Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: 3tuMHD4ocb353ADzMPoVhjmYblEvTUeFK0DFkt00qgQ=
Subject key identifier: 53:20:B2:37:3F:E7:3C:25:F1:BB:51:76:C0:CE:41:9D:2C:8D:DC:CB
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 019F86E89A293FF5F1FEA3D513A7B59F232A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 14C2
Signing time: Tue 21 Jul 2026 23:00:18 +0000
Manifest this update: Tue 21 Jul 2026 23:00:18 +0000
Manifest next update: Wed 22 Jul 2026 23:00:18 +0000
Files and hashes: 1: PreLEhXrBI_UKFJOTXBGTgHoYF0.roa (hash: YyPA9bxM1XffwGYRaKy9yqFp9gB0LZF+tWz17YqGofw=)
2: fW-vmq3lP_3MyQWkZHy-CbMNL3I.roa (hash: tS5uriJcYFbYG/ALXKZnCG1DLjQm/ccSm8DkPwEWxXI=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: 81BxCzKZ8VyPytGjsWTETEZXhfAfcZaCWMRdmzIJjOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e8:9a:29:3f:f5:f1:fe:a3:d5:13:a7:b5:9f:23:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Jul 21 23:00:18 2026 GMT
Not After : Jul 22 23:00:18 2026 GMT
Subject: CN=5320b2373fe73c25f1bb5176c0ce419d2c8ddccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:44:77:17:d2:8b:91:b9:fd:2e:dc:9f:83:
ef:80:04:52:3c:61:be:16:d5:fc:7a:c6:0f:e7:d1:
c8:e5:73:b2:09:68:e1:0a:f3:2e:8a:d3:16:ac:0c:
d2:91:c6:21:d2:c2:4b:dc:b0:0e:6a:5e:34:51:76:
de:7c:ce:ab:c3:9d:5b:d2:7d:89:9f:8b:55:d5:34:
43:dd:e9:c6:a9:00:ae:59:40:07:2e:14:57:aa:fd:
af:69:98:c8:aa:c0:92:c0:4e:8c:68:bd:91:27:fb:
01:40:95:ef:ee:ae:67:62:29:99:82:40:a4:1a:68:
eb:a9:ee:5e:3a:59:9f:ce:c7:e3:de:28:26:47:1b:
7e:83:b4:f3:44:70:f0:07:5d:5a:df:a8:07:af:90:
06:be:58:9f:5e:b9:33:44:fc:7b:51:62:84:5a:e8:
17:53:fd:2e:5e:ea:5e:f0:2a:39:66:ce:ac:e0:c2:
e8:49:3b:35:c0:ff:4d:b1:a3:d0:97:b3:4a:77:d8:
fb:ee:98:23:00:c3:cc:78:3e:b6:5b:60:6c:e8:e4:
9e:f8:4c:bd:27:b1:63:83:5d:92:2c:5e:6e:f2:cb:
e6:82:ca:db:fa:ea:47:51:0d:c6:1b:35:b7:ef:4f:
ab:60:d6:27:ea:9f:52:f0:44:87:49:dc:c5:87:4b:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:B2:37:3F:E7:3C:25:F1:BB:51:76:C0:CE:41:9D:2C:8D:DC:CB
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6c:8c:b0:6d:ca:96:d5:ec:be:a3:f0:a8:25:3e:c8:ed:77:
3d:dc:b5:85:bc:f3:08:b4:9e:b6:06:d8:dc:d5:59:49:0e:69:
e3:7a:9e:94:f6:c5:b6:09:2b:cf:16:f5:eb:c2:92:a2:27:8a:
4b:1c:e5:3c:21:80:0e:e6:ad:3c:07:ce:c0:f4:cf:52:48:10:
a0:4d:7f:36:e5:47:b1:e1:b4:d8:22:a9:83:e7:14:8e:d3:57:
b5:f9:af:0f:26:b5:98:09:ed:09:6e:5c:bd:c5:0f:26:76:89:
9d:c8:72:b3:d6:a1:85:99:0b:82:87:62:14:43:3c:ac:d4:37:
21:84:76:63:e5:b0:75:7d:71:6c:96:c8:ba:1e:99:34:52:21:
df:27:89:cd:84:f8:f5:66:f5:2c:51:28:e3:d0:ba:53:2f:d9:
bd:b8:d5:73:1c:b3:63:b9:20:42:fe:1b:48:ca:39:6b:c7:15:
64:e9:3b:2e:0b:30:e2:fc:6a:ed:0c:b8:e7:1f:a8:58:6b:f3:
3f:41:18:be:22:64:a7:9d:1d:35:c1:87:86:b8:08:69:2a:89:
71:4b:86:5d:1f:f3:7c:a1:3b:83:88:5f:81:7d:8c:d7:ba:80:
e8:64:e3:b2:34:32:6b:be:ce:38:71:91:9d:e6:f5:8a:5a:9e:
37:bf:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:53 2026 by rpki-client