Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
File: hB6IIdAaloi57nryrruVnLvtBys.mft (raw, json)
Hash identifier: oHdsq4lMFR1NowPBWHOIRy+X7oDLDzcJxYxfUVXEmWw=
Subject key identifier: 53:80:7C:10:30:20:C0:FC:86:FF:14:D8:33:1C:C6:E7:8C:5B:57:C9
Authority key identifier: 84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
Certificate issuer: /CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Certificate serial: 019FCC6F5D77D1937B1407C30A4B35C31D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
Manifest number: 021A
Signing time: Tue 04 Aug 2026 11:01:18 +0000
Manifest this update: Tue 04 Aug 2026 11:01:18 +0000
Manifest next update: Wed 05 Aug 2026 11:01:18 +0000
Files and hashes: 1: OBBBpbRLtAoopWvDF4V0_36vRjc.roa (hash: rORQCAXSnhZhLeVmf7l/rxG4Y1xlgxBiqBOAQvHavUw=)
2: eQ8pUqqadp9cp4FYzeNplhCqiz8.roa (hash: RF09/EJZQF5XIgJSe7QHfYgaZkhCRVhxSpLB2BRdPks=)
3: hB6IIdAaloi57nryrruVnLvtBys.crl (hash: F6oI105QtIUWYDMNP+vXkTWWtlChfFyviaAXXRgQB0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:6f:5d:77:d1:93:7b:14:07:c3:0a:4b:35:c3:1d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841e8821d01a9688b9ee7af2aebb959cbbed072b
Validity
Not Before: Aug 4 11:01:18 2026 GMT
Not After : Aug 5 11:01:18 2026 GMT
Subject: CN=53807c103020c0fc86ff14d8331cc6e78c5b57c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:65:54:0b:84:a3:f9:5c:67:bf:6d:f8:03:85:
c7:7c:09:59:01:83:f1:2e:0e:78:4a:42:00:c3:e9:
72:0a:b9:e2:eb:53:d4:02:1a:7d:28:ae:2c:c8:aa:
02:1d:cd:0b:0d:6e:1d:f2:d2:b5:f7:6d:f9:78:a5:
6f:e7:d5:ee:8a:e1:c3:50:8f:71:91:96:b2:43:d2:
81:ee:1f:ca:4c:f2:e6:e6:be:97:51:25:8d:5e:0a:
ef:a3:16:5f:28:d7:cb:39:f6:02:4a:ba:16:69:af:
a8:b6:9a:f0:10:4a:f0:67:df:dd:e2:3a:d8:25:50:
64:35:02:7a:af:04:a9:0e:8b:82:bd:60:41:bb:6b:
f0:68:01:ab:62:74:d9:08:00:5c:77:65:94:f5:b4:
60:e4:92:e9:3c:a3:f3:50:69:18:92:66:17:02:ad:
38:34:14:84:54:98:6a:e3:b5:1a:f2:89:6d:e7:c2:
c3:10:d3:11:9e:c1:40:8f:58:5a:dd:75:f7:93:7b:
0a:2a:24:a2:cd:7b:a3:32:75:77:4b:68:57:27:06:
f8:5f:68:8e:c4:90:3b:d0:fe:69:39:b5:ac:09:40:
fc:41:1c:62:eb:5f:5e:87:8c:c9:00:b3:54:36:97:
92:b1:0d:ff:4f:ad:db:b8:d6:26:b7:81:2a:9c:a7:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:7C:10:30:20:C0:FC:86:FF:14:D8:33:1C:C6:E7:8C:5B:57:C9
X509v3 Authority Key Identifier:
keyid:84:1E:88:21:D0:1A:96:88:B9:EE:7A:F2:AE:BB:95:9C:BB:ED:07:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB6IIdAaloi57nryrruVnLvtBys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b067db-9ab1-4b13-9b70-a13237613459/1/hB6IIdAaloi57nryrruVnLvtBys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:07:3a:86:ef:f8:9f:52:a0:34:e7:99:bf:c2:f5:08:ff:e0:
76:d5:1b:46:af:07:d6:53:63:58:a9:1d:5d:f0:aa:98:42:ec:
16:82:88:17:6e:ad:e2:1f:b8:1c:0d:8b:38:08:a0:01:d1:93:
17:c7:f2:03:a5:69:ad:dd:58:e1:c9:8e:3a:6e:55:bf:6a:a2:
a2:c8:3a:c8:e1:62:5f:3d:e8:db:b8:e7:6d:d2:ff:5a:b5:5c:
f6:77:04:90:18:49:3a:ec:ee:68:bd:0c:d8:df:4e:29:33:c1:
19:20:92:13:bf:00:6e:d8:5f:1d:82:f5:7c:f9:4b:65:ae:44:
4c:e0:34:5b:31:1e:28:12:6a:a5:22:ee:72:18:4f:3b:22:38:
81:e2:13:af:0f:af:cb:58:f4:d0:26:6b:1a:ef:e5:5a:ed:c1:
7e:6b:39:51:c6:20:ee:3a:a7:f4:6b:ff:bc:bf:83:01:64:b7:
39:8e:1f:25:91:b8:ac:95:01:a9:b6:dd:24:da:2b:54:b0:71:
9e:e5:58:4d:ae:6a:55:90:ac:c6:71:f4:1e:fa:93:ef:09:a8:
df:ea:63:92:38:6f:55:34:05:b2:a1:11:02:8b:1c:55:ad:3f:
43:a9:c2:a2:d2:13:f4:63:d2:dc:83:f0:50:c1:31:a0:c0:99:
3a:33:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:57:55 2026 by rpki-client