Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json)
Hash identifier: ietOLJMpUahCnw2YTNLLB2BgNUCH2XtHd88gjPlO2GI=
Subject key identifier: 20:E4:8F:7F:D5:70:A7:ED:3A:30:D8:27:9E:2D:3F:B9:D0:A8:31:C7
Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Certificate serial: 019F9F5EFD25E4EE0E8556269A5574ACA4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
Manifest number: 07EC
Signing time: Sun 26 Jul 2026 17:00:30 +0000
Manifest this update: Sun 26 Jul 2026 17:00:30 +0000
Manifest next update: Mon 27 Jul 2026 17:00:30 +0000
Files and hashes: 1: OMhZqYIdlbW6MwJAX5hoXZbZs2s.roa (hash: Fz6GaOA6LETuiDcthzdYWCgbQdrzncp3eZt1aOMvmKA=)
2: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: e9F69GZX0AarAr0HWwVRtR7i1ETy9OcYap1xwe7uOBc=)
3: wOUhGVesCisY2HnfnAjl6Jnr-xg.roa (hash: M8DXDaBoO3oUhqazgEAtDmfaFAvLdpC11jKkFsNS9mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5e:fd:25:e4:ee:0e:85:56:26:9a:55:74:ac:a4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228
Validity
Not Before: Jul 26 17:00:30 2026 GMT
Not After : Jul 27 17:00:30 2026 GMT
Subject: CN=20e48f7fd570a7ed3a30d8279e2d3fb9d0a831c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:3b:4c:2a:6f:44:03:d9:eb:09:27:22:b8:
70:0e:ad:c8:fb:29:93:6e:9a:06:c7:3a:e5:0a:c9:
9d:b0:8f:67:c6:34:03:44:61:66:7a:dd:dd:9c:8b:
60:a8:76:95:80:b5:94:25:2e:30:74:4a:ec:a9:74:
6a:0e:7b:a8:19:8d:23:d0:f3:25:eb:dd:aa:c4:22:
fc:e0:23:bc:ef:4f:6c:4d:85:c5:c4:1c:74:de:70:
cb:31:68:24:bf:e8:ef:f3:9b:20:de:55:98:1c:d3:
2d:5a:2a:dc:99:0f:59:2f:03:bf:72:06:98:3d:59:
c5:24:f1:40:36:1f:7b:18:b0:ea:eb:f5:e9:63:6d:
34:9a:77:07:42:9c:76:6e:e3:d7:e5:96:07:ed:ba:
bd:54:7f:db:e7:f0:96:4f:47:67:ba:7b:5b:59:81:
f6:f5:ba:82:90:a6:bd:29:04:71:fc:ac:03:33:f3:
df:51:08:57:ba:20:32:67:85:78:c3:dd:d2:d4:1d:
79:43:6d:55:10:40:59:4a:ff:d0:40:03:6b:06:fe:
84:94:c9:7a:9b:a8:a0:91:0a:cc:b1:99:9c:21:00:
b7:00:0b:e8:fe:78:f6:f0:a0:18:db:83:d3:f0:d9:
95:c6:df:d3:cb:8e:40:f8:ec:16:4f:0f:9f:58:fb:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:8F:7F:D5:70:A7:ED:3A:30:D8:27:9E:2D:3F:B9:D0:A8:31:C7
X509v3 Authority Key Identifier:
keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ae:bb:b3:d0:0f:56:0b:ef:68:16:23:26:b4:43:6e:75:76:
41:5a:3e:46:ca:54:4d:d7:19:61:7d:03:d9:e2:9e:b7:a0:57:
8f:53:4c:e6:c6:d5:62:0a:5c:f5:70:1e:40:7c:0e:ae:18:76:
d3:3f:e2:48:d1:97:93:8a:7c:c5:8c:26:32:48:3a:b1:ed:4b:
89:d7:4a:e4:87:5c:86:df:35:c6:11:9d:70:f8:ce:d4:f7:7a:
51:d0:24:56:e5:76:af:ed:44:c4:8a:30:a3:43:96:05:12:1b:
65:4c:5d:c5:23:c1:78:d1:d9:15:82:4c:0f:8e:88:fe:00:18:
0d:15:2c:da:12:05:13:3e:fb:de:81:ef:8f:8e:b2:ea:d7:86:
31:a5:8d:41:63:67:e3:e4:01:4d:54:bf:db:cd:83:f3:1e:74:
bb:d1:e1:b4:4c:6d:f0:6f:6e:ef:c8:e2:ca:23:c6:47:fd:7e:
60:0a:88:0e:7f:10:d1:76:d3:ec:31:d8:03:0a:ab:77:6d:04:
99:89:8e:7c:0b:a1:58:32:19:fd:5f:3a:72:18:c2:dd:a1:5e:
20:da:bd:a4:6c:0f:a8:db:6e:d8:a7:23:ec:8b:e3:68:59:5d:
4b:f6:63:a9:be:a3:47:cb:6c:4a:cd:43:8a:7c:c6:6c:1b:76:
31:b9:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:45 2026 by rpki-client