Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
File: hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft (raw, json)
Hash identifier: AfrVZtpQPM+fTO1paryMav/fIUKq99af/eEVJ9GDNw8=
Subject key identifier: 95:57:04:14:55:71:B0:7B:A1:39:F7:F1:E9:E7:46:EF:22:79:56:BA
Authority key identifier: 86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
Certificate issuer: /CN=863841506d026131965057409a1604a5671f0541
Certificate serial: 019FA3A9E3B06D3DB25B9C47438A352AC9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
Manifest number: 0798
Signing time: Mon 27 Jul 2026 13:00:47 +0000
Manifest this update: Mon 27 Jul 2026 13:00:47 +0000
Manifest next update: Tue 28 Jul 2026 13:00:47 +0000
Files and hashes: 1: A_-FW985zbY15HsoQHY3jzaLsqE.roa (hash: eSJY0BewKa72GIdMnrs7+2x+KiKuirCjSmv68OLB6u4=)
2: hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl (hash: h4ibGnM2qPeg8pyiUwgKIgE38nxWAsRF7aw+i1mygIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:e3:b0:6d:3d:b2:5b:9c:47:43:8a:35:2a:c9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863841506d026131965057409a1604a5671f0541
Validity
Not Before: Jul 27 13:00:47 2026 GMT
Not After : Jul 28 13:00:47 2026 GMT
Subject: CN=955704145571b07ba139f7f1e9e746ef227956ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:97:79:a3:01:90:b7:73:67:03:ec:3c:56:
74:97:2b:ff:e9:35:22:36:46:35:14:f9:14:ae:33:
b6:70:a7:ee:d0:93:73:ae:73:cc:71:70:22:10:90:
0d:19:97:3b:ba:38:1a:e1:4b:3f:11:92:29:d7:e2:
e7:34:4b:c8:e2:9d:94:4d:07:28:40:3c:5f:38:be:
8e:ab:21:b6:c9:88:c2:86:6e:00:df:26:e6:22:25:
66:3e:fe:3a:62:79:12:dc:5b:c1:0a:d2:bd:59:7b:
9b:19:46:ed:6d:c6:bf:5d:87:56:15:7e:c6:cd:e2:
3c:4f:a4:8b:5e:20:6e:ed:b2:46:eb:93:a7:36:85:
67:14:9a:82:f6:97:cd:c8:e9:03:a3:58:d9:8b:52:
8c:a4:27:c2:fb:2f:b3:d9:ff:8f:3b:4b:38:13:a3:
e1:52:bc:82:46:f6:7d:e5:d1:d8:f4:50:36:9e:b7:
d3:2e:d7:12:b9:66:17:ef:1a:03:b9:da:aa:fc:5b:
b9:ba:06:9b:36:1b:b3:ce:ae:c3:9d:30:cf:be:2f:
8b:b8:2f:03:41:e7:c0:78:39:5b:c0:b9:5a:33:bb:
aa:83:34:fb:9d:1d:aa:17:df:51:d9:a1:37:14:0f:
71:3c:d8:52:06:ec:50:4e:4f:38:25:fa:3d:a9:26:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:04:14:55:71:B0:7B:A1:39:F7:F1:E9:E7:46:EF:22:79:56:BA
X509v3 Authority Key Identifier:
keyid:86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:43:ce:61:7c:4e:ce:68:36:2a:fc:1c:f4:f9:e8:6b:75:4f:
55:ff:96:00:42:9b:c5:93:6d:6d:85:28:50:6f:cd:c8:84:27:
c4:18:de:f7:fd:ba:ad:90:fe:53:7b:22:be:aa:4c:e3:9c:5b:
7a:df:d4:6a:57:a1:5d:a6:9f:ba:ed:0c:bb:fa:9c:a8:eb:53:
d0:15:0e:0e:1e:68:4b:a8:2a:ea:95:b1:49:84:10:6c:fc:02:
46:ce:0b:71:1e:c6:1c:61:58:95:27:cd:8d:2d:16:43:18:71:
8a:54:16:72:f6:9d:0c:11:ba:73:05:e7:4c:02:32:29:e7:86:
71:c2:cf:e0:1d:40:67:10:97:5e:56:98:d6:f7:34:e7:26:58:
ff:2c:fe:14:28:a0:f6:22:8a:f1:76:44:0e:aa:0f:72:a5:5c:
7d:61:0c:88:ee:b5:62:19:6a:69:b2:2b:63:88:64:d1:0f:a1:
ce:4f:83:50:ba:f3:91:58:63:65:ae:11:17:74:32:5c:fe:3b:
61:db:76:a7:0e:d4:06:14:44:38:5e:ee:48:14:c2:af:48:56:
f3:22:36:37:bb:0e:cb:24:14:4d:80:87:4b:4a:5e:75:77:10:
ad:6e:5c:68:29:0b:02:df:ba:53:80:0d:f9:b6:f9:61:15:70:
90:de:4d:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jqeOwbT2yW5xHQ4o1KsmsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Mzg0MTUwNmQwMjYxMzE5NjUwNTc0MDlhMTYwNGE1Njcx
ZjA1NDEwHhcNMjYwNzI3MTMwMDQ3WhcNMjYwNzI4MTMwMDQ3WjAzMTEwLwYDVQQD
Eyg5NTU3MDQxNDU1NzFiMDdiYTEzOWY3ZjFlOWU3NDZlZjIyNzk1NmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RuXeaMBkLdzZwPsPFZ0lyv/6TUi
NkY1FPkUrjO2cKfu0JNzrnPMcXAiEJANGZc7ujga4Us/EZIp1+LnNEvI4p2UTQco
QDxfOL6OqyG2yYjChm4A3ybmIiVmPv46YnkS3FvBCtK9WXubGUbtbca/XYdWFX7G
zeI8T6SLXiBu7bJG65OnNoVnFJqC9pfNyOkDo1jZi1KMpCfC+y+z2f+PO0s4E6Ph
UryCRvZ95dHY9FA2nrfTLtcSuWYX7xoDudqq/Fu5ugabNhuzzq7DnTDPvi+LuC8D
QefAeDlbwLlaM7uqgzT7nR2qF99R2aE3FA9xPNhSBuxQTk84Jfo9qSY32wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVXBBRVcbB7oTn38ennRu8ieVa6MB8GA1UdIwQY
MBaAFIY4QVBtAmExllBXQJoWBKVnHwVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2Mt
M2JmYTA1MDkyMDFmLzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xZjE1NjMtYjMzMS00M2E5LWI5Y2MtM2JmYTA1MDkyMDFm
LzEvaGpoQlVHMENZVEdXVUZkQW1oWUVwV2NmQlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUPOYXxO
zmg2Kvwc9Pnoa3VPVf+WAEKbxZNtbYUoUG/NyIQnxBje9/26rZD+U3sivqpM45xb
et/UalehXaafuu0Mu/qcqOtT0BUODh5oS6gq6pWxSYQQbPwCRs4LcR7GHGFYlSfN
jS0WQxhxilQWcvadDBG6cwXnTAIyKeeGccLP4B1AZxCXXlaY1vc05yZY/yz+FCig
9iKK8XZEDqoPcqVcfWEMiO61YhlqabIrY4hk0Q+hzk+DULrzkVhjZa4RF3QyXP47
Ydt2pw7UBhREOF7uSBTCr0hW8yI2N7sOyyQUTYCHS0pedXcQrW5caCkLAt+6U4AN
+bb5YRVwkN5N6g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:18:30 2026 by rpki-client