Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
File: cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft (raw, json)
Hash identifier: jHsA3Dfipo/QAhWTYrjq9aIWG+usYjRDgOpI+XSRAYQ=
Subject key identifier: D5:40:6B:06:3B:90:C1:0D:3E:F8:C6:EE:3A:9F:37:E5:EF:50:CA:04
Authority key identifier: 70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
Certificate issuer: /CN=7072134a2255580a91f06936cf82fb0023f06c42
Certificate serial: 019F122E4EDF9233BAFE88F2FE099E5CAC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
Manifest number: 8B
Signing time: Mon 29 Jun 2026 07:00:52 +0000
Manifest this update: Mon 29 Jun 2026 07:00:52 +0000
Manifest next update: Tue 30 Jun 2026 07:00:52 +0000
Files and hashes: 1: _fhQFwi-5JBgNuF9ysg8prbnCH4.asa (hash: vwTClUGSGGQDNu5gkDhQCyHt1unEEW938HxzQXSkbp4=)
2: cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl (hash: /na1iCOHJPBrK8zVr0hcd1rqRZRh4ZoYV52Oa/eGG/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:4e:df:92:33:ba:fe:88:f2:fe:09:9e:5c:ac:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7072134a2255580a91f06936cf82fb0023f06c42
Validity
Not Before: Jun 29 07:00:52 2026 GMT
Not After : Jun 30 07:00:52 2026 GMT
Subject: CN=d5406b063b90c10d3ef8c6ee3a9f37e5ef50ca04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:5a:9e:61:d8:5c:cc:f3:84:4e:23:4f:18:
5d:40:f6:bd:a1:43:5d:c6:a2:f8:fc:74:74:1b:26:
21:79:b9:79:66:78:61:62:9b:16:78:26:37:91:77:
92:fe:0a:a1:b9:36:60:24:4e:46:6d:48:d6:3b:5b:
14:85:bd:fc:d1:20:4d:b9:c2:05:be:b4:05:2b:43:
8d:76:0c:a3:76:b5:e3:86:28:5b:7d:e4:12:4e:cb:
ba:35:f8:15:e2:d3:1c:f7:61:7b:2a:21:f9:a0:43:
53:07:3b:95:14:b1:ff:0b:ea:bd:2e:0e:7f:ef:a1:
a2:36:94:d3:d8:90:e6:7c:f3:46:4b:65:b2:d1:f1:
7f:52:48:d0:b1:50:29:3f:29:95:c9:9b:a0:fe:b1:
ae:ca:f0:e5:91:ca:71:ec:df:e5:4a:9a:06:b5:f6:
46:34:ff:09:2d:8c:cb:c0:27:8d:39:6f:4e:7f:df:
7a:d1:ac:6c:23:bf:71:1e:71:07:c5:d3:72:58:76:
f7:37:3c:2f:20:23:44:0c:07:c5:d9:b6:95:2f:79:
2b:1a:18:bf:98:9c:84:c4:92:e0:d1:f4:6a:f6:28:
10:46:27:19:9e:af:39:73:58:98:bd:3d:62:7a:61:
a4:24:a7:b2:80:e8:ba:01:02:31:79:ca:2c:e4:2a:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:6B:06:3B:90:C1:0D:3E:F8:C6:EE:3A:9F:37:E5:EF:50:CA:04
X509v3 Authority Key Identifier:
keyid:70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c9:98:82:e8:fe:d0:6f:b8:81:02:38:55:6d:24:f0:a3:1a:
