Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
File: hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft (raw, json)
Hash identifier: 3JrNaSZX0u1o2FGeg1amFcJpkCaToYvnk31c8/CJNsI=
Subject key identifier: DD:23:63:B1:98:28:C6:74:C0:42:6B:A4:89:D2:BB:01:68:11:BC:A4
Authority key identifier: 85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
Certificate issuer: /CN=852bc145c5b22394d6feae996bc0bb25254801c6
Certificate serial: 019F848CFFC8AB15CF24C1747F97D482962D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
Manifest number: 06CF
Signing time: Tue 21 Jul 2026 12:01:00 +0000
Manifest this update: Tue 21 Jul 2026 12:01:00 +0000
Manifest next update: Wed 22 Jul 2026 12:01:00 +0000
Files and hashes: 1: 0vS9LuHI8LHmYBf-04B_4EqaTyM.roa (hash: 1w3MTNAtMdbpQhZieDMx1aqfKs/uZi4c3hurmf5nWQk=)
2: YqpC5sn3lPh34dXLCKoe6SIqByY.roa (hash: t3wpEBucnLMbpU9d5Q7NM5fRdV7jRAGiRx7mg/CI4SQ=)
3: hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl (hash: la1zcuSSjGv/JTEnpPN+dXYn/KKGdiSwRggoVyXsZcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:ff:c8:ab:15:cf:24:c1:74:7f:97:d4:82:96:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852bc145c5b22394d6feae996bc0bb25254801c6
Validity
Not Before: Jul 21 12:01:00 2026 GMT
Not After : Jul 22 12:01:00 2026 GMT
Subject: CN=dd2363b19828c674c0426ba489d2bb016811bca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:a8:b3:b9:ea:f4:07:9c:74:08:ca:34:a4:
a3:b7:c2:47:64:6d:36:9d:a9:4f:a0:12:aa:38:87:
66:85:e8:39:16:e2:43:c7:a1:68:d8:5a:22:62:d7:
83:fc:a0:92:43:0a:76:7e:9c:10:a5:f2:5c:c8:80:
6a:98:64:fa:16:04:5b:70:cf:89:8e:eb:f2:6c:b2:
34:51:18:88:c4:e4:45:f7:4d:50:17:f1:d9:df:e0:
a1:d5:5e:d7:bd:a4:04:85:54:21:a1:9f:d6:92:65:
0d:a3:0f:1b:89:32:32:8a:f1:80:f6:c8:b1:a0:31:
89:6d:a6:3e:66:4b:cd:cc:5b:9e:0e:78:80:e5:c7:
69:b9:15:e8:3a:6f:0e:ef:22:4b:17:f9:fe:f7:f4:
a1:4a:f6:7d:d9:83:3c:fa:e5:3d:b3:83:46:c7:85:
32:04:db:a7:3e:60:37:e3:e5:0d:9d:4e:76:a7:6a:
2d:9e:73:94:1b:73:f7:ff:76:23:90:79:94:b1:a6:
30:7d:5c:01:06:fd:68:99:c3:64:7a:0a:9d:ae:42:
ed:71:01:6d:15:14:20:88:5c:5f:4f:31:a0:ab:36:
12:de:0b:ab:27:c4:11:b5:f3:84:6a:28:cf:d3:2b:
ba:5c:e2:fa:16:c1:47:d1:c4:cc:34:6d:4d:ae:3f:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:23:63:B1:98:28:C6:74:C0:42:6B:A4:89:D2:BB:01:68:11:BC:A4
X509v3 Authority Key Identifier:
keyid:85:2B:C1:45:C5:B2:23:94:D6:FE:AE:99:6B:C0:BB:25:25:48:01:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSvBRcWyI5TW_q6Za8C7JSVIAcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ca4ff5-48a8-4ecc-ba73-8d0710f3d276/1/hSvBRcWyI5TW_q6Za8C7JSVIAcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:96:89:d1:09:32:f3:b1:42:ce:ba:dc:c3:d6:71:19:12:8e:
28:40:7f:4f:da:13:13:1e:34:4e:c8:0d:0d:df:88:c4:aa:98:
9a:57:01:c0:f3:af:6b:fa:f5:19:bf:17:8c:20:6f:6f:c8:93:
84:08:f6:16:d6:d4:2e:d4:ce:41:ed:d5:5f:45:56:a8:26:44:
f3:b4:55:d5:f1:47:9d:55:57:38:94:56:d7:89:06:98:b5:af:
0f:5e:5f:68:98:d7:a2:4e:6e:99:f6:47:1e:b7:b5:ee:29:e1:
2e:c1:2d:fd:d2:29:8d:27:6c:dd:94:c8:f3:bd:5b:b5:ee:19:
e6:bc:c4:22:18:6a:f2:84:52:f1:98:48:bf:a6:f4:ed:42:a3:
7e:d9:5f:0c:44:96:b5:8b:cc:f5:71:38:40:b2:9d:b0:00:87:
62:3c:0f:d0:59:7d:8b:cc:70:4e:cb:22:3a:7b:5c:be:64:bb:
52:98:49:0e:aa:eb:5a:d1:f7:7c:63:a5:a9:36:c1:e6:fa:09:
73:c5:b1:3d:17:a4:ae:f0:5e:79:14:68:40:2c:a0:6f:5d:3b:
e6:0c:9c:25:58:c6:bf:8f:0a:3f:0f:ad:ea:c4:74:89:c8:55:
22:2e:a0:84:c6:3a:bc:87:af:1e:a2:41:31:28:75:ae:78:8d:
c7:fb:0f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:57:45 2026 by rpki-client