Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: w4jFaUCbSlCrOzZ/OXA/NZHdvx5yfbtcg+RwAJ4dmKA=
Subject key identifier: 48:1A:68:28:D9:C9:1D:8D:FE:CE:DC:F8:5E:D2:F7:E5:0C:75:D0:2E
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 019FA33BDBD7903FDFEBB11770FBBC4F0473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 0B23
Signing time: Mon 27 Jul 2026 11:00:36 +0000
Manifest this update: Mon 27 Jul 2026 11:00:36 +0000
Manifest next update: Tue 28 Jul 2026 11:00:36 +0000
Files and hashes: 1: hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa (hash: ipklKvl4vE4704mx0vkFCsJ5FNBwNV4h3Vvuy2DJyMQ=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: MVj4AiGYMFJvwjTFDPy+gkcqHwScvGcgyYeO1xEAEDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3b:db:d7:90:3f:df:eb:b1:17:70:fb:bc:4f:04:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Jul 27 11:00:36 2026 GMT
Not After : Jul 28 11:00:36 2026 GMT
Subject: CN=481a6828d9c91d8dfecedcf85ed2f7e50c75d02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:3a:fb:58:3b:3a:2c:57:4b:3e:78:3d:3f:
0d:f7:f6:5f:6d:bb:fa:0f:4f:19:3a:05:c2:71:80:
89:42:06:0e:63:6c:41:b9:12:87:7a:27:5f:d7:a1:
8a:36:ee:65:e3:36:2d:97:c0:13:35:b1:a8:6f:47:
c9:d6:36:b2:eb:e1:ae:c4:a0:51:7d:56:93:cc:66:
68:17:62:44:6d:93:18:05:7e:7c:46:33:33:08:d9:
1b:f0:3e:fd:bb:b2:8f:b3:cb:6a:79:4a:da:ec:eb:
00:ed:1c:33:3b:66:12:34:3f:14:e8:90:01:a0:39:
ea:ec:5e:75:cc:8f:04:65:af:67:37:b0:5f:a6:66:
a6:4b:20:a3:9b:51:4f:a9:77:78:6a:cb:97:1e:47:
98:41:e4:53:1e:bb:db:1e:45:da:06:0f:1c:09:71:
da:a3:e0:64:7e:ee:96:ed:a7:19:12:87:2b:c9:78:
c2:5b:e9:bd:30:23:ac:4a:c2:0a:18:b9:dc:1a:f6:
9c:9a:bb:b6:ea:04:fc:11:cb:1e:c8:a0:c6:4e:3c:
de:24:7d:26:41:30:58:b7:3f:e9:04:16:54:98:f6:
43:1d:9a:d9:e7:db:f7:c4:61:5c:14:4e:d2:6b:dc:
30:0f:2f:55:a6:a4:ce:de:eb:fe:ff:3d:10:e6:c8:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1A:68:28:D9:C9:1D:8D:FE:CE:DC:F8:5E:D2:F7:E5:0C:75:D0:2E
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5e:3d:c5:07:b0:1a:14:1f:a0:10:ec:2b:8b:2a:84:73:39:
f7:a4:d3:80:2c:45:e9:28:6b:bf:81:c3:25:78:6f:b1:59:22:
52:f0:f0:bb:fb:c6:e5:1d:4f:da:0f:4d:21:2d:f9:83:95:2c:
a2:ad:30:79:aa:5d:05:3a:6b:d4:06:cd:d0:68:98:49:3f:9d:
b6:c9:7a:82:62:e1:f4:ce:f4:17:ed:d0:43:e1:ff:65:af:76:
b2:a5:04:7e:9b:fa:3a:1d:51:fb:2c:4e:66:7e:1c:74:85:7d:
63:07:cf:55:6e:49:5d:46:13:97:e8:fb:55:72:55:7d:cc:71:
e7:d0:ce:df:dd:fd:6b:ca:84:c4:4e:46:46:6e:34:87:17:02:
fe:8f:df:51:d7:06:91:e5:48:da:19:65:a8:40:a9:00:38:b9:
4d:f8:61:19:8a:10:17:15:d3:77:ea:ab:0b:32:cc:a2:ab:48:
77:18:fd:0a:5e:25:35:92:77:b5:1a:a7:9d:64:31:c3:50:c2:
52:2b:1c:c5:cf:72:ae:48:5c:cf:99:d9:ed:a9:d5:cb:73:a3:
3f:6b:fa:00:26:79:b5:e1:07:f4:99:d6:55:c4:94:e6:dc:d0:
1d:73:2b:67:df:5f:61:21:0b:62:11:bc:94:ad:bb:96:46:61:
2c:31:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:24:26 2026 by rpki-client