Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
File: hB_ManHx4Ri9ybHAa8yAEb09ML0.mft (raw, json)
Hash identifier: DSuB7ZKONR2iK5g5nZiCUJslViqdTV09Y2WLVMBB/ZU=
Subject key identifier: 32:4A:DB:98:D6:A6:D1:D1:F8:4F:A2:B4:DE:EF:63:80:08:53:17:02
Authority key identifier: 84:1F:CC:6A:71:F1:E1:18:BD:C9:B1:C0:6B:CC:80:11:BD:3D:30:BD
Certificate issuer: /CN=841fcc6a71f1e118bdc9b1c06bcc8011bd3d30bd
Certificate serial: 019FAA8774413DA57C2C24D657620A1C3B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:31 +0000
Manifest this update: Tue 28 Jul 2026 21:00:31 +0000
Manifest next update: Wed 29 Jul 2026 21:00:31 +0000
Files and hashes: 1: 7wuJBsTlCvMrXFT2hL5huDS2k5I.roa (hash: ORzrQnvsufAfber3BkyjXEBdXtY1ExPpP1tmxd/MKAI=)
2: hB_ManHx4Ri9ybHAa8yAEb09ML0.crl (hash: BHp8PR8eXATcOVxx+ozpJeNI2t7I1kpxIdExFPF1/ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:74:41:3d:a5:7c:2c:24:d6:57:62:0a:1c:3b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841fcc6a71f1e118bdc9b1c06bcc8011bd3d30bd
Validity
Not Before: Jul 28 21:00:31 2026 GMT
Not After : Jul 29 21:00:31 2026 GMT
Subject: CN=324adb98d6a6d1d1f84fa2b4deef638008531702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ea:9e:9e:3a:e7:9a:af:43:b8:0f:46:7a:21:
d2:a2:4f:a4:dc:4d:49:c0:44:38:94:3f:44:60:1b:
a9:a1:da:69:00:58:5e:5f:5d:c2:e4:c1:a7:c5:d9:
73:6e:fe:2e:3f:32:ba:76:2e:5e:59:e3:a7:eb:34:
48:92:98:d1:fc:45:0e:c5:3b:f3:91:3d:c6:e5:0a:
90:87:a2:6d:06:28:fc:1d:36:cf:2c:85:d4:41:e1:
55:2b:ee:6c:98:13:60:f8:89:b1:bb:2c:94:82:1f:
27:47:30:2f:7f:a1:32:99:05:d9:b1:8d:09:ae:cf:
06:bd:2d:bd:38:9a:1d:d6:67:6c:9f:7b:2e:d1:03:
db:6b:24:77:47:4e:3e:1c:70:27:20:34:b4:a8:99:
fd:6c:cd:99:d7:00:dc:2b:ea:d1:96:0f:4d:c1:d8:
df:78:cb:d9:7c:1b:66:10:57:37:fa:1a:84:5f:fb:
48:70:72:9a:a7:e1:f6:1c:79:c1:82:88:f6:79:8c:
88:76:5b:a4:89:90:f5:10:3d:bb:c2:f1:14:e3:0e:
f9:4c:80:9f:02:45:9b:9e:77:3d:90:86:26:fd:57:
78:fe:13:fb:c0:9e:3d:17:20:e1:af:16:9e:11:c0:
98:b6:a8:90:ae:fd:78:ab:ae:64:98:7c:6c:d5:54:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4A:DB:98:D6:A6:D1:D1:F8:4F:A2:B4:DE:EF:63:80:08:53:17:02
X509v3 Authority Key Identifier:
keyid:84:1F:CC:6A:71:F1:E1:18:BD:C9:B1:C0:6B:CC:80:11:BD:3D:30:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c9:07:57:a5:59:a0:94:76:37:55:36:1e:cd:79:8d:e3:74:
bd:fc:cf:be:92:91:44:ee:f1:dd:0b:62:fa:81:79:13:b2:79:
dd:ec:70:f8:7d:65:34:16:93:96:3d:55:75:33:ee:d2:10:3b:
c5:5e:0a:ca:a8:6a:24:21:78:21:93:fb:e7:8d:3b:30:43:db:
e2:1f:49:a0:ce:b9:17:61:f2:f4:ed:ef:7e:b3:ad:b9:5a:97:
7c:54:56:9f:28:37:6f:71:72:90:d7:c5:45:7d:b2:f1:79:2c:
e6:b4:dc:03:1d:7b:89:bd:aa:2d:19:5c:4e:bb:64:71:c2:bf:
b1:b3:bc:9d:47:6f:92:60:2f:b1:b6:82:5e:e7:04:16:4d:cc:
b3:15:41:8e:b5:8e:8f:a3:77:c6:01:18:44:1e:28:cf:13:58:
07:c1:3c:e3:97:8d:3c:3d:a1:9c:26:00:81:f9:0e:1c:3b:51:
87:95:13:2d:66:9f:aa:2d:8f:11:47:bf:9f:55:b0:5d:9e:01:
5b:bb:35:0e:71:40:02:ed:b7:34:29:c9:5d:93:ad:7b:09:69:
5f:90:b3:da:d5:95:2e:f0:8f:27:b5:37:16:42:47:4c:21:c1:
21:7f:2f:5c:cc:d7:6e:fe:6c:7e:a0:ba:c0:b6:26:e8:48:28:
4b:f0:81:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:02 2026 by rpki-client