Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: i7XpSy91jN8r46i9uEzkHKNvFaGgah8+s8WATWjzIPE=
Subject key identifier: DD:AB:83:04:D2:6D:2B:DF:6B:1F:42:4C:24:63:3B:AF:C9:24:BE:38
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 019FA718F62FEB0ECEDF85057BA84CD73D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 0C62
Signing time: Tue 28 Jul 2026 05:00:58 +0000
Manifest this update: Tue 28 Jul 2026 05:00:58 +0000
Manifest next update: Wed 29 Jul 2026 05:00:58 +0000
Files and hashes: 1: U967gx6zU2ewhEleCWFHT_7A_9o.roa (hash: rEcp4qFupVQgVYmsA8hG1Q/G6+z2CIRB0Mx5vxsYxf0=)
2: h-KmrUFQix2mPVIgPxijrxKClGw.roa (hash: fc8hHRpimWi4M001kIYlHNuSFZw5gckGt8QS97+VBbM=)
3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: Z63A5WSMlKRsH53NLrN+tmsrR8O6Ixkj4xQ1CV8Exbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:f6:2f:eb:0e:ce:df:85:05:7b:a8:4c:d7:3d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Jul 28 05:00:58 2026 GMT
Not After : Jul 29 05:00:58 2026 GMT
Subject: CN=ddab8304d26d2bdf6b1f424c24633bafc924be38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:76:fc:bc:cf:c3:32:2b:a9:4a:b3:a9:38:
28:2b:57:ec:48:e4:ef:8f:8b:59:c2:a3:0d:f9:e4:
c4:14:9b:c3:63:8f:b6:08:31:7a:27:f6:10:9b:ef:
68:0c:a5:a6:09:1b:e0:8b:6a:c9:c4:6b:da:33:0e:
07:a1:f3:d2:f2:33:b8:63:99:c7:3e:e6:14:35:4e:
a4:a4:7d:c0:45:7c:ee:1e:2d:2a:26:b0:b6:d4:49:
05:99:88:ec:48:b8:d4:4a:40:3c:8c:38:cc:a7:31:
90:e4:d4:3d:a9:59:9a:94:2c:5f:7e:d2:a4:46:6c:
a3:e4:1b:b6:8b:ee:6e:53:66:d5:8a:65:0d:10:ae:
57:f4:6f:da:a1:d5:16:d1:ef:9b:22:da:14:63:c2:
b3:47:88:cc:a4:39:03:25:2d:99:fa:0f:80:e9:ae:
2c:b1:7d:46:05:ab:c8:70:29:ea:d7:9b:0e:d8:9f:
47:4f:f1:41:b9:8e:57:fe:43:dd:29:13:dc:0f:6c:
92:3f:a1:a4:37:a5:a0:ce:7e:c9:38:c9:db:04:e7:
2e:cf:fb:8e:d8:23:d6:4f:4c:7a:be:33:20:16:7f:
09:4d:16:7b:8e:50:db:3a:1b:d1:76:69:77:b3:b2:
e6:b4:a7:5b:6b:cc:8d:72:28:d4:5a:80:79:69:75:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:83:04:D2:6D:2B:DF:6B:1F:42:4C:24:63:3B:AF:C9:24:BE:38
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3f:bd:28:b6:16:7e:8d:a2:f4:e4:69:96:43:6a:fe:90:75:
1e:64:b7:5d:95:cb:6a:0a:65:5b:55:eb:21:78:d6:ca:98:2f:
0b:82:29:a1:13:c5:77:3f:56:9c:a7:34:d1:60:e4:ee:3e:8a:
21:23:7e:8d:f7:74:cc:74:d3:fe:b4:0b:0a:fb:a9:6f:b9:84:
b9:20:23:f3:4c:a2:46:07:a1:f1:a7:a0:e2:76:73:c8:d2:09:
31:8f:3a:49:0b:fc:40:bf:58:10:db:eb:f1:1a:80:32:cc:81:
63:fc:54:1b:71:6f:46:70:17:b7:f9:95:70:79:89:8b:6a:ad:
72:d3:ee:f7:b4:c7:0b:b4:0b:5c:f0:cf:aa:54:07:da:6c:0d:
75:6e:f6:d5:d3:c4:0b:70:ca:b6:12:da:3b:8a:d2:d4:9f:67:
81:b2:0a:80:87:44:44:64:15:8f:32:e0:1e:58:b5:b2:28:1d:
fd:70:0e:5a:7d:52:25:43:b8:6b:66:d9:a2:eb:e4:f2:b9:bc:
3f:73:e2:ef:74:50:d8:2e:06:ab:64:5f:3b:15:4a:ab:81:ec:
8d:66:5b:11:97:e8:dd:4f:e3:44:f7:f6:02:79:89:01:65:72:
c2:bd:56:55:37:b7:12:02:30:53:ce:0b:5f:0d:03:3d:19:ce:
82:a8:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 10:35:09 2026 by rpki-client