Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
File: HDepAm5Fto_kc1pGm3VjYTCtElw.mft (raw, json)
Hash identifier: yVqc9dgexlIP4PrufVasdQs987MhTrig0YuTbf9xmwc=
Subject key identifier: BF:B0:10:C6:12:81:10:8D:78:0D:C2:5D:52:0C:C7:7A:E9:BD:04:0B
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 019F85D67E813CE9646A66960A4AA9165A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
Manifest number: 0CFA
Signing time: Tue 21 Jul 2026 18:00:54 +0000
Manifest this update: Tue 21 Jul 2026 18:00:54 +0000
Manifest next update: Wed 22 Jul 2026 18:00:54 +0000
Files and hashes: 1: 2k061tGHc03Ey0V3NX4-GnPnNBc.roa (hash: cqhlKMqnXJOJCr7N4xEDssiNgQoWfirNtnOj+DZf3Xk=)
2: HDepAm5Fto_kc1pGm3VjYTCtElw.crl (hash: OFJtiBoK8QVmjPJtBszJt1AUX4Ejv0ev7ilK94heJxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:7e:81:3c:e9:64:6a:66:96:0a:4a:a9:16:5a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Jul 21 18:00:54 2026 GMT
Not After : Jul 22 18:00:54 2026 GMT
Subject: CN=bfb010c61281108d780dc25d520cc77ae9bd040b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:e2:c0:52:ef:d5:df:6c:b8:34:42:9f:d8:
64:14:7b:18:92:40:d4:cf:59:7c:0d:43:98:36:2b:
00:21:b1:96:fa:dd:6a:94:83:1d:e8:86:5a:3c:00:
21:c4:50:d8:79:07:ef:d7:a0:c5:9f:9b:35:b5:78:
2b:60:4c:9e:cd:81:f2:39:f2:9c:a2:91:ca:bf:6c:
22:a5:5c:50:ac:ad:4d:40:2b:a2:8d:64:f2:f8:12:
60:fe:da:c9:4b:ce:2f:6e:1b:0c:db:79:9c:63:05:
80:6e:76:49:08:f5:8f:4a:aa:f4:95:d2:52:a4:28:
81:ac:8a:03:a0:b8:08:a0:a6:62:6d:31:fc:67:27:
1c:e2:ae:0c:3e:b5:1e:2c:3f:bc:14:8a:d9:af:4c:
ad:35:8e:d1:5b:b6:7f:00:47:f3:b6:0e:44:d1:61:
3b:20:ec:78:93:f7:34:a9:56:28:9e:5e:fe:36:3a:
3b:88:e9:11:ef:af:f2:04:7b:18:a5:a0:71:22:71:
bd:30:50:97:5d:57:93:83:c1:fb:e3:15:c9:c3:f9:
7b:e5:a0:d4:93:92:f4:82:62:b5:1a:2d:df:93:fa:
f5:ed:49:45:75:33:a7:f9:0a:31:db:97:8a:95:9e:
59:78:e2:15:29:ce:1b:98:d7:fa:05:58:3f:86:43:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B0:10:C6:12:81:10:8D:78:0D:C2:5D:52:0C:C7:7A:E9:BD:04:0B
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c9:84:9a:93:91:62:bc:85:4b:7b:84:1c:11:03:3f:89:45:
25:c6:79:54:b9:1b:6b:85:56:d6:aa:97:23:1d:ba:8a:e7:9a:
37:57:0e:78:5e:6c:9b:ea:0b:35:b5:1a:31:ff:ae:3c:2b:1a:
d5:b4:7a:e3:2e:b3:da:ca:ca:a5:18:8b:0c:c9:78:12:63:35:
82:80:ac:0d:2a:8e:a2:31:ea:3d:45:1c:9c:e1:7b:66:a4:45:
62:2d:ce:1b:66:5c:e1:4e:4d:81:3c:75:17:9f:92:4c:eb:40:
ad:f8:78:87:48:e5:25:84:2e:bb:43:12:b5:df:58:4a:5b:11:
4f:a9:b9:db:ed:51:cf:cf:16:91:3b:50:cb:25:4c:ad:be:ba:
4f:c6:d5:e4:9a:15:27:8d:b2:d6:14:85:a7:03:f2:95:0c:2c:
ad:02:95:89:06:5f:ae:4d:44:de:05:68:e3:04:c8:bf:b5:37:
d5:e8:b0:b4:80:dc:a9:98:78:90:53:a3:57:bf:da:2e:7a:3a:
1e:a5:17:26:e2:6f:e0:bd:1e:1c:3a:65:84:be:6e:17:93:0c:
9c:e7:0f:54:f1:36:ca:af:66:b3:07:e8:25:f2:db:4b:c3:68:
26:c9:d6:5c:56:7e:d3:3f:1a:d7:f3:63:fd:e4:c2:48:5e:a0:
39:31:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:11:48 2026 by rpki-client