Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: yxEHHHv4eM2Jls/6rj3KC4SssRqnkwQxkEqrGGb6ZbA=
Subject key identifier: 01:53:EE:9F:E8:4F:7D:25:88:4D:1E:ED:A6:81:B4:40:D2:C5:2A:F8
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019FAB99F2F02D849D5566E711E3B332C74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 168A
Signing time: Wed 29 Jul 2026 02:00:20 +0000
Manifest this update: Wed 29 Jul 2026 02:00:20 +0000
Manifest next update: Thu 30 Jul 2026 02:00:20 +0000
Files and hashes: 1: AskFBvRE4tY5tlit_Gy114m2J0A.roa (hash: J6ljvruIBCWnrpJURNZnlPx/uNcMw2gcnFDVYqRVqz0=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: PpdiLFVS96eO87fyyHSIw8rJABwEXMcoGl8xIsbZ/F4=)
3: mMleahkhBsxzGvTuhDg0yXEwF_w.roa (hash: qQecQrTvSIfunD3zEv/rPkBZ+0gt71EWgnmmdmDO4Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:f2:f0:2d:84:9d:55:66:e7:11:e3:b3:32:c7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Jul 29 02:00:20 2026 GMT
Not After : Jul 30 02:00:20 2026 GMT
Subject: CN=0153ee9fe84f7d25884d1eeda681b440d2c52af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:74:a8:41:aa:c2:2d:ce:e4:4c:f4:cd:25:a8:
94:23:fa:3f:a3:59:e1:f1:19:a5:fc:e0:0f:48:11:
5d:e5:57:76:2e:65:1d:db:2b:97:fc:be:6f:53:2b:
27:ab:66:12:be:0c:d6:2d:7f:21:c0:58:ed:4a:b7:
fa:13:af:5e:3b:be:8d:c3:e2:4f:c0:b4:d5:e1:f1:
b2:8b:6b:99:e9:7b:0c:e9:e2:15:e8:75:30:3b:4f:
ad:55:80:67:4b:c5:3d:bd:d0:70:90:9a:14:6e:59:
3a:be:dd:5a:d6:00:77:9b:f7:7c:1d:f9:d6:43:2f:
a4:ce:e6:fa:f8:cc:a2:71:14:f3:cd:b4:5f:68:20:
46:02:d7:68:a2:6d:17:c7:5f:84:d5:f6:11:a6:23:
b3:29:6d:54:8a:f6:6f:09:c1:6b:89:be:d8:92:da:
0d:6a:42:b4:61:5e:3a:79:6e:25:9e:34:54:6a:88:
4b:04:69:5f:93:f6:a2:e9:e8:13:37:44:71:55:67:
94:8b:4b:7d:ff:61:09:af:ee:5d:4d:10:e7:32:28:
a5:41:5f:b2:19:78:5c:65:65:6c:d9:15:34:3d:6d:
b6:9e:7f:39:af:90:da:b5:90:4d:4f:47:21:26:20:
f8:5b:60:42:5a:be:15:8d:f4:3a:25:6c:43:f2:2c:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:53:EE:9F:E8:4F:7D:25:88:4D:1E:ED:A6:81:B4:40:D2:C5:2A:F8
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:33:c5:45:76:c7:4d:28:4a:e7:cb:32:cd:1c:fc:60:54:b9:
f5:8b:36:79:59:ab:8a:ff:77:57:5e:df:c3:b3:cd:bd:55:9e:
f1:41:29:fa:5b:71:46:7f:90:67:e9:04:82:d6:88:91:98:ff:
e2:39:71:6b:7d:05:2c:44:b9:b4:cd:09:cb:22:a2:c4:7c:af:
ad:0d:41:19:78:07:4e:79:cf:2a:6c:59:70:7d:4e:4e:ab:2b:
f7:1d:ca:d8:16:4a:20:ed:d6:a3:25:c9:1b:c3:b3:4c:db:04:
27:77:2f:09:16:4d:fb:63:51:71:ea:95:27:0c:3b:dc:a7:d8:
ef:9a:cb:39:f4:fa:73:a1:3d:a2:b9:da:58:e5:11:a3:c6:fb:
73:36:82:a5:95:fe:e5:14:e2:37:b6:00:a7:b3:a1:fe:49:86:
62:ba:cd:ad:8f:8c:7b:b3:0b:56:a6:3d:61:82:7d:d7:65:7a:
01:d9:67:06:8a:51:de:65:ab:63:7f:05:1e:f4:44:d1:e5:05:
00:4c:ad:a2:10:11:d6:b4:7f:2d:3b:2d:1b:c5:a7:c9:2e:59:
2e:a2:44:87:8e:54:c4:8e:0f:4e:8c:8c:23:e7:05:20:c2:de:
23:d8:36:ca:c7:7b:47:c3:04:32:bb:e4:d2:bb:be:d2:fc:1a:
a2:f7:eb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:03:18 2026 by rpki-client