Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: OE8JI1zGUKm0p6pRLXKNcpqYWGfWjPQwaR6uySCCC6w=
Subject key identifier: 5A:83:0E:14:18:12:8C:A6:61:65:53:27:0A:C7:81:24:6C:2C:3B:E8
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 019F9EBA9BF186A1D0B2AEE76C61ADE31BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 15B0
Signing time: Sun 26 Jul 2026 14:00:57 +0000
Manifest this update: Sun 26 Jul 2026 14:00:57 +0000
Manifest next update: Mon 27 Jul 2026 14:00:57 +0000
Files and hashes: 1: 2nBYNNpL7DUTWC7t7_01sfvjbSY.roa (hash: gZ0dRZlvFm+YPFIz5Atx1f7qRtb0ULpGbzwkVg6VEJ0=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: eNAgjjUkdcis/q5L8oRSsS4gUT0yu2NjGcrGrjitDNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:ba:9b:f1:86:a1:d0:b2:ae:e7:6c:61:ad:e3:1b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Jul 26 14:00:57 2026 GMT
Not After : Jul 27 14:00:57 2026 GMT
Subject: CN=5a830e1418128ca6616553270ac781246c2c3be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:4f:dd:45:be:6a:0b:87:95:d7:a8:20:84:
5b:4e:39:a2:46:91:5b:c4:99:4a:6a:ea:ff:4b:72:
14:7c:bd:73:61:71:9b:81:fa:40:a7:02:4d:7a:e9:
ba:d6:a5:96:3f:46:f2:46:00:ce:8c:5a:a3:c7:ab:
e3:a1:99:2f:77:d3:87:b5:32:cb:98:be:f2:33:7d:
b9:a9:c1:42:7a:d9:50:cf:92:f3:bf:e0:f3:53:f9:
00:d4:6e:88:99:19:77:85:7b:41:e1:86:2e:ed:42:
69:7e:8a:3e:9a:2d:d9:20:ee:f6:43:41:da:80:c7:
99:7c:d0:98:2a:8d:c5:75:80:5d:b4:a3:61:a9:6b:
39:09:a9:4f:a1:a4:af:12:9d:9e:31:81:23:73:16:
48:9c:c6:d0:6a:42:96:a4:97:12:7f:45:52:81:78:
82:64:df:7e:6e:bf:2b:7f:c0:c3:2c:ea:5e:0d:cf:
d2:6f:74:4d:2f:af:94:24:bc:c1:ae:23:33:24:cf:
5a:ce:d0:64:09:10:fe:2a:ba:b7:6c:49:96:05:44:
f8:80:ab:3f:95:13:a0:1c:49:b7:49:4e:3d:63:d4:
e2:5e:54:82:c4:35:43:6a:7a:2e:d2:46:75:be:83:
ba:35:55:8f:7b:6e:0a:c1:55:c4:ef:a7:71:c2:d3:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:0E:14:18:12:8C:A6:61:65:53:27:0A:C7:81:24:6C:2C:3B:E8
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:dc:4b:6e:14:0b:9a:2e:99:4b:f3:47:60:19:60:e3:41:9b:
fd:2c:45:22:61:a8:dd:91:4c:7e:63:27:30:a8:25:19:2e:dc:
db:f8:91:8e:f1:89:0b:16:50:fd:98:51:7b:b4:7e:e1:e0:38:
dc:fc:5c:18:93:64:91:d2:04:67:a8:86:4e:40:ea:e3:3e:12:
be:02:c7:d5:b8:e7:8f:55:41:09:d6:67:70:17:0b:6e:ba:40:
8b:36:e9:98:e2:69:48:c8:d5:a6:99:d9:ff:c1:f1:57:df:d7:
4f:c2:dd:13:db:15:3e:7b:e8:36:26:82:e5:4f:f7:34:62:9e:
cc:50:45:5f:12:8a:5d:93:3c:da:23:08:62:42:24:97:a1:c0:
01:47:31:9b:a7:04:ec:d6:fe:79:1e:fe:02:c4:bb:41:c1:38:
9e:31:56:22:cb:30:29:43:4e:95:09:4a:bb:ee:0c:64:99:7a:
04:83:e5:47:12:89:44:a7:4d:9a:06:5c:bc:14:aa:31:5c:fd:
20:9d:ce:cd:01:bb:d2:65:99:28:9f:89:6d:d3:5c:64:17:7d:
e8:09:40:6b:c5:2d:97:b8:a1:60:f4:71:f0:63:e3:a7:14:b6:
56:a0:71:53:b1:f7:b5:58:74:d3:41:17:4e:91:67:04:b8:ce:
0f:c1:3c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 22:40:39 2026 by rpki-client