Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: x6GdKwNEQ8QdgZfkP4BVC+QMT7oJcXl5teD1UZ9b7Vg=
Subject key identifier: 29:A7:70:5F:BD:E4:51:09:0B:0B:82:87:67:C9:16:A0:5D:08:02:F3
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019FCB257261F25F9D2362B84C94E5E63C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 19E5
Signing time: Tue 04 Aug 2026 05:00:56 +0000
Manifest this update: Tue 04 Aug 2026 05:00:56 +0000
Manifest next update: Wed 05 Aug 2026 05:00:56 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: LGDE6+b5mehYYukrhnPBrQdz/kUVBiYbh01Ypy7gIjI=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:25:72:61:f2:5f:9d:23:62:b8:4c:94:e5:e6:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Aug 4 05:00:56 2026 GMT
Not After : Aug 5 05:00:56 2026 GMT
Subject: CN=29a7705fbde451090b0b828767c916a05d0802f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:25:9d:68:b4:90:d9:e4:48:06:33:dd:29:
55:3c:2d:81:26:af:9b:46:fe:56:4f:4d:4a:de:2f:
a8:b3:cc:f9:ec:8b:b4:be:f8:c1:ea:ab:f5:50:d0:
02:84:5f:f9:79:ac:17:3e:b7:53:50:5a:48:84:f9:
16:cf:80:d7:5f:15:90:05:5d:89:ce:dc:6f:34:5f:
d2:68:1a:82:cc:39:89:4b:43:b3:1e:ac:6a:83:a5:
ed:36:64:18:00:c8:3a:a3:5e:1e:a4:75:05:d5:92:
c3:97:58:db:a8:62:32:24:b1:b6:f4:2e:b1:5f:89:
44:38:07:52:eb:3c:d9:81:75:24:81:41:4a:18:4e:
31:84:93:02:0b:f4:7b:8c:ad:87:6b:ca:99:88:f8:
e7:16:45:87:a1:b1:b3:25:95:a6:03:1d:dd:16:69:
f8:8b:26:fd:3f:52:71:09:d7:5f:df:42:0e:4e:7b:
35:4e:4a:fe:33:5d:8d:73:86:7b:aa:89:ef:0a:8b:
f1:ae:b0:2f:ed:46:6d:4a:10:2a:31:38:24:6d:d5:
80:c1:9f:c0:fc:68:5a:93:0e:09:06:50:0d:d4:cb:
d7:5b:b6:6a:d5:91:2d:41:11:65:8c:55:61:ac:44:
6b:36:a3:d1:b3:ef:63:fd:86:b2:14:01:c6:18:d5:
28:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A7:70:5F:BD:E4:51:09:0B:0B:82:87:67:C9:16:A0:5D:08:02:F3
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c9:54:b4:f8:6e:b5:ee:b1:50:88:91:80:fc:c7:e5:e0:5c:
0a:09:53:e3:a7:a4:a4:3c:d8:e0:e7:94:03:b8:0b:43:fd:0b:
39:ca:04:4b:8d:1f:11:04:e9:04:6a:1b:87:2f:33:ee:6d:33:
c0:93:a7:3f:3d:82:78:c8:d0:04:1e:1b:a7:3d:14:d7:5f:9b:
5f:c0:fe:c8:51:6e:e6:c0:5f:97:31:0c:b6:6b:63:13:d5:c9:
d1:76:51:33:93:0e:0b:a2:70:a1:06:23:fd:a4:14:59:ce:4a:
6d:a1:58:bc:20:cd:36:90:26:f0:6f:0d:6d:62:e9:fc:bf:65:
fc:4d:54:ed:52:c6:e6:e8:80:78:ab:34:25:17:a5:37:9b:71:
82:da:3f:ea:d7:e9:1c:5f:40:22:43:69:78:ae:ea:b2:8e:c1:
9b:7a:db:bc:f2:b2:4a:0d:55:10:a4:6a:de:56:d7:4f:8c:1d:
86:48:91:1d:03:06:e5:68:5d:be:8e:42:3a:8e:13:a7:2c:f3:
53:52:8c:76:04:ce:37:5a:38:e0:01:eb:7b:0c:f2:86:37:f4:
cc:f8:0a:d8:30:48:e5:07:f9:07:b7:10:f7:d8:9c:0f:bd:9b:
fc:78:d8:d0:c4:7d:3c:8f:d4:43:41:f9:f6:54:b8:9a:e2:19:
f1:ad:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:58:36 2026 by rpki-client