Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: hBaDfEXte1zt+SXsZMh65fMaZmIveweabmI6kD1D3wk=
Subject key identifier: 87:26:D2:1F:60:C8:8D:E0:8A:11:CD:E1:FE:22:78:04:63:61:52:31
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 019F9E8310DF0BB2C5F5DF5DC0C56F95AC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 157A
Signing time: Sun 26 Jul 2026 13:00:17 +0000
Manifest this update: Sun 26 Jul 2026 13:00:17 +0000
Manifest next update: Mon 27 Jul 2026 13:00:17 +0000
Files and hashes: 1: R833NOdXTD2aQWG3JavzKd06mys.roa (hash: fWZj94n90bNsji3CFK3WkNid37wFqWD8C1Qx/wwtaQQ=)
2: ZmLewUIWz9_zdShetR7Jdzl8lfo.roa (hash: fPaCPLobKeVWk/RzinoeDdlx4MxMtKzniHguRoc5v/k=)
3: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: T74+ICKZwfOECKbG0JJYkuOJLggcTD0+e5NTL595Ur4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:83:10:df:0b:b2:c5:f5:df:5d:c0:c5:6f:95:ac:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Jul 26 13:00:17 2026 GMT
Not After : Jul 27 13:00:17 2026 GMT
Subject: CN=8726d21f60c88de08a11cde1fe22780463615231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:71:c7:6c:4c:90:8d:9f:6a:a8:b1:a7:93:
ed:cb:0c:9c:c2:03:51:4f:1f:ec:b7:19:f5:7c:e4:
84:8b:0a:23:ce:7b:5d:32:b5:3e:9f:ec:f8:d1:51:
75:be:a0:5d:ff:9d:f6:1e:ad:dd:0e:a6:42:99:78:
c7:00:ea:e5:79:f9:22:3f:c2:42:85:7f:aa:0d:a6:
99:6c:8b:88:65:9d:4f:cd:3a:30:35:aa:bc:06:14:
d4:ef:b6:88:f8:10:d9:fc:8c:53:f3:6f:8e:aa:6a:
70:b5:19:d7:0f:27:9e:bd:53:f1:9c:6f:c7:a2:92:
10:f2:7d:02:19:04:31:c7:af:12:01:2a:d9:4c:0a:
66:5a:50:fe:a0:5c:e5:7a:f1:2d:fc:a2:f1:7b:5d:
d3:b8:d5:96:89:f7:5d:25:bd:f0:72:43:5a:31:c9:
79:9a:2e:a4:35:bd:6e:42:a6:07:57:e9:fb:e4:eb:
00:48:58:db:53:c9:02:4d:12:4b:d5:ed:0d:ba:fd:
b5:87:a1:a0:0e:15:03:0f:38:90:40:7b:a4:6a:34:
62:3d:4e:c6:a1:1f:67:25:1a:37:8c:61:4f:ef:b2:
99:ee:b8:a0:ec:68:37:54:48:de:65:42:d6:73:ee:
01:9b:be:ed:f5:77:c2:23:20:d7:70:66:18:f0:3d:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:26:D2:1F:60:C8:8D:E0:8A:11:CD:E1:FE:22:78:04:63:61:52:31
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dc:4b:10:d2:b0:4b:d4:8a:ed:f7:9e:45:17:d4:65:9d:3e:
37:8b:fa:de:f1:ea:bb:cd:3c:5d:e8:29:2a:09:05:2c:20:87:
3b:af:3c:d3:69:86:6a:f3:95:b0:ec:0d:16:f6:d2:f1:a4:e9:
89:3b:75:be:db:96:5b:8f:34:72:9d:e1:73:88:f1:0e:64:d9:
ff:7d:84:6d:d6:6e:bb:2b:0d:bf:54:fc:6b:0c:74:4c:7c:0e:
d0:9f:5d:53:89:db:bf:8a:5a:27:c9:70:67:5c:94:92:2d:24:
cb:f7:b6:43:1d:9c:a0:f5:06:e1:2a:04:61:24:7c:c0:aa:48:
96:10:f1:a0:b1:ee:2f:88:4f:98:9c:fd:8f:51:1d:76:86:fe:
72:5e:82:4e:97:f1:de:8a:95:54:fe:30:f1:7c:61:ee:cf:55:
45:06:46:f8:37:d6:c1:1a:b9:56:c5:d5:20:ed:e2:18:bd:ad:
a4:f6:d9:98:fb:09:a2:f4:85:36:cb:3b:3f:9f:ba:35:69:d7:
a4:63:5e:c5:ce:96:8a:8e:0f:11:77:39:56:1d:ef:2d:a8:3b:
7e:d9:78:42:d0:54:ff:8e:14:7f:e9:65:c9:cb:bb:e3:0a:8c:
12:44:a3:d6:cb:7e:21:b9:e6:a7:25:cd:cc:fc:85:23:fb:da:
77:24:75:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:55 2026 by rpki-client