Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: uzdsE5ZUCXfGgtdL3EujZtrA0jIGpu8LtPeCu0He7NM=
Subject key identifier: 38:A0:A9:40:52:F9:F0:E0:94:31:38:04:65:0A:E7:F5:F7:26:9B:A8
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 019F86B1E9DA8FAF40E8E5002D942878F83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 19C4
Signing time: Tue 21 Jul 2026 22:00:34 +0000
Manifest this update: Tue 21 Jul 2026 22:00:34 +0000
Manifest next update: Wed 22 Jul 2026 22:00:34 +0000
Files and hashes: 1: Dbjfk_x94XkWbUqrQRgXiB2IZmc.roa (hash: K3KjeMVe4MzmZ6PY7GfHmSzcgyG6kpzevKCxHtsqWyY=)
2: TQnSP-doaEZ3QwoQxZQkKdn_Zm8.roa (hash: tNscAkBZYAiTq3QBweAAt6lTq4JqIfcKk5dVMuydvOY=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: MyN2RmlI4OCiNHxFoyVnAlFgeAdKCtmuV0jMVEpu8CA=)
4: hPluaz2ce72z5Cezy2XMePaJEmA.roa (hash: l8ELIU5y8+HQtxJL1W6JSqmakct+AgSg22KUXwRKNOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b1:e9:da:8f:af:40:e8:e5:00:2d:94:28:78:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Jul 21 22:00:34 2026 GMT
Not After : Jul 22 22:00:34 2026 GMT
Subject: CN=38a0a94052f9f0e094313804650ae7f5f7269ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:06:a5:c2:0e:05:7a:08:db:5a:6c:ea:ee:
ff:a3:13:b8:08:4c:de:ff:41:09:dd:9b:ec:a2:1a:
f0:c1:a4:06:2a:f4:36:0c:57:f3:6e:33:49:51:6c:
d5:05:25:8f:ac:f4:0d:5f:f8:53:27:18:e7:1d:d5:
c1:d6:5e:b7:46:be:64:8d:f3:0a:80:b3:ec:fd:60:
cb:40:c0:cf:19:7a:56:38:8b:a3:30:53:ad:16:4f:
f6:cd:0d:e0:4c:13:61:e8:06:47:88:5a:08:82:49:
8b:04:a8:55:cb:fd:ca:d2:4e:4e:01:b1:d5:61:77:
e0:fd:8e:1f:b3:64:de:f9:cc:29:7a:14:3e:f9:e2:
0f:e3:79:ac:4d:9b:8e:72:19:d8:9d:b4:0f:ad:ee:
5c:b6:94:ac:4f:ca:e9:fe:a2:26:9d:9f:d3:4e:d4:
56:aa:71:34:94:b3:9c:0d:ba:70:05:a7:1a:46:c2:
f6:94:2b:71:5b:fb:82:1e:df:02:8a:1d:35:1d:f3:
7f:64:45:4f:f5:81:06:19:24:41:f9:2f:98:59:7a:
e4:bd:56:61:9b:db:d3:0f:84:ca:3b:c0:43:68:da:
f8:f1:28:37:8c:57:04:8d:51:21:fe:f6:2c:f6:6a:
6d:da:c2:66:02:cd:52:9b:93:d0:ef:28:98:99:fd:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:A9:40:52:F9:F0:E0:94:31:38:04:65:0A:E7:F5:F7:26:9B:A8
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:65:e0:b2:ba:c3:e6:43:3a:71:de:60:50:fb:3b:e9:60:5c:
db:80:5c:ad:95:85:c9:a6:65:4e:75:fd:c7:6d:5b:e7:1c:8f:
21:ae:23:83:d7:d9:19:06:db:3c:b8:64:67:ad:07:65:f8:dc:
dc:a9:9c:77:03:01:c3:7e:d9:12:81:d3:06:58:cf:d6:ab:69:
3b:50:ac:d8:4d:08:92:f9:97:c7:0a:1a:53:7b:03:d7:71:46:
9e:a0:a0:9d:58:36:a7:89:2c:07:92:39:78:3a:bc:be:24:09:
9d:5b:9d:0b:2a:a7:f0:c8:8f:ca:df:7e:ba:f2:2a:3f:ce:99:
04:dd:66:52:88:75:37:8b:14:11:99:36:65:76:38:dc:42:88:
4d:91:fb:97:92:28:1b:fc:dc:4a:df:da:51:c7:4d:80:59:0d:
63:e3:6a:7d:7a:6e:a7:fe:71:a8:bf:5f:e7:e0:7b:b4:e2:f4:
86:ad:d8:ce:52:9e:7d:7e:42:9c:2e:81:57:a8:52:21:d2:02:
0d:8b:23:97:07:c0:d0:1d:d9:cd:68:14:2b:79:e3:d0:b6:2a:
e1:51:b4:fe:c2:7e:e6:53:32:74:30:cd:60:3a:e6:2c:d6:5b:
51:eb:ba:26:40:e7:49:a1:33:51:ca:8e:4f:43:10:f3:ff:83:
6a:81:83:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:08:25 2026 by rpki-client