Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: tiXg+zT/04ge1fUvqrubCzbzzGvJEbiRuCZk2/74SSI=
Subject key identifier: 5D:2D:FC:49:6B:E1:8D:0B:DB:ED:DF:B4:E2:CE:D0:38:87:73:5E:43
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 019FD203CD9D9334425C61E15E0121AB563F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: 0534
Signing time: Wed 05 Aug 2026 13:01:32 +0000
Manifest this update: Wed 05 Aug 2026 13:01:32 +0000
Manifest next update: Thu 06 Aug 2026 13:01:32 +0000
Files and hashes: 1: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (hash: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg=)
2: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: LLiVCFbNa6nw/ur/+P1a5rethjUxprqIYyWQImF2U7o=)
3: jcSJaCjNOwHwhbFpyE4uWdCrhi4.roa (hash: 0TxSTCi/XS0O1qfQUziR/iAsNnnvd41KQSzNVhpvgcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:03:cd:9d:93:34:42:5c:61:e1:5e:01:21:ab:56:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Aug 5 13:01:32 2026 GMT
Not After : Aug 6 13:01:32 2026 GMT
Subject: CN=5d2dfc496be18d0bdbeddfb4e2ced03887735e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:55:09:b5:eb:cb:86:23:b4:d9:2b:c4:d0:
72:2a:84:22:3c:5a:bf:d9:e2:f8:a1:4c:a2:35:f5:
e6:67:48:aa:3b:11:1c:cf:56:c2:b1:fb:b4:14:0c:
ee:f6:21:e8:5d:3a:20:2e:c0:b4:92:ce:4c:c0:c9:
b5:f5:c1:6a:e2:ad:34:b0:dd:75:d9:6e:b7:48:59:
aa:32:09:58:47:cd:53:b4:5a:34:f4:6d:e8:6c:21:
a8:5c:7a:7b:73:37:84:bc:35:36:66:22:c3:5d:c3:
63:f5:98:65:aa:de:1f:d5:f0:b0:37:5a:33:a8:e9:
b2:1e:46:38:d1:8d:e8:27:f0:5b:e5:61:cf:b1:39:
93:01:34:c0:27:49:e2:3c:1a:9c:c4:f5:16:a3:a5:
66:b0:15:b7:41:45:38:59:2c:f7:4a:58:23:f3:02:
13:46:4c:30:d8:6c:67:a9:39:5b:37:5b:cd:57:13:
d3:d0:f5:31:00:52:f4:cd:c1:a4:80:68:ac:cb:75:
0a:01:99:97:88:49:fd:f2:34:55:a5:cc:9f:58:b8:
ba:44:1d:13:05:bd:83:7a:00:a3:ed:cf:cd:5f:fd:
4c:ae:b5:1e:21:85:99:99:09:11:36:8e:cb:ab:23:
fb:78:90:91:38:d5:22:d8:54:55:f5:e5:81:38:83:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2D:FC:49:6B:E1:8D:0B:DB:ED:DF:B4:E2:CE:D0:38:87:73:5E:43
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f6:dd:2e:26:e5:21:dd:3d:34:21:60:40:61:45:55:ec:c4:
fd:3a:6f:e4:56:73:b6:a8:63:19:f9:6e:72:e8:aa:66:de:2c:
ef:2f:bd:8d:2a:f3:d7:00:6c:71:4c:b9:a0:ee:a7:05:c3:cc:
95:86:15:98:8c:e9:5d:72:3e:08:52:c9:de:e1:8a:9e:a6:ff:
fb:9b:6f:f2:97:ef:12:ac:9b:f2:8a:78:22:39:8f:2c:06:8f:
66:69:dc:53:0e:c3:3e:45:79:56:8a:52:c8:d7:69:5f:8d:4f:
85:5e:5e:43:90:0b:19:0b:a0:1e:47:1f:73:4c:9c:1a:c9:2e:
9c:65:0e:6c:92:69:ee:6b:0e:b2:a7:df:44:ee:3d:35:83:67:
bf:fc:3e:11:79:4f:27:80:32:72:9d:e8:64:b3:1f:d3:85:f0:
d2:0b:09:2b:3f:b1:86:62:2c:cc:0a:8d:48:20:48:bb:52:f0:
74:41:dc:0e:e9:e2:b6:37:04:98:4c:43:1d:d6:a2:3d:c3:9a:
48:f4:75:12:64:59:0d:2a:80:e5:54:7e:86:4a:ca:53:b8:6d:
33:46:75:ba:2f:3f:2d:3e:e0:54:78:12:6f:d4:c2:c3:c9:4d:
bc:64:27:9b:46:89:1b:58:6e:8d:e5:79:c3:27:91:27:bb:17:
3e:bd:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 19:55:29 2026 by rpki-client