Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File: hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier: ImerCwEw5RbOjaQi6M6WVhGdGyRXctqujWIwGuAEokA=
Subject key identifier: B8:C6:7B:4B:78:46:BE:D8:FF:EA:E2:6A:CD:B1:F5:49:E9:E3:1B:3A
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 019F122EC72F88998D9996434234DA7AB599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number: 02C4
Signing time: Mon 29 Jun 2026 07:01:23 +0000
Manifest this update: Mon 29 Jun 2026 07:01:23 +0000
Manifest next update: Tue 30 Jun 2026 07:01:23 +0000
Files and hashes: 1: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: R/zdPTgq/b9k4JarOt8tFMI6prUwf3GqnlIm9DcwlfQ=)
2: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (hash: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=)
3: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (hash: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:c7:2f:88:99:8d:99:96:43:42:34:da:7a:b5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Jun 29 07:01:23 2026 GMT
Not After : Jun 30 07:01:23 2026 GMT
Subject: CN=b8c67b4b7846bed8ffeae26acdb1f549e9e31b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:0f:21:c0:ff:4c:e3:3b:eb:a7:16:fc:49:
02:a9:c9:4d:5e:68:c0:aa:f2:cc:ad:ce:d2:86:07:
5e:40:64:6f:15:9d:b9:08:75:86:99:8c:91:9f:ed:
01:91:22:a9:4d:e5:5c:04:de:89:6a:2c:77:36:12:
37:c5:1f:dc:79:31:98:c6:eb:3d:67:a6:3e:a5:f5:
6e:29:e8:50:53:c2:48:bc:82:f5:cb:c6:b4:2b:9c:
d8:75:3f:9b:83:30:f0:91:f3:a3:25:b4:59:6f:3b:
45:d7:7e:42:40:20:6e:4c:47:26:6e:86:cd:b4:aa:
e7:66:bc:c4:65:79:08:19:88:0b:82:83:26:8b:a6:
01:a4:f0:c7:81:36:cc:e6:6a:c7:71:39:3c:8f:41:
05:74:80:25:a3:a2:e6:1b:cb:15:da:3e:20:d1:b2:
19:07:00:bb:e2:53:d1:3e:7d:af:e3:e9:b2:b0:55:
cc:86:11:4b:87:dd:4c:d2:14:4f:c9:e6:1b:f5:36:
53:42:dd:31:e0:b3:ba:82:7a:ac:7a:33:f2:bc:ee:
73:40:d0:59:90:d8:bd:60:a8:a6:4b:fd:02:8e:98:
c8:a7:b5:14:26:53:bb:44:64:3f:f6:a5:95:50:9b:
c8:57:d3:c5:00:9d:af:f3:7e:57:c5:d0:b3:09:83:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C6:7B:4B:78:46:BE:D8:FF:EA:E2:6A:CD:B1:F5:49:E9:E3:1B:3A
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3b:d7:fe:1b:d3:b5:a8:0c:6d:4c:06:e0:69:20:3a:2c:05:
9c:a9:31:47:34:26:55:ec:29:81:97:2e:0b:af:90:a8:e7:5d:
92:0b:33:0b:30:da:5c:b5:84:24:91:20:f8:20:7d:ee:f9:ee:
a3:f5:7e:f2:0c:d9:f0:b4:83:74:18:c1:7e:da:b8:47:cc:7b:
27:16:3f:e0:b5:52:f9:58:45:74:9b:b9:07:0b:91:6b:56:de:
e7:e4:a9:80:20:67:0b:46:3a:9c:45:31:11:fc:9f:40:ae:7e:
74:5d:47:b2:5e:d9:a5:01:d8:9f:df:d0:7b:0a:a3:cc:5e:de:
43:bd:a0:3e:7a:62:d4:6d:fd:b9:98:ce:06:e3:2a:14:bd:50:
fa:a5:46:1b:22:8c:e2:bb:9f:c8:6d:62:a5:9a:9d:09:aa:0b:
c6:5d:b2:c9:dc:44:75:cb:d8:eb:09:06:70:26:b6:22:8d:d2:
d8:63:54:98:f9:1e:d4:1c:63:bc:ed:61:eb:b4:84:ff:b2:59:
ee:e3:8d:3f:2c:ff:7e:a3:02:f7:b9:e3:30:a9:b3:21:67:2d:
53:fc:bc:96:a5:b9:42:22:04:10:bc:bb:36:89:36:ba:11:19:
6b:52:84:26:21:12:74:8e:d0:9b:26:00:ea:4a:3e:cd:c2:ef:
f7:3b:cd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:39:18 2026 by rpki-client