Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: EoMUm5dUcale4r1+IPPYJhRcVE4sD1fox/bTCnWMwk8=
Subject key identifier: BB:44:8D:31:66:27:43:6A:EC:CF:D9:4D:EB:9F:51:31:47:B3:30:0C
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 019F85312CFCC6E5B8BADA2C522D7D8C958B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0B4F
Signing time: Tue 21 Jul 2026 15:00:20 +0000
Manifest this update: Tue 21 Jul 2026 15:00:20 +0000
Manifest next update: Wed 22 Jul 2026 15:00:20 +0000
Files and hashes: 1: P0H9mn8azX8J6K-hdAfHiYeHr48.roa (hash: E4c9kuinUCaG0thWwOJajTUQL7VeKxkEvaLK1sfiV8U=)
2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: kSoaWHONapX5rbjsLPPJdaV3ohySe3Q7d0ExywgBMWE=)
3: tdjIiHG6aRg6RaOSgsb_E64QRco.roa (hash: rpGb1Qz22L2bS8euMlwSPzOxpxsFd6dx18fW4QaBOow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:2c:fc:c6:e5:b8:ba:da:2c:52:2d:7d:8c:95:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Jul 21 15:00:20 2026 GMT
Not After : Jul 22 15:00:20 2026 GMT
Subject: CN=bb448d316627436aeccfd94deb9f513147b3300c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:43:66:72:5d:db:28:4e:7b:8f:41:79:bd:
1d:c5:63:d4:95:92:e9:e8:07:2f:de:91:c5:de:49:
a3:5f:82:9c:fe:5b:50:7d:00:de:38:c7:13:3a:4e:
cf:7a:07:14:fd:2a:0e:d7:cb:d9:2d:42:49:2c:84:
2f:6d:00:2b:b5:79:63:3f:82:c9:99:4a:97:b4:47:
23:b7:cf:b7:b6:6f:a4:a5:72:a5:f1:4e:cb:ac:63:
1d:47:08:41:e0:46:58:3b:f4:5f:9a:b0:af:45:1a:
a4:9f:f2:74:e6:65:41:2d:82:d2:c5:f6:5f:49:74:
17:8f:75:31:13:45:2a:83:f7:5b:b0:46:24:68:fb:
4a:6f:ab:fa:89:7f:10:b3:92:d4:ea:45:97:15:ab:
89:83:6e:ca:b4:01:4d:06:b7:15:f3:cd:b2:f6:d9:
ab:91:4b:e8:f1:de:2a:72:28:06:fb:c6:f8:ef:2e:
be:5c:e0:45:d2:2f:31:8a:97:40:ae:70:15:84:f7:
84:0a:d9:ec:db:2c:20:3f:db:0e:92:f9:8f:26:6e:
ee:82:ed:b1:f2:c7:d5:58:f9:9c:e4:36:15:67:b9:
00:88:bb:b5:47:6d:50:e9:7f:53:32:fe:96:97:d8:
be:f8:36:94:6f:44:d5:cf:46:5c:56:ba:01:58:60:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:8D:31:66:27:43:6A:EC:CF:D9:4D:EB:9F:51:31:47:B3:30:0C
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:63:6d:e5:8f:36:11:37:11:0b:c7:12:64:39:62:0e:de:03:
b7:bd:7f:ce:cb:6d:fc:ed:8d:fc:2d:04:0c:3f:08:cf:56:d3:
c0:1b:1f:13:d1:87:a2:88:e4:5b:5d:4c:c8:5c:39:42:b6:ff:
a4:fe:d9:bc:d7:4b:7b:0c:03:fd:73:4e:69:d1:e1:a7:38:47:
54:fe:45:07:f3:f0:4d:f1:0a:8d:42:dc:08:4f:5a:d1:d2:97:
33:c9:21:fe:67:37:25:48:7c:f8:04:94:fb:6a:21:1e:cb:e1:
0d:54:9b:e7:7f:21:8f:c0:c8:29:2c:d8:b1:f9:90:8a:f1:f6:
9f:87:0d:4c:08:ec:ef:62:92:d9:58:6f:14:0b:fc:a9:3c:5f:
66:6c:16:9c:6f:03:4a:1b:39:d6:91:d6:1f:4e:cf:4f:0e:ec:
fe:e7:95:7e:5c:41:4c:3c:f4:ec:cb:68:30:1c:f4:49:80:c3:
72:11:be:01:11:d0:66:7a:a4:92:84:0c:18:96:68:17:a1:f6:
a0:de:66:e3:45:0a:91:76:70:fb:c9:f5:5b:cc:2e:de:5c:90:
5c:1a:03:43:e2:e1:0a:5c:a3:6a:7a:d1:4d:bd:46:ce:2c:09:
28:f6:fc:ff:21:9c:6d:07:fe:83:09:c7:09:e3:94:e8:b1:06:
35:8d:e3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:18 2026 by rpki-client