Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: QSDsCz+N5is2XXjXk6MPxqcUwPaZ+WdE32pjTBWeSj4=
Subject key identifier: FB:5E:87:6F:0D:66:F9:42:F8:F8:64:FF:29:12:46:DF:CA:97:93:93
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 019FA9756C4A3BD549463BBDFAC37E3179E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 1335
Signing time: Tue 28 Jul 2026 16:01:12 +0000
Manifest this update: Tue 28 Jul 2026 16:01:12 +0000
Manifest next update: Wed 29 Jul 2026 16:01:12 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: /HTAdLWdrNBsNblpcXORaBPIW3zeYB119VhpjK1My4I=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:6c:4a:3b:d5:49:46:3b:bd:fa:c3:7e:31:79:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Jul 28 16:01:12 2026 GMT
Not After : Jul 29 16:01:12 2026 GMT
Subject: CN=fb5e876f0d66f942f8f864ff291246dfca979393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:cc:7a:0d:95:b8:cb:48:9e:d9:f4:80:2a:
82:29:c6:d5:ca:7f:a7:91:1e:16:b8:49:a3:9a:04:
b3:42:67:07:20:03:c0:ef:fb:4d:e5:17:eb:97:42:
78:7e:fe:1a:1f:30:2d:f0:c2:53:b7:01:dd:ee:86:
be:52:73:51:86:20:ee:80:f9:f4:2a:de:cf:10:c4:
a5:20:c5:f4:b4:3b:b1:89:cb:c6:e8:1e:00:67:b5:
02:af:82:cd:58:ee:f9:11:f2:b8:dc:6b:a2:85:34:
4e:d6:38:08:58:55:2e:ca:b9:12:f3:89:69:77:5a:
38:ce:13:e5:c2:7f:60:3d:ee:e6:fc:3c:e6:bb:8d:
04:ae:91:13:d4:d9:86:ac:f0:88:03:52:cd:92:02:
3b:6d:24:91:45:f3:65:3c:0f:0e:1d:42:ed:50:82:
10:18:f0:11:f1:a4:c9:75:d9:f7:83:7f:80:b4:a9:
71:27:51:b2:ed:2d:c0:79:41:8d:af:c1:4f:00:8c:
4c:e5:e1:6c:5e:84:d4:2f:2d:e5:83:65:5e:23:a9:
fb:b8:76:fa:6f:2f:c1:13:26:92:c1:03:d6:ae:ab:
9c:a9:c4:78:ee:d2:f4:c5:21:5d:0c:4f:eb:34:32:
17:d8:f7:8e:6f:d5:c3:d9:a6:a5:67:29:64:42:96:
3a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5E:87:6F:0D:66:F9:42:F8:F8:64:FF:29:12:46:DF:CA:97:93:93
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b8:77:13:4d:03:5d:6d:f9:f8:cd:df:e2:e1:a3:2f:dd:af:
8c:2d:61:7b:42:34:c6:93:1b:3b:56:63:65:3d:9a:b4:a1:02:
d4:a8:99:a5:b5:d8:c3:fd:f7:8d:09:1a:d4:74:ed:03:b0:f0:
9d:b6:fb:79:5b:7b:36:c1:11:02:9f:31:ec:9c:dd:75:ba:88:
a6:04:ff:48:67:57:6b:3c:c2:12:49:47:89:e4:d6:62:3e:ec:
dd:45:b4:a9:58:71:36:b8:1d:1d:f5:b1:8c:46:62:75:d9:cf:
f2:be:c3:6a:1e:c2:6e:26:97:b5:0c:aa:62:55:83:78:16:84:
55:fb:8a:4e:ea:c3:1f:ba:29:57:9b:4d:c6:1d:8e:44:ce:54:
83:4f:05:cc:87:19:44:b4:04:6b:e9:45:17:a4:f7:cf:b4:a1:
d0:25:cf:2d:23:a3:d2:0b:b9:c6:c5:dd:45:a2:46:d7:d4:e3:
23:79:b0:c1:54:33:2c:8d:95:44:47:f0:11:0c:f6:a8:01:57:
43:dc:2c:99:12:58:f1:cb:8f:d0:47:dc:aa:32:d6:e4:64:1b:
89:95:66:be:31:60:52:1e:fd:b3:5c:7d:f4:57:74:cc:56:db:
c0:a7:c9:1b:69:01:64:a9:f6:37:98:d9:51:fc:0f:e8:bd:f7:
03:48:a6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:07 2026 by rpki-client