Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: Mh71vOX7llVfELSPG53RMtV0DympGfLxGsOWckfO3js=
Subject key identifier: 5A:E5:B2:A7:91:B1:AA:ED:5B:CD:B4:4A:F6:9A:20:60:A9:ED:F3:DD
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 019F83E82C3011ACEB49C45D8689580E731B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 1857
Signing time: Tue 21 Jul 2026 09:00:58 +0000
Manifest this update: Tue 21 Jul 2026 09:00:58 +0000
Manifest next update: Wed 22 Jul 2026 09:00:58 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: 9sS6tPVY/LJP0QaijihSRPx0o8XL20kPWD+VnjjQMb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:2c:30:11:ac:eb:49:c4:5d:86:89:58:0e:73:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Jul 21 09:00:58 2026 GMT
Not After : Jul 22 09:00:58 2026 GMT
Subject: CN=5ae5b2a791b1aaed5bcdb44af69a2060a9edf3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:9c:09:e3:48:ea:32:86:00:01:f2:44:a4:
2a:8d:28:98:75:4f:ec:2e:c4:bd:26:f4:14:8c:98:
b2:b2:5b:26:b1:47:38:10:a4:37:a8:29:64:47:70:
6d:a1:d6:77:f6:ed:40:26:6f:e3:29:ae:57:f0:84:
33:7c:05:95:f7:59:80:e1:c7:b1:8d:bf:68:f2:96:
9d:af:76:d1:6f:57:e8:c5:a5:14:a0:e0:f2:52:67:
6b:b7:bc:26:3e:4f:90:af:2e:44:19:3e:28:f9:0a:
c2:e8:e5:d4:0e:96:71:5e:24:cb:ad:00:72:04:02:
c8:98:b8:32:7f:37:cf:10:fc:39:24:61:f8:40:ac:
f4:bd:eb:d6:ae:43:36:85:29:d6:42:66:49:29:d6:
f8:eb:4d:0b:fa:f4:41:81:ad:95:fa:7a:78:53:23:
c0:e2:01:8d:ca:95:04:1e:14:bb:12:0e:e0:eb:fd:
e0:bb:5d:0a:79:e2:0a:b0:b7:11:94:c9:71:29:a7:
63:59:c4:90:3d:9c:9f:9e:83:84:91:81:60:aa:a5:
98:9c:af:ac:bf:76:4c:ab:80:fe:81:a3:da:01:07:
3f:10:71:56:a9:52:99:9f:91:3f:ff:28:b4:25:3f:
1c:27:c6:e9:32:b7:24:49:9b:49:59:85:59:1a:55:
45:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:B2:A7:91:B1:AA:ED:5B:CD:B4:4A:F6:9A:20:60:A9:ED:F3:DD
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2f:7a:63:ee:12:c4:5e:dd:96:f0:72:a7:98:e6:68:af:02:
a1:44:5e:41:b9:3b:4a:30:86:79:50:da:23:88:2e:97:44:0f:
9e:ee:e5:0c:f1:7e:e6:d0:bd:d5:6d:73:7e:8c:1b:83:fe:78:
d1:d9:96:d6:83:32:59:07:cb:17:69:13:d5:fe:52:a7:70:22:
22:1b:30:d9:f2:a7:af:dd:0c:e0:d4:5d:cf:8c:5c:8c:f5:bb:
3c:a2:a3:04:99:e9:e1:15:39:25:2a:f5:e7:3b:65:17:60:e1:
29:cd:78:ea:c9:59:9c:e5:d7:dc:89:59:ce:fe:22:5f:2c:b0:
de:b0:a9:de:00:17:69:f4:2d:a1:05:f4:cf:7b:ad:ed:e2:dc:
5c:23:25:65:1d:2b:bb:26:43:e0:67:49:de:ac:84:44:27:80:
d2:ec:7b:1f:41:7e:ef:70:fc:e8:0e:43:b3:34:37:30:55:44:
36:9b:5e:58:80:95:34:4b:16:c1:b3:6b:40:52:20:93:20:71:
bc:4b:86:0b:9d:e9:53:b6:06:ea:fc:5a:27:e2:52:85:cf:3e:
cc:16:4a:7a:c7:58:91:68:2d:b6:67:2a:de:06:16:69:fb:44:
71:ca:02:1f:3b:62:7e:32:a6:b7:d8:a5:82:df:a8:34:b6:bb:
7b:fd:48:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:05:01 2026 by rpki-client