Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: ++6WLUm2oSUJQvg0k+/tYNu7VmlPT3BnVv2aFS/YxBg=
Subject key identifier: B6:4D:F8:32:20:89:EC:4A:DC:15:30:5B:B6:35:A3:71:21:E1:64:B8
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 019FA0DF84C9D26506B99566AB94F18110CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 12DB
Signing time: Mon 27 Jul 2026 00:00:30 +0000
Manifest this update: Mon 27 Jul 2026 00:00:30 +0000
Manifest next update: Tue 28 Jul 2026 00:00:30 +0000
Files and hashes: 1: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (hash: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q=)
2: KhePy2KSChqSTO56xjFNB88Adhw.roa (hash: jSbx1Mp1yMnht16w7llcf9K2ZLPdIRkxkGJ6/eCHfII=)
3: Z-DKyWN4NlE9Oe6WxuczFCionOA.roa (hash: DCMKgnjrJbcUZjEDqwNnXXjpRG/93HbByWia9wwVNVM=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: ysaXo1ZuHqpejVBCHUx8AWBYvt8RcGo66u9lYkIc7yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:84:c9:d2:65:06:b9:95:66:ab:94:f1:81:10:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jul 27 00:00:30 2026 GMT
Not After : Jul 28 00:00:30 2026 GMT
Subject: CN=b64df8322089ec4adc15305bb635a37121e164b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:79:3a:61:9f:d7:52:3e:50:f3:5c:c4:89:
33:7a:a0:11:f9:e4:50:48:b1:b9:8f:41:66:21:f5:
de:d5:ec:dc:c2:67:c6:bf:62:a9:fa:e2:df:ec:be:
4f:d4:32:2b:a3:ad:f1:a4:3f:10:45:5b:2d:fa:7d:
e7:bd:a8:34:f4:ee:b3:f0:c3:d3:4b:7a:53:81:de:
30:0c:6b:6a:25:86:7a:f9:93:a9:ec:d7:38:70:8f:
c2:99:0f:4a:63:ec:7f:61:4e:13:26:32:a7:56:9c:
19:5e:34:0c:8b:49:7e:7a:cb:c2:41:e0:55:a6:32:
06:ae:dd:3a:93:8f:25:e8:19:0a:d9:42:67:db:d2:
9c:9a:7c:e9:5a:42:96:d5:60:83:c7:e6:97:3e:c5:
74:08:4e:6b:ff:6b:9b:7d:76:9a:9b:3c:18:c9:11:
34:3b:83:4d:ea:b3:18:17:e0:bb:41:fb:b0:69:de:
88:41:7b:1f:63:2c:a5:d2:fd:cd:b6:d6:33:fd:21:
46:c0:17:98:a4:29:98:47:70:45:6e:a3:c6:93:a3:
92:0e:62:8c:8d:8c:c0:d5:ef:dd:76:85:04:15:66:
60:4e:87:88:5f:c0:9e:34:43:dd:63:53:a8:8d:a9:
10:d3:a6:f6:2b:e9:30:1c:b9:3d:d7:50:da:01:9c:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:F8:32:20:89:EC:4A:DC:15:30:5B:B6:35:A3:71:21:E1:64:B8
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:5e:bc:63:4e:e7:90:28:77:f6:51:90:5b:9c:36:cc:70:a6:
2c:90:66:63:d4:15:ab:4a:63:96:e7:13:c9:e5:38:25:c7:d4:
9c:19:b4:de:b5:0d:af:2d:91:3a:fc:19:02:4f:f4:4e:33:9a:
68:eb:c2:39:79:de:4e:a2:2d:5d:06:1a:2d:81:c8:c2:23:4e:
32:e5:b1:e8:c2:21:3d:d6:45:a9:87:e4:9c:96:51:03:f7:4a:
5f:c9:25:25:91:ac:46:72:3b:cf:56:e6:c9:f9:b4:4a:03:28:
74:7c:79:3f:9e:07:47:e5:bd:cd:f6:3b:41:90:cf:84:16:45:
52:35:ac:40:64:48:3b:ba:7f:0c:f4:40:35:fb:a9:6e:3a:48:
fd:77:1d:f3:de:74:b1:90:1c:ca:5d:50:e8:37:3e:e1:41:a0:
8c:6b:19:fc:26:cc:45:31:7f:bd:f3:79:80:06:a3:e9:30:8c:
8d:68:35:4b:3b:20:76:4f:4d:0d:81:fc:a7:0e:1f:86:e3:1b:
11:5c:d3:7e:c1:dc:e9:ee:43:90:52:53:0e:c3:e0:de:48:3c:
b2:08:70:58:da:3b:23:28:f6:1e:80:67:dc:dc:4e:d1:db:02:
b3:b2:0a:ce:90:13:b8:39:8d:30:d6:64:b7:73:50:e4:fd:e3:
2d:51:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:54 2026 by rpki-client