Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: itrGqbYafsTLT3ZKQCeIDpYoYFpPQDPjtI+mBmfdztU=
Subject key identifier: 0D:25:B8:4B:17:C9:0B:DF:4A:F0:A6:69:35:D2:7A:15:FB:CA:7E:45
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 01A00281D8D1CBD1167008E30C4B1853E508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1695
Signing time: Fri 14 Aug 2026 23:00:59 +0000
Manifest this update: Fri 14 Aug 2026 23:00:59 +0000
Manifest next update: Sat 15 Aug 2026 23:00:59 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: J0yNCziocPZXbqRyl2Ok9pM7JRMmgxEDHrJklVMF7Ac=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:d8:d1:cb:d1:16:70:08:e3:0c:4b:18:53:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Aug 14 23:00:59 2026 GMT
Not After : Aug 15 23:00:59 2026 GMT
Subject: CN=0d25b84b17c90bdf4af0a66935d27a15fbca7e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:7d:21:93:fd:38:03:df:f8:50:08:18:83:
f2:ed:c0:cf:e9:0f:4b:6c:fd:70:0b:50:99:10:57:
66:8f:a5:da:52:f7:cb:fd:8a:0d:f5:40:80:d9:bb:
b5:a2:a5:d5:f4:77:f8:a6:f2:1a:f2:82:e0:2d:4b:
9d:ff:c1:53:04:2b:12:75:64:79:7e:73:d8:15:4b:
36:eb:a7:b5:f2:5d:e9:bf:27:16:cb:8f:b5:14:d1:
76:a7:9a:ac:2d:6e:0b:13:21:cb:1e:42:d5:75:0c:
01:8a:03:25:b0:e5:1f:0f:c5:1c:34:84:8c:83:46:
8b:90:d1:bd:d7:a3:69:29:f4:3f:0d:43:3e:35:bf:
92:b4:e4:93:f3:0f:98:5a:22:43:7f:53:52:8b:e3:
0d:8f:92:bf:52:46:62:5f:01:8f:6e:84:12:a0:16:
55:91:35:f0:d9:cf:db:7d:b5:e0:f5:20:36:a3:38:
81:94:52:59:a4:bf:03:df:c7:fb:c2:1e:25:cc:0a:
21:21:17:7f:3f:d1:a9:92:07:70:ea:6b:c4:85:16:
9f:db:df:53:7b:3f:4c:be:7f:86:7d:aa:23:53:ea:
0a:f6:70:e6:37:0c:de:f0:3c:47:1f:64:78:df:85:
a4:06:00:c8:7a:ba:d2:5b:8c:dc:6b:fe:20:02:db:
50:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:B8:4B:17:C9:0B:DF:4A:F0:A6:69:35:D2:7A:15:FB:CA:7E:45
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4c:3a:0a:22:d6:d6:5d:d6:48:46:ac:f8:a2:47:30:79:ae:
d3:98:f1:44:14:45:ff:1c:5d:ab:a5:af:31:ca:16:f2:29:b7:
a8:2c:87:ac:01:82:5c:33:fa:b9:d4:cd:b2:36:62:96:7e:1c:
36:1f:b4:84:1e:04:f9:0f:a2:02:a4:b9:2f:e5:c2:13:b2:43:
6c:ab:08:27:cd:fe:5e:9a:8e:15:65:e1:cd:62:f7:53:81:56:
b2:26:80:af:8a:70:2c:9e:2c:cd:61:79:b9:ba:a4:90:03:9a:
b7:f7:20:2c:91:65:76:f9:df:d0:66:37:e3:c4:7b:b2:17:67:
7f:22:b6:71:4c:b4:2a:10:5d:7a:81:aa:6b:ba:33:27:ef:16:
44:95:d0:6e:c6:36:a1:e5:94:3b:4a:64:4d:1b:69:4f:01:b5:
cf:13:45:38:1a:1d:6f:0e:c2:e6:9c:cf:85:e6:a8:e1:e6:d2:
61:3c:85:1a:25:fd:5f:78:5a:79:fb:5e:32:0a:63:12:58:d6:
72:8f:3b:7e:a4:d4:f8:5a:29:01:1b:8e:1c:23:88:01:76:6c:
64:22:1c:1a:16:78:72:4d:b1:ce:c8:87:6b:04:65:41:f6:46:
66:6c:72:04:0e:d6:8b:bd:34:29:ed:b8:7b:68:47:4f:2b:79:
2d:81:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:10 2026 by rpki-client