Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: 3HCKuoE01AGS4AnMGs5oFfMQ7MPaCtwufCwxp5w4OIk=
Subject key identifier: FC:30:13:36:C9:68:A4:CE:0C:2F:E4:CB:E9:9E:EA:B6:E1:D2:0B:30
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 019FFAFFB55889672F5675237B75314E20E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 19CC
Signing time: Thu 13 Aug 2026 12:01:29 +0000
Manifest this update: Thu 13 Aug 2026 12:01:29 +0000
Manifest next update: Fri 14 Aug 2026 12:01:29 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: 3uS7UD8SxBFdLboRqAGJ2wmwcadPN6Cxo/nl9e7IC+c=)
2: q8Sc-hb4z8RPWefbF866BBRja54.roa (hash: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:ff:b5:58:89:67:2f:56:75:23:7b:75:31:4e:20:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Aug 13 12:01:29 2026 GMT
Not After : Aug 14 12:01:29 2026 GMT
Subject: CN=fc301336c968a4ce0c2fe4cbe99eeab6e1d20b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:95:0a:cd:15:01:7b:fc:63:bb:8d:be:ec:
ba:de:00:25:c9:a4:6b:49:0a:12:60:7a:e1:21:41:
04:b8:d7:5c:7f:cd:d1:dd:77:f2:f4:26:80:48:ea:
ac:11:24:43:ef:f3:7b:5e:38:8c:f4:8c:c5:98:b1:
46:7a:48:9b:04:27:09:5b:9a:2c:c0:20:ff:34:ac:
9a:04:a6:55:0d:cf:88:c8:40:d1:38:2c:a5:12:1b:
69:78:4e:3f:fb:84:17:0f:2d:29:52:d2:c7:0f:ba:
6f:36:04:2d:87:27:0c:b0:27:ef:18:1c:5c:bf:ff:
38:83:5e:3b:18:aa:3f:93:a7:a9:3f:dd:d9:27:41:
82:ff:1d:fb:a9:73:a6:cf:8a:1c:2e:74:e2:a9:79:
0f:b2:9e:7f:53:d9:32:3a:1b:60:37:b3:f5:f4:b3:
23:e2:7c:b4:4c:34:4e:27:c4:84:93:24:df:84:f5:
79:77:c6:ea:b5:69:4a:60:54:fc:47:3d:d7:28:7f:
fe:b5:08:4e:ac:f1:a3:57:b4:55:fa:90:17:14:3c:
a5:2f:2c:ac:c6:3a:ce:82:78:3c:09:7f:f1:ef:70:
46:25:66:4f:bb:29:14:f6:4b:1e:64:2f:75:a8:a6:
90:a7:e8:2b:75:06:b5:4d:f7:27:4f:47:3b:03:cd:
19:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:13:36:C9:68:A4:CE:0C:2F:E4:CB:E9:9E:EA:B6:E1:D2:0B:30
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1b:61:5c:cb:36:da:5f:10:54:de:75:b5:a7:8a:74:70:95:
ed:24:79:04:66:f7:51:ba:b3:d9:11:31:71:e1:f9:84:a4:5e:
eb:13:20:0e:3a:fc:d7:26:55:64:b1:f0:82:1e:09:4d:30:ed:
7c:1c:70:ec:fc:21:17:88:d7:38:d0:15:35:74:9b:47:2e:94:
d6:c7:1f:ec:aa:d6:0d:43:24:3c:73:e5:10:09:ea:17:d9:8f:
d1:27:02:d4:34:c8:fa:67:45:eb:18:79:3f:76:ce:86:d2:35:
6b:ed:1c:f6:9b:32:3d:4d:f7:c4:c8:9f:0b:c4:ad:fd:be:7c:
2e:d2:37:f4:98:87:76:b7:2b:66:63:d3:56:ee:8a:86:f0:ef:
ab:e5:3b:d7:8f:92:17:e5:6c:70:06:ae:26:5a:21:9a:08:e5:
17:bf:d7:bf:7a:0d:a3:fe:12:89:3e:c3:08:ae:ab:ab:70:01:
8e:2f:92:c1:8f:b6:09:9b:32:6b:d7:9c:28:63:85:d1:b4:b3:
a2:6e:c4:ca:16:2d:30:ee:bb:8f:72:f7:c7:94:7f:d8:45:4a:
ea:dc:0f:28:60:44:7b:a8:08:20:f4:f6:09:09:45:3d:e4:fc:
2d:ec:aa:fe:81:9e:f7:e1:32:93:06:55:c3:28:c3:bb:fd:0f:
c3:b4:38:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 20:52:51 2026 by rpki-client