Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: 0HLhByYT9KKQc29visWsNKKbKfafWHRyp3kTpBSSjes=
Subject key identifier: DB:DB:70:BE:5E:CF:A7:FE:37:68:E1:0A:BA:D3:66:7B:FC:83:CC:04
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 019F72BD9BD76F40B34658E13FE6D65F31F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 0503
Signing time: Sat 18 Jul 2026 01:00:56 +0000
Manifest this update: Sat 18 Jul 2026 01:00:56 +0000
Manifest next update: Sun 19 Jul 2026 01:00:56 +0000
Files and hashes: 1: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: i++0sNJC6QArMYLHjx4T9lzZnjf5H9q64qnJKnBPmhE=)
2: uoOfCKkTnW2JzFJRrSJDBT5bTzc.roa (hash: jS+d7zXHIn78Fh4bwNdoOL3BSqCzsjrWEmoa3PN6ng4=)
3: wOpotjYca3hIDPpRRC4dKRWIXpY.roa (hash: ILk18RM+vK4poNQ402hCagvt+4XgooFqtYGnOzDde5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:bd:9b:d7:6f:40:b3:46:58:e1:3f:e6:d6:5f:31:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Jul 18 01:00:56 2026 GMT
Not After : Jul 19 01:00:56 2026 GMT
Subject: CN=dbdb70be5ecfa7fe3768e10abad3667bfc83cc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:95:7b:4e:55:78:25:de:9e:b7:1d:73:21:
81:fe:09:5f:47:79:1c:49:8c:6c:a9:3c:37:73:a7:
a4:5e:c8:6c:86:ed:db:93:8c:05:73:a3:7d:f1:b5:
23:28:b6:73:5b:dd:63:8d:28:0c:2f:e7:3b:1c:b2:
f2:86:9f:0c:46:14:86:bb:1c:8c:55:d8:39:79:d3:
ef:72:1d:df:3c:0f:45:10:79:5e:84:8a:2f:bc:e8:
1a:a2:aa:52:d1:0d:5b:47:16:8e:30:4a:bd:3b:c6:
08:01:54:a4:6b:de:7f:0a:9a:24:e2:b5:c7:8a:61:
4d:0c:39:52:a6:4f:64:75:8e:a7:61:a2:54:66:09:
01:91:b5:19:45:bc:c1:47:f1:bf:d1:2a:f4:81:ca:
35:fe:f2:1d:0e:00:b8:cf:b7:6f:d9:62:bf:34:93:
df:a8:28:16:e0:a6:11:47:34:56:3d:b1:ae:0c:2e:
32:f6:21:1a:f4:e1:b9:50:01:2f:9f:07:bd:0d:18:
1f:31:9c:a7:45:1b:27:d3:94:14:a3:75:e3:03:c0:
6d:c8:33:61:e5:b4:e2:e2:bf:50:38:3c:a4:b4:3e:
3d:d6:28:77:cf:01:b3:f8:66:b1:93:d1:e7:dc:a8:
6a:34:ef:c5:3a:ac:38:d6:14:36:10:e9:87:c8:27:
82:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DB:70:BE:5E:CF:A7:FE:37:68:E1:0A:BA:D3:66:7B:FC:83:CC:04
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ba:b3:dc:d9:52:ba:7e:53:7c:6c:4b:c9:1d:72:d0:be:fb:
b1:1c:c0:e7:87:1b:e7:7c:a1:ae:bf:ec:0f:d8:8c:aa:5e:ba:
09:5d:40:63:b0:58:51:1c:2c:f2:9e:1d:ed:df:1f:ca:15:6c:
63:88:64:44:21:b4:f6:eb:b4:74:e4:8f:b7:79:72:69:60:3a:
e1:12:a8:b4:1d:71:81:ea:b3:de:bf:0f:8b:dc:81:a6:37:95:
d9:18:45:e2:24:ad:5f:1c:e2:d5:2f:8a:f8:75:61:b5:fa:5b:
6e:b7:37:e5:c3:da:bf:e9:fb:97:e9:08:4c:3b:d0:62:d8:8f:
ae:db:3f:8c:f5:14:58:aa:e8:12:9a:90:c1:78:38:2b:c8:e7:
4a:7c:df:61:81:2f:4d:22:78:57:f5:5e:59:3a:d6:43:71:1d:
12:8a:e1:bf:47:d0:55:13:d2:c4:02:2a:56:c0:77:ea:f5:c3:
c1:aa:8f:ac:20:22:7a:8b:f5:d4:b2:3f:c9:7a:8a:1f:a4:b6:
59:20:c5:c6:21:41:fb:91:51:69:f7:c2:6b:e0:e4:9b:15:b5:
2d:83:22:ed:67:07:ef:9b:99:7d:43:44:93:9a:be:c5:18:f9:
e6:da:9b:3b:90:c1:93:5f:53:35:5c:6a:f3:81:c8:aa:4a:5e:
88:57:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:17:45 2026 by rpki-client