Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: ikNYSRlRaQfM1iKNfCobzSdYdpwb7MpxV/k0UDKM+q0=
Subject key identifier: B5:A9:54:90:AF:98:7A:6B:4F:0C:C0:AD:DA:5D:D8:AE:F7:23:E8:9C
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 019FA1BBFA26508D13807CAAD225A3713918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 04:01:18 +0000
Manifest this update: Mon 27 Jul 2026 04:01:18 +0000
Manifest next update: Tue 28 Jul 2026 04:01:18 +0000
Files and hashes: 1: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: m6PWTxp/U9AyiCMj82fi4LpIPILTX0+NcbPM8YY0T0U=)
2: heDWIjAtV4Dfu6bhg1J9nZcl5qo.roa (hash: zW/+lZ7RfSWqiEzqmlzW/11hnbmw6v/qc+vi/mY5ysc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:fa:26:50:8d:13:80:7c:aa:d2:25:a3:71:39:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Jul 27 04:01:18 2026 GMT
Not After : Jul 28 04:01:18 2026 GMT
Subject: CN=b5a95490af987a6b4f0cc0adda5dd8aef723e89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:c7:cc:cd:75:ad:1e:1c:37:dd:4f:01:a0:
2a:f5:01:5e:18:ad:1a:90:84:4e:75:3f:b6:08:a6:
9a:32:e1:86:87:39:dc:6e:b5:55:d7:70:f3:19:fc:
69:63:b1:8e:3b:ca:b7:74:30:fd:c8:98:df:ac:39:
77:28:78:f6:06:34:d2:34:94:15:82:34:d3:ee:95:
86:aa:74:f0:68:52:d5:51:b0:a1:01:16:9a:09:63:
fb:c1:27:b3:51:a8:68:7b:e7:27:eb:1b:f3:61:f3:
e8:5e:8d:52:f8:53:9c:3b:ea:bd:51:33:82:9e:14:
88:df:fa:3a:c0:9e:59:0c:96:5a:07:46:6c:e9:52:
ef:e3:0c:c9:b6:bc:0f:55:79:ca:e7:d6:b5:56:af:
33:40:43:09:31:28:c6:70:7c:e8:35:0f:c5:8e:af:
26:92:89:7b:23:ff:d4:a5:ee:78:34:90:ef:b0:a2:
da:85:bb:5f:b2:d9:ef:a7:2d:13:87:a9:01:dd:ed:
8f:8f:c1:d4:9f:21:b0:ee:b3:1f:45:8b:65:4d:4b:
37:26:c1:0e:42:aa:eb:3d:01:a4:ec:ab:90:b4:10:
d9:a8:98:52:dd:57:8d:5b:18:a6:aa:e8:07:94:bc:
7d:2f:f0:01:0f:07:9a:95:67:c0:96:01:28:7c:a8:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:54:90:AF:98:7A:6B:4F:0C:C0:AD:DA:5D:D8:AE:F7:23:E8:9C
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6a:9f:63:60:24:c5:ec:2e:64:ff:b8:4e:b6:49:59:e9:af:
33:a5:85:5e:31:86:19:63:0c:b0:1c:a8:72:36:78:36:44:ce:
90:15:b2:10:89:84:94:33:5a:4a:cc:f8:b4:43:df:0b:78:fb:
ff:7e:23:39:82:0e:d0:17:5a:34:3d:b2:ef:12:a7:e0:31:e6:
88:90:83:0d:ae:ab:a1:f0:05:6e:a9:d9:a9:df:c6:28:d7:cc:
e4:32:10:0d:70:b7:ab:e3:8e:0e:ed:ed:9b:51:7d:81:71:bf:
5d:52:48:cd:f1:22:13:bf:9b:15:22:ce:91:69:4a:93:0f:f5:
35:06:bc:8e:eb:33:f4:6f:2b:cc:00:f7:0a:72:1d:bc:95:2f:
9f:1d:e6:f0:d1:6f:20:34:08:7f:52:f7:7a:60:64:6b:16:6a:
08:f2:44:8e:8f:10:e4:af:9b:ff:93:3e:d5:3f:33:a8:32:c6:
dc:c4:3c:df:2a:de:d8:18:25:fd:7e:b9:38:0e:1b:df:6a:d8:
94:3f:97:35:9e:a7:af:33:48:f6:c3:45:48:6b:1f:0c:ee:9b:
8a:35:99:ff:92:fa:5e:2b:5c:6a:57:43:86:fd:60:6c:39:7b:
65:ab:fd:5d:a2:5f:3e:9b:8d:b0:f1:fd:e9:a8:b7:f1:ac:cf:
47:1b:03:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:07 2026 by rpki-client