Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: k1yAYHpZl16f6A3vxHDyi8fBnrstIstXg9RWN06pF/I=
Subject key identifier: F9:6A:40:E0:B1:2F:37:60:56:CD:19:22:8B:F0:9C:23:22:C0:41:CD
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019FF8DA443E5833DFBF68F5F24BE65D44F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 06D9
Signing time: Thu 13 Aug 2026 02:01:21 +0000
Manifest this update: Thu 13 Aug 2026 02:01:21 +0000
Manifest next update: Fri 14 Aug 2026 02:01:21 +0000
Files and hashes: 1: YEZIYMekfV4MSTcSWZQWUheIYSA.asa (hash: RvCtRmtfiK0V0w8kYFvxJFZ93JlcgF8ks3HVxGrymb8=)
2: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: xopMBKOaNx9Ku6J8FbA08hTUc+MUB9CcWoMs3HdBrpo=)
3: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:44:3e:58:33:df:bf:68:f5:f2:4b:e6:5d:44:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Aug 13 02:01:21 2026 GMT
Not After : Aug 14 02:01:21 2026 GMT
Subject: CN=f96a40e0b12f376056cd19228bf09c2322c041cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:be:1c:4b:9f:6a:e8:27:46:11:ff:c9:53:
f7:7f:25:07:e4:22:b0:d2:3d:93:b8:96:99:e8:be:
32:4b:f9:d3:a6:2a:c6:3d:57:6a:f4:2d:82:24:cc:
cf:1d:2c:76:41:b1:ba:e9:d9:71:4c:44:6b:40:db:
16:cd:ef:5c:f1:d7:ee:5a:c4:d5:50:3e:0e:56:34:
d3:d4:24:18:d3:20:73:6a:69:c3:24:22:04:ed:7b:
ea:7f:11:cc:88:5f:f5:bc:31:d1:8b:78:b0:ed:be:
da:18:97:1d:1f:cd:40:5c:ab:a5:6f:02:a6:4b:e3:
a6:0f:a4:4a:9c:30:4a:04:48:80:6c:35:04:eb:df:
bc:b2:84:15:a3:8b:6e:ff:f4:ea:03:ed:9b:5e:89:
9b:66:d0:a5:04:4e:c4:87:29:ea:4f:b0:7e:af:05:
09:eb:26:44:18:be:45:d8:76:a9:4e:be:de:9c:e6:
4d:6e:e5:cd:d1:70:da:d7:09:4a:d2:aa:ed:15:2e:
26:78:18:f1:e0:1d:fa:86:7d:01:87:43:c1:b4:84:
04:57:dd:d9:20:9e:14:63:ad:95:a7:ed:86:13:b7:
31:db:31:eb:74:c9:f0:72:26:1e:43:d0:28:e0:95:
99:8a:dd:3b:ec:34:a7:b9:83:74:32:65:1c:c3:c2:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6A:40:E0:B1:2F:37:60:56:CD:19:22:8B:F0:9C:23:22:C0:41:CD
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d3:b0:c6:45:83:b6:15:3f:e7:e7:12:3e:52:d3:b8:8f:93:
de:f5:0b:fa:26:44:b4:9a:23:ae:26:0d:09:b1:cf:83:80:00:
43:19:a5:de:ea:0a:be:c6:24:c9:e7:13:4b:1b:34:27:4b:ba:
cc:dd:e1:8a:e3:c5:70:5f:d5:c9:14:d1:c3:1d:da:d5:02:db:
5d:3a:5d:81:0e:e1:4c:dd:40:89:f2:7d:03:b5:f7:78:79:5d:
fd:b1:e0:9d:02:20:2e:67:50:17:d6:f7:f3:58:f4:f2:37:3f:
95:87:f6:11:f6:d8:77:73:18:87:85:a5:c1:75:f0:40:ec:64:
a6:74:47:18:2a:59:12:fe:c8:85:5e:7c:88:d6:5c:69:5e:cf:
5f:0c:e1:ce:52:14:ff:cb:bf:87:05:e8:0a:4e:ce:39:1f:3f:
bd:f5:ac:4e:54:b7:8d:04:5a:16:0b:eb:61:06:2d:c9:08:18:
9e:5a:8c:7a:79:0f:65:5c:d5:fe:d5:b8:9b:3c:2d:9c:4a:b3:
bc:f1:be:b9:93:3e:a9:35:47:cb:01:b0:32:f4:09:84:ff:06:
ad:44:c0:03:18:ff:84:9e:73:09:d3:e0:ad:e9:6d:93:35:1c:
04:fd:4c:9b:06:e2:00:24:dc:8e:07:6f:81:8b:73:c6:77:48:
44:de:59:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/42kQ+WDPfv2j18kvmXUTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZDUwOTI1OWY3MDBjZGM0NDQ4ZjFmYmY1MzBjMTllNDA3
NTRlYzQwHhcNMjYwODEzMDIwMTIxWhcNMjYwODE0MDIwMTIxWjAzMTEwLwYDVQQD
EyhmOTZhNDBlMGIxMmYzNzYwNTZjZDE5MjI4YmYwOWMyMzIyYzA0MWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XS+HEufaugnRhH/yVP3fyUH5CKw
0j2TuJaZ6L4yS/nTpirGPVdq9C2CJMzPHSx2QbG66dlxTERrQNsWze9c8dfuWsTV
UD4OVjTT1CQY0yBzamnDJCIE7XvqfxHMiF/1vDHRi3iw7b7aGJcdH81AXKulbwKm
S+OmD6RKnDBKBEiAbDUE69+8soQVo4tu//TqA+2bXombZtClBE7EhynqT7B+rwUJ
6yZEGL5F2HapTr7enOZNbuXN0XDa1wlK0qrtFS4meBjx4B36hn0Bh0PBtIQEV93Z
IJ4UY62Vp+2GE7cx2zHrdMnwciYeQ9Ao4JWZit077DSnuYN0MmUcw8KLYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlqQOCxLzdgVs0ZIovwnCMiwEHNMB8GA1UdIwQY
MBaAFITVCSWfcAzcREjx+/UwwZ5AdU7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQt
MWE4OWFiN2I4Y2I1LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xMjg2ZjYtNjg4Yy00Y2ZhLWEwMmQtMWE4OWFiN2I4Y2I1
LzEvaE5VSkpaOXdETnhFU1BINzlUREJua0IxVHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNOwxkWD
thU/5+cSPlLTuI+T3vUL+iZEtJojriYNCbHPg4AAQxml3uoKvsYkyecTSxs0J0u6
zN3hiuPFcF/VyRTRwx3a1QLbXTpdgQ7hTN1AifJ9A7X3eHld/bHgnQIgLmdQF9b3
81j08jc/lYf2EfbYd3MYh4WlwXXwQOxkpnRHGCpZEv7IhV58iNZcaV7PXwzhzlIU
/8u/hwXoCk7OOR8/vfWsTlS3jQRaFgvrYQYtyQgYnlqMenkPZVzV/tW4mzwtnEqz
vPG+uZM+qTVHywGwMvQJhP8GrUTAAxj/hJ5zCdPgreltkzUcBP1MmwbiACTcjgdv
gYtzxndIRN5Z0w==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:39 2026 by rpki-client