Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier: cRWcJZZ6i5tr28Slie0yXmpL2l0zJWkBl5uAxGMP1M4=
Subject key identifier: 2F:5D:EC:F6:53:29:D8:D1:98:03:7C:44:15:36:54:09:EE:48:A2:12
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 019FA14E1784AF0478A5EC66F237D3B8467C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 02:01:17 +0000
Manifest this update: Mon 27 Jul 2026 02:01:17 +0000
Manifest next update: Tue 28 Jul 2026 02:01:17 +0000
Files and hashes: 1: RFVKCx7jKwj7HKFsLFwChol4Lkk.roa (hash: mLVKAu+YBzfWtWJSV4oLSkpIAi/5IO93e0+wM/7mAaQ=)
2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: +rIN8Vef415ilnSaAHMwn1u9vGiD9V9POwJppwSpRR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:17:84:af:04:78:a5:ec:66:f2:37:d3:b8:46:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Jul 27 02:01:17 2026 GMT
Not After : Jul 28 02:01:17 2026 GMT
Subject: CN=2f5decf65329d8d198037c4415365409ee48a212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:74:5a:c7:58:c1:33:c3:9a:5e:5d:d8:bc:
78:53:f5:34:6b:d6:2d:10:91:c3:4f:02:3d:d2:60:
90:ee:07:19:71:0d:13:62:e7:c5:f5:4b:b3:ff:90:
83:44:f0:93:16:32:14:2c:14:a4:15:62:5a:2c:0c:
0a:26:06:da:bc:cd:6d:d2:22:90:1c:cf:8e:dc:5d:
23:59:f7:7b:f5:3a:a2:aa:7a:17:91:52:aa:00:5d:
38:13:df:2e:72:38:da:e6:dc:07:c1:2a:9a:95:d6:
98:5e:18:a1:a4:e8:13:db:63:06:75:ea:5c:ef:85:
29:9a:15:90:b0:c0:34:2e:92:ea:5a:b2:0a:38:b5:
b3:81:a9:99:fa:d7:58:ee:e4:ba:84:1a:4f:22:50:
e2:0b:4b:9e:bb:23:71:08:52:fa:31:93:dc:63:e5:
e5:a5:aa:f0:05:2e:ab:83:1d:14:65:11:40:a2:00:
4d:8b:c7:69:ec:59:a3:f9:cb:76:16:00:8c:26:21:
bb:e7:df:37:64:62:c8:df:a9:01:8a:fe:1f:31:43:
47:58:9c:91:b0:30:d5:ff:15:92:52:f7:74:b1:92:
69:2f:c2:c0:61:e7:85:f1:d4:da:9d:d0:11:36:45:
4d:ba:09:f9:78:e6:ef:2d:41:44:be:f8:f1:12:3d:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:EC:F6:53:29:D8:D1:98:03:7C:44:15:36:54:09:EE:48:A2:12
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c8:9d:7d:36:a2:d6:9f:55:07:c3:d2:3a:30:5d:80:10:58:
7f:46:bf:04:b1:0a:fc:0c:02:ac:02:cd:6f:bf:d3:c3:ea:c4:
31:7e:b1:84:f4:11:e8:0e:21:c1:26:94:17:a2:b8:b1:fd:41:
e5:8a:5b:da:59:e9:63:a1:3d:27:24:38:3e:8d:53:fa:05:6b:
0d:3e:0e:df:c7:7d:c2:35:36:cf:ed:81:c4:3a:fd:dc:d9:50:
b0:a6:bc:54:64:1b:6e:4e:44:61:05:cb:a8:55:86:04:0c:27:
a3:1a:d7:42:8f:d5:60:93:56:58:83:a6:43:b6:af:1c:6a:12:
ff:f2:4b:61:e0:3d:7b:a4:6c:e5:6d:52:06:ef:e6:5a:b0:bb:
2b:e7:18:32:fe:88:5d:9e:2d:bc:a4:8e:be:5c:ac:0a:ea:38:
b4:21:6a:66:51:a7:31:a8:d2:61:82:28:47:af:db:22:34:a1:
e2:9e:96:20:f9:f9:48:0d:81:fa:8c:a1:2d:5b:84:78:ad:38:
7c:1c:fd:56:ef:fa:0e:74:f0:07:24:45:64:aa:29:33:b7:dc:
0f:27:37:b8:b4:dc:7e:a2:01:16:33:db:5f:df:55:be:5d:f5:
8e:0d:a7:b4:3e:88:28:e7:a3:a3:93:9c:a7:4f:2a:b6:c1:da:
d9:54:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:07 2026 by rpki-client