Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: cixSwRCWz63P2iurvGiT490ber7Pqb4lr2ilRwcbWnA=
Subject key identifier: BC:A4:25:CE:9A:F3:61:D2:A5:40:F1:6B:04:CE:23:25:D1:93:F6:C0
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 019F129C50CDFB21589771B622D6E2710CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 04A8
Signing time: Mon 29 Jun 2026 09:01:01 +0000
Manifest this update: Mon 29 Jun 2026 09:01:01 +0000
Manifest next update: Tue 30 Jun 2026 09:01:01 +0000
Files and hashes: 1: dE8xQiANkczZ0tAFkQGK1c1TYTY.asa (hash: TqFGlNij6y9fV1mllromoWTFgsW2Z9/zlXhLCTPAEBE=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: L1qpRdfPc6KXdFFpC4GWdMLtlsYKxTPS14x7Xc8Jxo8=)
3: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:50:cd:fb:21:58:97:71:b6:22:d6:e2:71:0c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Jun 29 09:01:01 2026 GMT
Not After : Jun 30 09:01:01 2026 GMT
Subject: CN=bca425ce9af361d2a540f16b04ce2325d193f6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:47:98:4e:8d:4e:bc:46:b8:73:0a:7d:89:
95:91:dc:93:93:2d:3e:b9:b5:a5:57:ff:0f:55:ee:
77:6c:85:4c:f2:89:f7:d8:e5:c7:85:a2:fc:7a:55:
cd:e4:97:3a:13:05:39:a2:1e:19:6f:4e:92:13:73:
d4:4a:65:30:66:75:45:34:e3:b4:08:d7:84:28:ae:
15:9a:a8:e6:33:bf:31:e7:99:24:c4:df:94:2c:e9:
9a:5a:7a:22:e8:8b:46:5e:4b:f9:31:58:29:df:58:
06:8a:05:d2:de:8b:8d:1a:b2:a7:34:2e:0c:82:3b:
7d:d3:38:f6:ee:6a:0e:6c:84:50:18:cb:16:c7:89:
7a:15:4b:97:f4:7d:19:56:20:e7:49:80:7f:5b:d5:
81:6b:36:f2:11:e8:19:3f:c3:f9:96:ab:a9:6f:04:
65:a6:e5:bc:f0:a6:ed:6d:df:df:c5:b4:13:4b:d1:
38:ec:e5:06:28:b0:c8:06:da:de:b0:12:2b:9c:48:
cf:2f:47:f6:4c:a8:cd:4b:b6:f5:76:37:50:d5:2b:
02:14:05:ff:a2:0e:65:9a:87:24:7d:f7:1d:e8:dc:
65:f5:8c:5d:c0:6a:4a:9f:d2:9e:e1:85:91:ec:ec:
5b:88:94:f1:f8:b3:36:6e:72:4f:df:b6:2d:3c:a4:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A4:25:CE:9A:F3:61:D2:A5:40:F1:6B:04:CE:23:25:D1:93:F6:C0
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d8:fa:f1:f9:cd:0f:d4:63:9b:30:56:c0:63:70:ee:31:ec:
ac:af:3a:4a:84:1d:39:80:8f:15:83:4e:61:4e:9a:02:e1:b8:
0d:dc:e3:a9:c8:4d:e0:ca:9d:19:c6:1b:58:24:50:cd:ad:f2:
78:22:d1:1a:97:0b:7b:04:28:22:7e:a4:51:f5:30:76:3e:91:
86:2e:1b:fb:d4:4d:2d:e0:7e:e3:85:87:6a:88:1c:67:4b:f7:
66:3e:10:e7:b4:bc:23:bf:f6:29:bf:fe:ec:cc:87:90:a9:80:
29:48:06:eb:1f:18:be:6b:8c:c7:95:77:3a:00:6f:1a:d4:0f:
ff:5c:9d:0b:25:03:49:e5:9d:07:bc:81:b7:50:1c:e2:c8:49:
39:88:39:eb:c1:fd:05:f0:f4:8e:74:17:67:5d:33:bb:49:ee:
64:3e:21:ca:3f:e9:41:c6:f2:10:36:de:40:b7:53:b8:21:95:
9e:1d:c6:e6:d0:35:ad:d8:8a:99:e8:7d:e8:54:03:04:b2:c2:
76:7a:0b:4b:9d:15:32:ff:00:8e:f2:77:59:91:bf:4d:d4:0e:
0f:e9:1e:51:b8:1c:98:60:c4:2d:6b:f2:67:72:5c:4b:4f:9d:
ae:04:03:c9:cb:21:5b:1f:7c:36:d5:b1:90:5b:6c:34:38:78:
94:b4:5a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:25 2026 by rpki-client