Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: QbUno3m8y4bqrq/xgRhcEEeIh8TC//ISaLs7pv3tSJc=
Subject key identifier: CB:08:3A:D3:BF:E2:C0:7C:21:25:18:F4:5A:2D:6D:CC:AD:8D:CB:46
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 019FA4BD30068CE7A5353CF685E787DD1B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 1711
Signing time: Mon 27 Jul 2026 18:01:29 +0000
Manifest this update: Mon 27 Jul 2026 18:01:29 +0000
Manifest next update: Tue 28 Jul 2026 18:01:29 +0000
Files and hashes: 1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: EWWQKE3JEp0uGe6GcFLf75U5jRhgMORa3xcqIT0Y2LA=)
4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:bd:30:06:8c:e7:a5:35:3c:f6:85:e7:87:dd:1b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Jul 27 18:01:29 2026 GMT
Not After : Jul 28 18:01:29 2026 GMT
Subject: CN=cb083ad3bfe2c07c212518f45a2d6dccad8dcb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:aa:1d:e2:12:0d:62:cd:5b:47:35:05:80:27:
8b:a8:e4:10:92:e2:bc:b1:86:8c:b1:3e:ba:a1:ba:
60:f6:2b:69:1a:f2:2f:f6:e9:96:ae:c9:2f:67:f4:
82:39:e8:87:75:a4:0f:d8:c1:58:c6:d0:44:5e:a7:
b1:b3:fd:94:1c:9e:ce:48:2f:ab:ab:1a:93:87:6d:
38:96:51:c5:79:40:a3:1d:e3:7c:8a:5a:d6:e9:2f:
1b:b9:2b:72:9b:6f:80:3c:4a:74:d4:b2:a1:aa:bd:
dd:3b:77:47:0d:76:0f:2e:fa:4d:00:c2:8a:15:cb:
72:35:38:06:7f:02:ef:91:1e:58:34:6a:af:1d:2b:
92:0c:4d:b5:f6:4e:8b:11:c6:d7:18:05:be:a2:43:
3b:0a:d8:9a:d8:8a:64:af:f9:be:99:85:23:c2:59:
00:8a:86:2a:59:e7:50:d8:0a:eb:07:70:72:05:52:
ed:26:a9:f0:99:dd:34:1a:49:fd:ba:50:ca:23:a5:
c6:2c:39:df:d7:05:0a:a6:6e:ca:cd:ff:04:85:a8:
e1:c6:b4:4e:af:0b:6c:ec:24:53:39:3f:24:77:19:
f8:60:98:5c:58:4f:81:97:0f:ec:dd:24:5f:7c:03:
42:ae:a5:d2:45:1e:97:83:15:e1:50:5a:7a:ea:d2:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:08:3A:D3:BF:E2:C0:7C:21:25:18:F4:5A:2D:6D:CC:AD:8D:CB:46
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cb:64:b2:0c:55:62:cb:b2:51:e0:a6:e6:4e:37:0e:2f:8a:
ab:ac:c1:a4:91:f5:7b:3e:46:38:47:ea:c3:17:7c:aa:b9:e8:
d9:1f:ce:d9:e8:54:61:5d:7a:00:b7:7e:b7:2d:0e:e2:a4:de:
17:4d:c9:3b:32:b0:b4:cd:0c:13:db:ab:67:c9:96:86:cd:81:
cc:5a:bc:40:75:c2:b2:50:3a:c0:c1:f0:8b:f1:54:81:53:91:
a0:b1:5e:0d:ac:ef:8f:d5:1a:53:a3:69:06:2c:5c:9e:13:04:
62:cb:75:cf:db:31:cf:3d:1d:4d:6b:d4:3b:e9:0d:c3:e8:32:
2c:b4:41:7d:58:39:ae:91:07:90:ca:76:85:e3:b4:89:1f:76:
bf:e7:1a:54:49:c1:9c:b7:3a:1f:26:53:e6:58:55:77:93:2b:
80:80:c5:1a:06:2f:cb:fe:e7:1d:b4:f7:94:55:60:36:7f:1f:
a3:11:1b:7a:f5:1c:ce:f2:32:80:4a:58:5b:0b:13:f0:34:1a:
2b:a8:be:9e:62:41:82:6a:ed:e5:e3:d9:06:4f:58:0a:80:e5:
1c:61:f8:93:44:40:ba:a0:32:ac:55:78:2e:9f:66:ff:d5:58:
bb:26:82:71:0c:0a:2e:9c:a6:6e:19:50:1c:f7:7f:ab:e3:9e:
2c:0a:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 20:19:48 2026 by rpki-client