Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: manvIMtC0BPI6Lfapg8WfirieEV/KnYQion1S1t1taY=
Subject key identifier: 77:44:D8:14:0C:23:AF:F7:23:9C:39:64:39:AC:A0:72:C5:0E:D3:DB
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 019F859F8A1F5B362707CB6753D2B4440ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 02FB
Signing time: Tue 21 Jul 2026 17:00:53 +0000
Manifest this update: Tue 21 Jul 2026 17:00:53 +0000
Manifest next update: Wed 22 Jul 2026 17:00:53 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: 9vHvw5tEbs8o8/0MHkcSgSh6/EsAfQ3CSq7/wTbwQsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:8a:1f:5b:36:27:07:cb:67:53:d2:b4:44:0a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Jul 21 17:00:53 2026 GMT
Not After : Jul 22 17:00:53 2026 GMT
Subject: CN=7744d8140c23aff7239c396439aca072c50ed3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:1f:77:43:5d:22:9e:7a:f9:e8:eb:4a:2b:
ea:26:3d:be:79:fc:d6:77:67:27:69:7f:0b:00:cd:
e9:0e:3b:4e:a5:59:fd:0c:fe:92:a1:81:a7:ed:fb:
8e:c4:f3:54:c7:ee:06:88:b7:80:35:2e:be:b9:1a:
76:9f:a9:52:29:26:fe:fe:91:f0:52:ed:b9:3a:f5:
9c:5d:4d:f6:b7:37:e7:a6:19:06:ba:8c:0c:c2:94:
f5:14:96:96:31:99:f2:38:d4:37:a7:4b:b5:e7:04:
d3:d7:17:a4:4a:3b:7a:f1:94:99:b9:39:4b:f6:45:
35:f4:f0:f3:e8:d1:dc:72:4e:90:2c:25:1d:24:ad:
f5:09:52:5d:25:0b:18:23:24:36:a0:51:f3:0c:01:
05:98:25:9b:f3:94:8b:f7:ac:3e:ba:85:7b:f8:d1:
d4:f9:28:59:7c:0a:46:a4:dd:34:39:e7:01:ee:4c:
cb:6f:be:29:69:74:6e:50:cd:9a:db:78:31:20:50:
f5:99:66:02:9d:1b:40:5a:b1:93:fd:4b:87:0a:74:
b3:d6:65:83:ff:bb:16:8d:0f:85:92:7b:4e:d9:a0:
1a:2f:75:63:2a:d6:a2:a5:a4:27:18:f2:ff:1b:1b:
f4:bd:e2:d0:8f:89:59:47:06:92:23:64:f5:09:32:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:44:D8:14:0C:23:AF:F7:23:9C:39:64:39:AC:A0:72:C5:0E:D3:DB
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c6:19:89:8d:a9:d2:db:f3:fa:58:3a:39:f9:4c:b1:db:16:
f8:c2:d8:f9:db:e5:cc:99:66:29:79:f9:6a:05:21:19:6f:e7:
7b:2e:14:97:b9:05:ba:b2:a1:9b:88:c7:ba:cb:37:a0:8e:e9:
cd:ad:bc:d6:58:64:3e:37:5d:68:3e:8a:d4:ef:5d:db:76:2d:
d5:ab:15:dd:0d:7e:8a:46:b4:35:f3:93:08:66:ae:72:e6:f2:
24:b9:bc:6d:bb:bf:83:19:63:ee:6e:27:d9:de:84:b7:55:e8:
f5:d6:f0:44:38:40:a3:4c:b7:8a:f6:fc:d6:a7:e6:62:77:7f:
3f:43:71:00:1b:a0:e0:a0:68:a2:c5:f8:95:62:88:6e:ef:30:
03:88:18:24:34:26:b8:8c:b8:f4:2a:91:82:d5:e0:4a:fb:42:
41:6e:66:1b:86:7e:5e:4a:a5:4e:84:ad:63:b9:f3:bd:7a:cd:
ab:ce:08:21:a1:2d:16:e1:69:8e:47:33:fe:1c:88:1a:e4:f1:
b3:4e:30:ca:11:86:84:61:e2:b4:c3:44:e5:73:0a:5b:2b:b7:
cd:e0:b2:6e:d3:9c:80:6f:14:62:c0:fc:2e:dd:c1:83:5b:25:
82:27:5c:d7:2f:99:65:1c:f9:fc:3e:8e:53:29:11:ab:da:a8:
74:cd:85:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:42:11 2026 by rpki-client