Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
File: HitHgD4Tf9WetFz67ZNixDAxjt4.mft (raw, json)
Hash identifier: M2V6nqt5rRWjjWQqpUvqKSSSHry+xmKOzETyw/7zMo4=
Subject key identifier: 04:A1:7D:89:9C:0F:DE:4A:47:C5:C1:A1:69:AC:75:CB:2B:90:49:1D
Authority key identifier: 1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
Certificate issuer: /CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Certificate serial: 019FA0DF89B604F467E6ECE3D2F5DE64CB37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:32 +0000
Manifest this update: Mon 27 Jul 2026 00:00:32 +0000
Manifest next update: Tue 28 Jul 2026 00:00:32 +0000
Files and hashes: 1: FAKw80vpI-mpfVtupkmvFk-yZPI.roa (hash: 473+Mp3hmze1LQyjXKCCeGguRS7ioXSZyLlwQX5dUjI=)
2: GZxpNzGC-1BStPRxl0AuXHTYpms.roa (hash: N5+X5onvfO8vCXWo09NVsFmRf/WIuQPxs6kWhVhvR6c=)
3: HitHgD4Tf9WetFz67ZNixDAxjt4.crl (hash: uNfptSTchk0ZU+KhvR3DpJS2EubF/B8KnnkM5GwCJnU=)
4: LRl7tzJxtNnx97ijDx7oqU2JGxE.roa (hash: 7BTG2mL/bSNfXC71H09Is4jffKot0dA2702ucToT2e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:89:b6:04:f4:67:e6:ec:e3:d2:f5:de:64:cb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Validity
Not Before: Jul 27 00:00:32 2026 GMT
Not After : Jul 28 00:00:32 2026 GMT
Subject: CN=04a17d899c0fde4a47c5c1a169ac75cb2b90491d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:96:89:e9:7c:9e:22:4b:de:24:d3:44:e3:
a2:e6:75:8f:ca:38:39:ba:53:1b:da:cd:58:e2:45:
10:62:91:54:c5:c5:14:20:a3:02:2b:c0:79:d8:bb:
cd:a6:74:e0:0a:f9:21:66:31:8d:a2:8e:c5:9d:cb:
38:91:8f:7a:6a:49:e3:65:26:22:bd:ff:14:bd:4a:
d4:16:77:4c:c0:84:e4:4c:c4:71:2d:2f:62:97:57:
f0:7a:38:af:70:7b:cd:06:7f:e6:89:f2:dd:ab:5b:
fb:ff:78:ac:ee:67:6a:d6:df:39:f9:11:1a:42:a4:
20:8c:c5:2c:a0:f4:b3:43:4f:cd:db:f4:cf:a3:e3:
e3:80:ee:a1:65:68:c1:78:9d:20:b2:57:fa:fe:0a:
3e:7b:e7:ab:8b:ee:a2:e0:56:99:81:4c:33:3b:40:
1e:7d:c6:7d:99:ec:0e:76:e8:2f:a7:3e:1e:d3:af:
e5:d0:e5:45:55:62:4b:80:7e:d7:25:d7:90:17:80:
46:be:df:f7:35:1d:b8:ee:7e:7e:39:cc:3f:ab:a9:
0c:45:2b:a1:ec:b8:f3:d6:91:b3:bd:aa:70:8f:50:
82:d4:ed:b2:64:5c:a8:36:b8:e4:b3:df:be:26:84:
55:25:fe:1b:2b:29:f7:8d:7a:94:f0:3c:c1:1c:da:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A1:7D:89:9C:0F:DE:4A:47:C5:C1:A1:69:AC:75:CB:2B:90:49:1D
X509v3 Authority Key Identifier:
keyid:1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:41:9f:c4:f3:63:be:a0:c4:85:ad:ee:c1:32:fa:41:55:11:
77:10:08:ad:7a:b9:a7:2a:8e:ec:a9:0f:ce:7d:e4:d6:37:7d:
99:08:12:40:41:70:82:46:d3:fd:56:17:5f:84:a6:ab:a2:ad:
23:bb:55:57:b3:a8:ab:e6:18:b7:81:17:df:fe:b0:4b:c2:92:
db:b8:a3:dd:dd:53:88:dd:3b:28:bf:e7:a0:0f:7b:55:02:fa:
bd:a9:12:e7:ab:0b:dd:a1:67:6a:77:cd:53:9a:18:f4:da:d9:
51:6f:b4:7f:04:5a:32:4c:b0:b1:d8:09:31:03:52:09:ec:a4:
6d:ec:27:7e:29:51:55:a8:6e:29:ae:50:9a:bb:16:2e:cf:2b:
ba:bd:19:9d:60:62:3f:5e:54:e5:af:dc:35:59:06:e4:2f:8b:
3a:45:59:a5:7e:73:b7:3a:40:b6:89:b0:a4:1c:8d:b5:8c:be:
aa:8d:9f:1e:47:79:2e:f6:f6:80:38:0a:41:ae:a5:f9:73:2a:
b5:7a:5a:e4:a9:4d:81:22:67:60:e2:9d:68:57:f2:b8:38:8a:
e4:03:5e:14:2a:54:84:0c:77:a7:81:47:3d:cf:f8:7c:61:83:
af:39:3a:2d:66:9c:5f:3c:97:98:8e:09:e1:45:86:45:7e:fe:
10:0a:61:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:54:32 2026 by rpki-client