Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: 5W8Nflnavf1myvs5dXw+fBHM53MVOUVrUPLceDUCsrI=
Subject key identifier: A8:ED:A2:EB:93:9B:2C:53:E1:78:5C:C4:78:5D:8D:76:63:3E:C0:C7
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 019F86E88CF505B603405AD2938E10CF210D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 19C4
Signing time: Tue 21 Jul 2026 23:00:15 +0000
Manifest this update: Tue 21 Jul 2026 23:00:15 +0000
Manifest next update: Wed 22 Jul 2026 23:00:15 +0000
Files and hashes: 1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: KCAz7KoFhARpn+bszLepVycLte2AA0KuPSfVKNQLnbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e8:8c:f5:05:b6:03:40:5a:d2:93:8e:10:cf:21:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Jul 21 23:00:15 2026 GMT
Not After : Jul 22 23:00:15 2026 GMT
Subject: CN=a8eda2eb939b2c53e1785cc4785d8d76633ec0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:62:86:27:02:5f:f4:c7:23:26:1b:40:b2:30:
84:eb:76:88:00:41:02:b4:77:48:1d:90:c9:dd:8e:
33:62:22:f0:7f:34:bc:7f:09:05:c7:6e:e0:ad:c0:
ca:3f:d6:4b:de:ff:2c:d6:ac:f6:69:79:02:d5:75:
a0:b8:4c:c3:6a:00:01:76:2d:97:cc:2c:c1:3d:e2:
4f:60:04:6d:42:af:d0:1e:ab:51:97:f6:89:81:9e:
9f:de:50:ce:2e:f3:b0:2e:c4:33:8a:76:26:59:95:
04:0b:c6:e1:78:16:b2:34:73:1f:d1:f7:00:0b:53:
69:4b:13:d5:87:c5:75:9d:ca:81:52:9a:df:39:6c:
33:c6:f7:1e:6d:9c:b7:9e:d2:39:29:68:bc:2f:7a:
c6:f2:af:48:1b:56:75:07:ac:14:0a:ea:f0:31:32:
8b:55:91:a9:5a:9a:ae:0f:ea:21:91:e4:a8:2e:5c:
f3:ec:d5:f0:a3:08:96:7f:bc:10:01:1f:e9:2d:f1:
e8:79:4c:35:5d:ef:c9:39:95:11:27:90:09:55:22:
8d:25:54:86:7d:b5:f1:40:93:8f:e8:8d:a1:dc:14:
1f:ad:e4:7a:eb:3f:a0:fb:63:ee:da:56:ec:0d:d0:
2e:66:92:7c:06:b1:7f:ef:1f:b2:6e:2e:22:1a:d4:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:A2:EB:93:9B:2C:53:E1:78:5C:C4:78:5D:8D:76:63:3E:C0:C7
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2d:9f:f6:7d:40:35:0c:d2:a8:e0:af:4a:61:4a:da:34:5b:
0f:c7:01:61:3c:4a:46:bf:34:20:82:e2:d0:5d:31:e8:11:d8:
f5:1a:a0:6b:78:11:03:ba:c8:66:ee:db:20:91:47:45:17:6b:
5e:6a:12:c0:ab:ff:5a:57:a7:48:a5:5a:d9:eb:c4:81:50:ef:
a8:0d:58:eb:e1:02:45:49:d4:9f:5a:1e:0c:60:51:71:10:f5:
7e:10:8f:06:50:71:1d:ce:a9:b1:fc:3d:c8:c7:6c:ca:3b:96:
2c:ad:30:37:fc:a0:c9:39:ef:16:f1:8d:95:68:49:bc:9b:07:
b2:37:c1:71:6c:91:84:4a:e0:7f:64:03:70:4e:0e:92:31:39:
3f:ac:c4:1c:74:e7:41:85:33:e5:22:a3:81:34:e6:3e:44:bb:
f4:58:b6:88:ac:f2:36:d1:36:f2:e3:bf:15:6a:08:59:93:14:
ba:ea:c6:c5:79:eb:07:b4:56:ec:35:12:7e:f0:f3:6a:19:8a:
22:55:50:1d:a3:0d:da:ed:85:c9:96:c7:58:33:71:6e:62:4a:
bf:37:98:93:12:6a:58:d7:3b:27:c0:f1:2f:51:61:d4:d4:46:
59:97:94:cb:c8:b4:d3:3e:37:c7:b0:eb:02:55:2c:61:17:b2:
4f:7f:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:04:32 2026 by rpki-client