Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
File: hNHcYT105sMty5gUzhJr1htSqqc.mft (raw, json)
Hash identifier: o4O3U7vB2XAtwiRG5Cp9cuHvHKQUFm8cDz0Xy2tGmhU=
Subject key identifier: BD:0E:03:D4:06:AE:86:19:AE:EB:B1:9D:84:CB:D1:E1:8E:78:B4:3D
Authority key identifier: 84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
Certificate issuer: /CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Certificate serial: 019FA304EA40AAB8F85F9D7A9D760752868F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
Manifest number: 19D2
Signing time: Mon 27 Jul 2026 10:00:36 +0000
Manifest this update: Mon 27 Jul 2026 10:00:36 +0000
Manifest next update: Tue 28 Jul 2026 10:00:36 +0000
Files and hashes: 1: H6AvCEiySRywPqnoqPga4bVAQxg.roa (hash: nQJRt0EmcoJ2XDzeO3DLhVTm+C2u2iMFsb1catI5sW4=)
2: hNHcYT105sMty5gUzhJr1htSqqc.crl (hash: +z861Mi6uU+wY/vslushnx3LDMyglLUq6zF1qtSDBAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:ea:40:aa:b8:f8:5f:9d:7a:9d:76:07:52:86:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d1dc613d74e6c32dcb9814ce126bd61b52aaa7
Validity
Not Before: Jul 27 10:00:36 2026 GMT
Not After : Jul 28 10:00:36 2026 GMT
Subject: CN=bd0e03d406ae8619aeebb19d84cbd1e18e78b43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:d4:57:45:ce:58:5a:26:df:2c:b8:74:6c:
19:ac:8f:9b:a4:fc:15:70:b2:7d:50:42:d9:ea:32:
97:30:a7:0a:54:89:67:7d:ed:d2:0d:d6:e2:29:01:
64:f8:b0:b6:25:a4:ec:0c:40:82:78:ab:93:2b:1e:
19:71:1a:23:12:1c:91:14:de:02:ca:99:52:c1:a5:
2b:4f:4a:12:b6:f3:98:36:b5:65:f8:af:7e:67:91:
20:7e:21:c9:bc:a5:18:4b:93:bd:d6:10:d6:95:1b:
75:43:69:45:c0:be:65:65:d3:f1:79:05:fa:74:9d:
d5:41:34:2d:ae:e0:38:6f:89:b6:6e:c9:67:b3:c9:
75:13:be:20:01:38:2b:ed:8b:41:13:86:42:b5:44:
0d:39:7a:41:2a:8f:69:4a:a3:5e:4e:5c:8e:54:eb:
69:9b:34:be:3d:d0:3d:48:e5:6e:56:f5:24:5b:25:
b6:65:a9:97:dc:88:ec:50:80:7b:ed:a6:3b:51:c4:
08:dc:1c:ee:15:24:1f:45:70:72:89:6e:97:fb:80:
5a:c4:8f:e9:49:dd:80:99:3a:6c:0f:b1:ff:83:94:
36:3a:79:ae:a6:21:89:ee:0c:52:03:f3:40:d5:27:
49:58:84:b6:14:fe:de:80:7c:f8:6f:a8:31:b8:c1:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:03:D4:06:AE:86:19:AE:EB:B1:9D:84:CB:D1:E1:8E:78:B4:3D
X509v3 Authority Key Identifier:
keyid:84:D1:DC:61:3D:74:E6:C3:2D:CB:98:14:CE:12:6B:D6:1B:52:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNHcYT105sMty5gUzhJr1htSqqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4e0201-4a04-415f-a5f2-f21b66de9b56/1/hNHcYT105sMty5gUzhJr1htSqqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d4:b4:f4:45:5b:43:be:a1:a2:62:d1:88:04:bc:4a:6a:f5:
d5:7d:82:ed:8b:cf:7b:7b:f6:e9:13:ba:26:7c:c9:04:54:b7:
cc:9e:a1:90:91:0d:8d:61:b9:46:13:b8:e6:0d:ff:5d:84:a4:
c8:56:ad:d1:14:1a:58:1e:dd:a0:91:b5:d4:1b:53:78:3a:d1:
92:20:b6:40:25:42:d4:a5:8c:a7:75:52:ad:dd:30:a4:ed:d0:
ea:5e:06:e6:5e:38:82:25:90:37:62:37:49:03:65:07:7a:4a:
51:fa:4a:eb:f9:c5:08:ee:d7:c9:bd:b0:c6:dc:54:1b:4d:36:
44:5e:3b:85:d1:f2:b4:9f:e1:35:a2:a2:a2:0f:e7:2a:3d:e5:
3f:18:82:32:18:0f:7f:12:67:28:82:dd:5c:70:c4:95:6b:60:
6d:32:a5:63:5c:35:0d:e7:88:41:a0:15:aa:0e:8a:78:a6:0e:
01:51:d2:fd:17:e0:32:d0:44:8f:cb:de:d8:f1:7e:bf:15:d8:
f9:58:f4:7e:a9:85:7e:2c:53:01:96:bd:c6:0d:6c:36:df:63:
13:ec:73:c6:fd:a3:0b:be:dd:3f:d4:51:57:72:ed:c9:09:22:
1e:bd:7f:df:d7:70:79:dc:19:2d:84:7d:f9:1f:53:99:ba:56:
9a:6c:ca:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:18:34 2026 by rpki-client