Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: kPmTZToDMaBxAS8APcB4X/FjUksmSlNxVFVQIm9hwRY=
Subject key identifier: CB:A4:2E:EE:6B:C3:B1:F4:39:A7:CF:AE:FE:02:84:F5:55:DA:9A:96
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 019FA18414468FB74D25F9A7356D86A04B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 19A4
Signing time: Mon 27 Jul 2026 03:00:15 +0000
Manifest this update: Mon 27 Jul 2026 03:00:15 +0000
Manifest next update: Tue 28 Jul 2026 03:00:15 +0000
Files and hashes: 1: gI4tnW4kPKjRONzlu_6zH8MeB9U.roa (hash: SAYaSp1GRG2E/ye85MqnahXwttShXyHtUuRf8N0xnmI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: PI19qNHvMX8Kxb6FJ1wXiCrT1Ub9nEzkpUPw0kzUlgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:14:46:8f:b7:4d:25:f9:a7:35:6d:86:a0:4b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Jul 27 03:00:15 2026 GMT
Not After : Jul 28 03:00:15 2026 GMT
Subject: CN=cba42eee6bc3b1f439a7cfaefe0284f555da9a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f4:1e:76:96:75:92:f2:19:68:88:19:3e:a9:
54:32:e1:82:70:eb:7b:d0:0f:4d:f2:b8:fb:03:b5:
03:d2:96:48:09:22:47:29:e5:35:00:3b:86:2a:94:
d6:3e:10:bf:05:80:49:ed:92:23:16:c1:d0:de:11:
10:66:19:3c:67:bb:40:04:a8:0a:b9:fb:19:da:3c:
63:08:2b:09:55:37:79:b5:b9:03:0e:d4:15:01:a4:
8a:52:7e:b4:6c:ce:11:37:22:a5:8b:d5:4f:ff:09:
69:d8:28:a2:f5:cd:df:1e:d2:c5:e0:aa:bb:5c:f6:
c7:00:d2:46:89:96:19:0e:85:a5:1a:c8:3a:1a:52:
9c:4c:d6:e2:2a:a5:13:10:5b:75:86:88:59:fc:c7:
da:79:34:5f:81:d8:a3:8a:77:5b:b0:6a:ad:dc:06:
c4:5e:bc:4f:4a:ba:f5:b1:3c:ef:f5:22:54:40:9b:
7c:0a:be:f0:87:16:fe:de:f0:80:68:10:f9:fb:c7:
76:d5:e5:79:36:17:52:a7:52:2d:a2:6b:4e:b1:77:
b3:f8:89:48:63:2e:90:88:24:9f:b8:2d:aa:57:8a:
b9:9f:a0:ac:ab:ef:ab:db:c3:ba:cd:1f:5a:11:a3:
54:ed:35:23:f0:c5:78:7f:80:f2:07:d3:b2:c0:f2:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A4:2E:EE:6B:C3:B1:F4:39:A7:CF:AE:FE:02:84:F5:55:DA:9A:96
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ac:cd:84:44:8b:e3:38:50:08:cf:b4:fe:d4:b8:d6:3d:07:
3f:93:36:7e:d1:7d:fa:b9:9b:5b:c1:77:02:04:1e:08:b7:40:
77:d3:cb:e2:11:54:84:5a:9c:87:e0:ab:c3:19:1c:8b:1a:06:
45:0b:24:21:ef:be:3a:9a:5d:9f:f6:40:16:01:a8:ce:ef:1e:
90:a0:ba:0d:d8:4c:11:da:54:ea:0a:d8:b7:15:6d:5c:5d:f3:
a3:66:8f:34:ef:b5:c2:eb:d3:75:d5:65:a2:ee:75:32:9e:3f:
ce:94:d9:49:b4:ef:ae:0a:4d:8e:86:02:3b:54:7c:44:86:9a:
50:9b:14:f0:55:83:3f:83:81:47:e0:15:95:a4:46:b3:de:f0:
4e:1c:66:b7:7d:35:90:b9:ec:cd:99:86:2a:88:30:55:1d:3e:
64:5c:cd:70:36:fa:38:35:71:e1:22:40:db:69:9f:c9:f9:58:
9b:af:24:ad:10:b9:e3:9d:5c:0d:a4:a3:47:06:3b:d9:6f:71:
b9:ec:6f:5e:16:5c:6e:c0:03:e5:ba:68:46:0d:64:80:32:d3:
c6:31:6e:02:7e:d6:83:6a:8c:2e:d8:a5:56:68:d8:de:0e:ff:
a1:a1:08:dd:23:fd:7f:78:43:6d:ca:64:ab:c2:35:63:4e:7b:
88:eb:2e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:00:34 2026 by rpki-client