Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json)
Hash identifier: EE9JA0orHLtYZTTbzerJn4YBzhjLPPpI18Ytjw9xOTw=
Subject key identifier: 21:19:DF:4A:B5:DD:18:7C:06:56:C5:9C:A7:69:DB:84:A8:65:EE:4B
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 019FA229AE0CE66CE8C84C4DD1F6C32B4BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
Manifest number: 0FA7
Signing time: Mon 27 Jul 2026 06:01:08 +0000
Manifest this update: Mon 27 Jul 2026 06:01:08 +0000
Manifest next update: Tue 28 Jul 2026 06:01:08 +0000
Files and hashes: 1: VvsA1Kl39BglFknild5eA4Dydww.roa (hash: NFyWQReCFe2c01EEjfpo/UVkTf+Rhd9xSOXiVKp36g4=)
2: aNBSAPidLf7Zr9rTX7poShldEUQ.roa (hash: 5HAeXiMlHW8kFdlTB8XHD3hF61UiZtMH1ZY+JgE0QcI=)
3: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: nDVbbg4+MGUeGL25OVHjMrOw3SGgD0RiUITxtA8Oq+g=)
4: rb-CMpsRgp4MG_UrqROnerBNmLo.roa (hash: nFR4DTY5jeXMm+3EFDI/vTrdgkyRg8zqtIKzCPhxbjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:ae:0c:e6:6c:e8:c8:4c:4d:d1:f6:c3:2b:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Jul 27 06:01:08 2026 GMT
Not After : Jul 28 06:01:08 2026 GMT
Subject: CN=2119df4ab5dd187c0656c59ca769db84a865ee4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ec:8c:7c:37:b3:3a:a9:a3:47:52:fc:bd:e5:
83:4a:de:97:56:3d:fe:40:21:78:cc:53:4a:a2:d3:
f1:3d:a6:b7:a2:79:83:09:30:28:fc:fc:03:ab:07:
f1:ca:7c:fb:49:5f:77:98:ea:bc:ac:80:29:63:2b:
15:a6:9c:b3:03:5a:cd:07:54:06:f8:ea:dd:75:ea:
df:a5:6f:6e:85:a3:e8:09:1c:c7:db:2f:17:96:73:
ac:81:67:44:90:6b:b9:3c:bb:4c:46:b3:c5:98:be:
81:ea:c9:0a:18:6c:f7:93:c7:ea:7b:34:de:19:a8:
80:ec:41:9a:2a:9a:c9:83:59:28:0b:1e:b4:c5:9a:
35:cc:4a:bb:08:07:01:4c:7a:66:45:4c:d3:7c:ef:
8b:3a:d5:72:e0:60:c2:90:22:8a:21:a7:0c:20:c6:
91:0c:cb:73:ba:ce:da:d2:cb:99:3c:d1:a1:5b:08:
e7:b1:f2:4f:b7:09:f8:0b:88:fa:9c:bb:2c:25:69:
3d:89:69:f2:1d:c5:79:da:f8:55:ae:2f:ee:93:92:
09:c5:96:bb:b3:5b:fe:78:27:b2:a1:df:1d:04:20:
1e:02:3b:5c:d0:2b:d7:4d:80:78:38:89:5f:2c:ab:
25:79:9d:54:b3:0a:76:56:d7:23:3b:d4:0a:a1:30:
ea:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:19:DF:4A:B5:DD:18:7C:06:56:C5:9C:A7:69:DB:84:A8:65:EE:4B
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:2b:24:72:03:34:a0:8f:97:2d:07:df:d9:a9:8e:98:83:
47:62:35:1d:dc:02:d6:7f:7c:e6:d3:ac:5f:f3:a0:96:d5:ed:
c7:d5:76:bd:31:6b:08:12:37:ac:b4:ce:19:20:d1:b9:88:5a:
47:fe:a8:ea:51:62:23:b6:27:32:d8:22:df:2b:81:3a:74:79:
4d:11:09:c4:88:e8:55:e0:9f:90:b1:fb:2e:d7:14:0b:0c:07:
1a:d6:52:c1:44:6c:56:a4:88:d9:a9:e0:f8:c8:29:98:68:8a:
f5:7a:c5:4d:59:74:22:8a:6d:02:eb:6d:f5:e3:f7:b1:f3:5e:
df:43:f1:05:15:fa:17:87:a8:ea:14:52:7e:be:a7:bd:ef:6d:
2a:fe:02:62:61:05:bd:e4:1f:41:6e:cb:a4:13:e3:36:0d:0e:
fa:29:b2:76:13:54:90:17:01:90:ed:82:29:7b:5f:71:3d:7d:
27:a1:14:ce:82:ec:7c:73:d9:c9:65:22:e3:ca:7d:c4:b1:19:
c4:1b:49:bc:3a:70:d0:37:f7:4f:89:a2:6e:13:a9:72:9d:44:
cc:20:d6:d5:e2:72:ec:34:c3:d2:92:df:46:5f:37:0e:36:33:
8f:01:59:56:d2:27:bf:d5:47:5c:26:b0:ae:9f:d5:08:f4:d9:
42:bc:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:40 2026 by rpki-client