:cf:c6:4a:
cc:75:36:04:99:be:27:99:0f:09:31:fd:b2:e9:02:
52:c9:90:fe:b9:f6:d4:ee:06:30:f4:63:2e:e9:db:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:40:C0:4F:E3:73:30:7D:28:8F:DA:88:C4:9B:A0:57:38:4E:67:13
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fd:5c:f0:36:bf:d9:af:7e:12:84:f6:10:bd:e6:5c:d4:ef:
c0:7d:c4:1b:57:dd:47:9c:28:9f:f1:5a:40:19:83:33:32:ee:
bf:e8:0f:54:b4:17:58:85:8b:30:22:46:0b:8c:7e:1c:85:2e:
7a:2f:7e:a9:5c:39:8e:92:5c:24:62:77:8e:26:b1:f1:56:87:
1e:90:f3:dc:36:82:c8:f2:4f:5d:1e:ac:de:c1:d2:81:16:72:
cc:20:b7:44:70:19:f5:ed:b3:6a:df:ab:c3:fc:e5:bb:1a:04:
dc:32:f4:3f:60:b3:88:60:4d:96:75:d0:b7:7c:7e:a4:7f:28:
c4:54:0a:a7:6c:8b:53:72:05:a3:98:2e:1b:7b:98:81:e8:48:
cc:8b:2c:d4:7f:23:ba:41:4c:91:68:68:31:d5:04:1b:2d:d9:
2b:70:27:3c:77:35:19:7b:f1:bf:16:51:9f:74:a3:74:34:36:
56:2c:cb:c1:f6:bb:ee:be:e1:e2:7e:e3:e8:6c:1e:c9:2f:63:
88:77:02:91:e3:ee:a5:3f:9d:60:03:af:cf:b9:fb:0e:43:a9:
7e:10:9e:cd:3e:7c:f6:6c:9c:b1:ea:1d:c5:41:5e:5d:2d:7a:
13:26:00:6e:ec:08:ba:a3:28:45:26:20:e0:6d:30:06:6d:3e:
22:df:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:50 2026 by rpki-client