Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: 1eFzFSepjGE/HlTA3tmGj+ydBccb3xe+xLnl7w1Quww=
Subject key identifier: 0C:68:B4:A7:99:EC:87:05:3B:98:FA:88:84:72:9D:47:45:01:5B:77
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019FD83CECFA6F9424E0205E6778522BA9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0DE4
Signing time: Thu 06 Aug 2026 18:01:39 +0000
Manifest this update: Thu 06 Aug 2026 18:01:39 +0000
Manifest next update: Fri 07 Aug 2026 18:01:39 +0000
Files and hashes: 1: K_y2fKHPzfyMG_X9CTHflV0WLi0.roa (hash: KabNvipw1vq+vrMlPeKcdUkL/gp9b7QpFWkct8rC9KU=)
2: MmD4LpG9L1abWhzDe3zsHGjMcKk.roa (hash: BYA/AELd944eyEW5OY9zqZeNygCSSsS+zSrCK5eSS0g=)
3: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: Wu/3BpKcHA0bD55DonLeKWp4VXnCk5XQ81R2KCG1x2Q=)
4: hKJDVK08o4RIWoWlt6lBuBhmgR0.roa (hash: MAApWzskbzneHqBQ6AJZbIOluhaLfJyDC3dItvxt1eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:3c:ec:fa:6f:94:24:e0:20:5e:67:78:52:2b:a9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Aug 6 18:01:39 2026 GMT
Not After : Aug 7 18:01:39 2026 GMT
Subject: CN=0c68b4a799ec87053b98fa8884729d4745015b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:f7:6c:73:ec:ee:ed:de:10:ff:47:11:20:
b1:e2:34:87:cb:86:0d:84:b6:73:0c:f8:a0:f1:b5:
50:12:62:b4:d6:b0:92:80:81:a2:12:5e:42:3e:65:
32:07:64:25:74:ff:31:99:21:10:7e:86:47:cb:3f:
7d:4f:d8:31:cf:e0:22:92:14:69:a9:9b:76:14:c1:
75:8b:9f:54:07:db:0b:f0:d7:20:84:ae:1d:06:e1:
48:03:b2:f1:57:62:c2:26:52:c4:7c:af:55:b4:5d:
f5:cc:89:88:95:20:fd:79:a5:fc:80:8a:11:a1:85:
89:91:0f:d3:f5:89:46:9b:32:c1:53:0d:6b:4f:ae:
f5:1d:ff:1e:dd:76:42:8c:3a:47:c4:99:c6:88:2b:
cb:ec:be:31:a0:f4:22:3e:be:a9:9b:00:27:01:ba:
54:8d:df:c2:da:69:c0:66:3d:c3:c1:9e:30:9f:7d:
8c:c8:ce:3e:ed:dc:c6:8b:23:19:df:7a:fb:ce:53:
d3:a6:cc:b1:11:7d:52:4d:87:c0:27:79:74:3a:b9:
6a:21:9e:5a:e4:98:ae:50:4a:6f:ae:39:55:e4:31:
dc:6d:a8:9c:30:5f:bd:af:cb:33:fc:08:07:dc:d6:
bf:37:e4:b2:3d:5e:a3:93:3c:d2:60:20:d7:ca:c3:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:B4:A7:99:EC:87:05:3B:98:FA:88:84:72:9D:47:45:01:5B:77
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:da:65:87:7e:8f:0e:77:b1:a0:c3:05:8d:75:5a:3e:82:20:
e5:29:18:dd:3f:19:5f:bb:8d:7e:45:ff:50:4e:c5:fa:88:39:
7d:57:e7:a2:be:11:ad:1d:90:f0:6c:4a:79:ec:b4:1c:46:7c:
fd:c4:1a:26:6f:82:cc:9e:94:2e:19:2a:69:c4:ec:2b:2b:8c:
2f:66:33:65:7a:b5:0b:ea:48:1f:08:58:22:a2:8c:15:97:5a:
3e:d0:03:57:f1:a9:f6:4c:5b:dd:0c:5f:0d:9a:2a:15:8f:bc:
95:19:f2:c1:b0:44:aa:3b:53:10:e7:ff:f7:f6:4f:b2:d4:e4:
18:d3:dc:80:64:85:72:77:11:c2:19:e7:91:1e:5b:ec:aa:1f:
dd:8f:68:f8:fd:7a:d8:79:c3:6b:2c:46:07:d6:39:b8:7d:17:
b0:c6:4b:21:d6:fd:84:80:19:39:e8:d7:d2:39:41:6c:78:55:
d0:7c:e2:41:bb:ae:d8:fc:7a:53:88:16:dc:34:cc:52:e6:1a:
42:ba:68:5a:1f:0f:91:7c:15:53:e6:2e:76:0a:da:91:48:a2:
7b:05:b3:73:81:68:fc:02:16:8a:59:32:60:20:74:21:23:9f:
aa:07:d1:38:9a:49:af:2f:26:7f:ae:6c:05:95:a6:79:24:3b:
13:24:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 00:32:25 2026 by rpki-client