Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: 8DLlcZG0No0EKEMR+pW8s3XM8BOFaAhe6S7UdhdbriY=
Subject key identifier: 26:D8:9C:4C:A4:9F:4A:C9:97:08:0A:BE:6B:5B:C1:E9:E6:84:60:56
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 019F9FCD672FC02381EF6E121ABFC053CA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0CE6
Signing time: Sun 26 Jul 2026 19:01:06 +0000
Manifest this update: Sun 26 Jul 2026 19:01:06 +0000
Manifest next update: Mon 27 Jul 2026 19:01:06 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: 9uRCq7VdMhUM4/wC+91YzENteWzLUrE8y6ZoAfrWqEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:67:2f:c0:23:81:ef:6e:12:1a:bf:c0:53:ca:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Jul 26 19:01:06 2026 GMT
Not After : Jul 27 19:01:06 2026 GMT
Subject: CN=26d89c4ca49f4ac997080abe6b5bc1e9e6846056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:f2:02:c8:4d:81:d3:6b:d6:f7:69:85:56:
80:68:84:28:41:c0:f9:5c:42:05:27:c5:dd:a9:aa:
47:ee:8d:c5:b7:8a:27:51:87:7f:6e:00:f2:4b:a3:
ce:0d:9c:f2:47:fb:a1:41:08:c6:0f:3b:ce:3e:e3:
a1:ea:e7:71:e5:07:2d:c9:30:9a:dc:80:f4:51:fd:
e3:97:0f:a6:b7:57:3a:a2:2a:4a:a1:f7:2f:4e:6e:
70:1b:9b:e8:b4:b3:94:79:ad:15:3f:cd:50:e3:69:
a1:56:9a:66:3c:01:bd:f0:c5:ec:11:d4:1a:3e:8a:
63:45:a7:0f:17:d4:f3:70:c2:41:ce:be:ec:6f:87:
83:a6:e2:fa:1f:dc:29:ce:de:51:1b:a3:2d:9c:f7:
68:13:bc:0f:3b:1b:85:90:4f:92:27:7b:c1:56:8d:
6e:11:6f:f1:51:49:54:35:f3:3d:e1:28:ea:a7:18:
29:60:be:1c:44:01:80:8f:52:d4:bc:d6:2d:d3:0b:
3e:31:6f:cd:a8:35:7c:03:bf:e3:50:09:76:cd:11:
5d:f1:4c:8d:28:a9:41:a1:0b:cf:c5:f5:30:de:95:
ec:b8:96:b4:92:42:bf:a4:68:0a:20:0f:68:a3:dd:
aa:af:4b:f5:82:dd:c6:0c:46:80:5e:f9:c7:d0:35:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:9C:4C:A4:9F:4A:C9:97:08:0A:BE:6B:5B:C1:E9:E6:84:60:56
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1f:fa:d0:25:5d:53:6d:27:24:59:5d:3e:e0:40:00:a2:8f:
ec:83:4f:26:6a:75:ad:ee:e9:33:64:8d:99:a0:c8:7a:b9:37:
ea:17:de:a4:e8:cd:52:8c:5a:d8:1f:47:32:ab:c7:89:bc:08:
b1:3b:6b:f6:14:01:9a:26:18:3a:65:5e:80:1e:14:1c:28:d9:
b4:f2:40:63:48:89:cb:a9:43:19:f1:79:1e:3c:21:4e:2f:8f:
9d:3e:ae:e7:00:ea:fa:23:8a:39:72:8b:1a:24:82:e9:d9:91:
b6:05:4c:21:7a:3a:51:95:7e:a9:96:48:b1:a7:6c:37:41:84:
ea:95:fe:72:c6:cd:e8:4b:12:7c:69:f8:46:1a:fa:35:1f:f0:
a0:cc:1a:f5:5b:8d:7a:6f:8c:e0:33:e8:c7:28:c8:d4:d0:b0:
0a:3c:8c:6f:ce:88:ac:06:24:a9:a7:16:a3:9f:5d:b3:ba:b7:
af:57:d4:6c:f4:17:dc:4b:a7:33:85:e7:1a:b2:b6:dc:d1:65:
c4:75:9f:b2:b0:17:74:03:20:50:b7:cb:b8:62:50:4b:3e:09:
31:8b:ab:9b:96:65:5c:ee:74:47:e1:b4:2f:c5:21:75:b0:4d:
5b:89:3f:c2:04:1e:ac:b6:b1:3a:62:00:b3:6c:63:fe:87:13:
54:9f:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:10 2026 by rpki-client