74:b6:fd:e2:36:c2:e7:fa:6d:2f:82:6e:55:e7:a3:03:a4:e9:
54:f6:3b:1f:1d:08:ee:49:f4:7d:1a:9f:01:83:f7:2d:58:ec:
53:84:75:82:6d:40:bd:30:3d:e7:17:71:85:1d:39:0a:48:ef:
11:55:1f:07:1b:2d:02:f5:be:41:62:17:f9:eb:ac:ca:c2:91:
62:9a:2a:c1:e9:6b:da:8a:bd:dc:28:b6:07:0a:f6:71:42:36:
5c:bc:52:b7:db:b4:ca:3d:0b:b2:a0:52:b7:5d:5e:12:02:71:
27:e4:44:4d:70:ec:a9:66:23:36:13:17:13:96:39:8c:ae:e5:
64:dc:65:27:e3:72:03:2f:0c:0c:98:7a:fe:a4:a2:ab:58:d8:
d5:f2:05:1e:2c:22:a4:ae:e6:31:ca:2b:8e:e6:5a:6e:57:bc:
9a:d2:45:52:8c:06:5d:14:03:4f:06:36:b5:52:84:01:40:e8:
b1:3f:f2:e3:00:ce:1d:19:c8:38:ec:3c:38:9d:80:5d:35:2b:
72:9d:d1:f4:25:07:24:39:c1:3d:3f:08:44:96:a1:b0:55:f3:
57:1d:96:a9:8b:5f:62:5c:4f:b2:cb:8a:e7:f0:9f:58:29:0f:
f7:7c:f5:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLk7fkjO6/ojy/gmeXKw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNzIxMzRhMjI1NTU4MGE5MWYwNjkzNmNmODJmYjAwMjNm
MDZjNDIwHhcNMjYwNjI5MDcwMDUyWhcNMjYwNjMwMDcwMDUyWjAzMTEwLwYDVQQD
EyhkNTQwNmIwNjNiOTBjMTBkM2VmOGM2ZWUzYTlmMzdlNWVmNTBjYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1tanmHYXMzzhE4jTxhdQPa9oUNd
xqL4/HR0GyYhebl5ZnhhYpsWeCY3kXeS/gqhuTZgJE5GbUjWO1sUhb380SBNucIF
vrQFK0ONdgyjdrXjhihbfeQSTsu6NfgV4tMc92F7KiH5oENTBzuVFLH/C+q9Lg5/
76GiNpTT2JDmfPNGS2Wy0fF/UkjQsVApPymVyZug/rGuyvDlkcpx7N/lSpoGtfZG
NP8JLYzLwCeNOW9Of9960axsI79xHnEHxdNyWHb3NzwvICNEDAfF2baVL3krGhi/
mJyExJLg0fRq9igQRicZnq85c1iYvT1iemGkJKeygOi6AQIxecos5CovDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVAawY7kMENPvjG7jqfN+XvUMoEMB8GA1UdIwQY
MBaAFHByE0oiVVgKkfBpNs+C+wAj8GxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0hJVFNpSlZXQXFSOEdrMno0TDdBQ1B3YkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mMzE3MGItYzkyNC00ZGZhLWIyNmIt
Njc5OTZhNzQzZjI2LzEvY0hJVFNpSlZXQXFSOEdrMno0TDdBQ1B3YkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mMzE3MGItYzkyNC00ZGZhLWIyNmItNjc5OTZhNzQzZjI2
LzEvY0hJVFNpSlZXQXFSOEdrMno0TDdBQ1B3YkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsmYguj+
0G+4gQI4VW0k8KMadLb94jbC5/ptL4JuVeejA6TpVPY7Hx0I7kn0fRqfAYP3LVjs
U4R1gm1AvTA95xdxhR05CkjvEVUfBxstAvW+QWIX+eusysKRYpoqwelr2oq93Ci2
Bwr2cUI2XLxSt9u0yj0LsqBSt11eEgJxJ+RETXDsqWYjNhMXE5Y5jK7lZNxlJ+Ny
Ay8MDJh6/qSiq1jY1fIFHiwipK7mMcorjuZable8mtJFUowGXRQDTwY2tVKEAUDo
sT/y4wDOHRnIOOw8OJ2AXTUrcp3R9CUHJDnBPT8IRJahsFXzVx2WqYtfYlxPssuK
5/CfWCkP93z1/A==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:43 2026 by rpki-client