Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File: HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier: vty3NmtLypztaLlx9GVodPthpKRNa4JxigeYC65MDwE=
Subject key identifier: C9:EF:72:F5:A5:BB:21:6E:2A:E7:90:9A:EC:42:68:72:3A:DB:17:C2
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial: 019FADBFB320C49B4D34ACC5A96AE460F301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 12:00:49 +0000
Manifest this update: Wed 29 Jul 2026 12:00:49 +0000
Manifest next update: Thu 30 Jul 2026 12:00:49 +0000
Files and hashes: 1: GzWcoTtAUqi5IHJ21cRxIUTLGpc.roa (hash: AGr5HxX1J7ElW4g5zJTR1ojXT/07CVW4IMiNxRldrY4=)
2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: 29hdVF7o0Oo93nUbcJ4Mwo6UN0xACBnvC4anETdb+Cc=)
3: LcM90VNnvvV-Cm1OaIsrEHhQa8g.roa (hash: xXnlrcw8FbAmWQ6ks2MamfhjxI8QiO91NWqPRN/S9Bw=)
4: eHc6pv_nsOEvOj1b6H0UUy3Hz5g.roa (hash: 0jFiwjosF+a+C3GZzSfiQX91cGdMln4C3x+2DMdzk0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:b3:20:c4:9b:4d:34:ac:c5:a9:6a:e4:60:f3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
Validity
Not Before: Jul 29 12:00:49 2026 GMT
Not After : Jul 30 12:00:49 2026 GMT
Subject: CN=c9ef72f5a5bb216e2ae7909aec4268723adb17c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:2a:47:9e:ac:d9:d4:47:2b:1e:f1:98:b5:
9f:3a:9f:fe:fb:7e:61:6d:a7:51:86:f7:cb:b1:3a:
80:28:0d:14:fc:ca:43:ab:97:43:4d:dc:10:ba:ba:
4b:db:5f:b9:bb:2c:c8:ec:20:b2:43:23:a4:06:78:
5c:a3:1a:a0:33:98:a0:8f:a8:36:2a:12:3c:5a:ed:
b5:f4:54:4c:1c:59:6d:e5:8e:71:f9:56:bc:73:ba:
47:54:84:d4:7e:98:83:a6:b2:f2:18:ff:56:a7:44:
13:2f:4a:e9:cd:71:4d:8a:5e:cf:5d:d9:a5:42:db:
9e:67:02:fd:c6:4d:ea:cf:c5:27:7b:85:1f:3a:f8:
93:39:de:76:7a:44:c6:33:6a:c3:8a:ac:c5:93:56:
19:82:7d:cb:0b:62:1e:49:a8:3a:ac:ba:2e:4b:94:
b0:5d:14:10:03:83:15:31:1c:79:3c:8e:c3:f6:d5:
63:c8:f5:26:d4:5a:8f:43:3b:28:9e:11:74:72:17:
87:6c:db:43:26:25:a7:af:d3:2c:61:68:e7:12:f6:
b9:09:e5:d2:60:94:f3:e2:f9:a0:12:a1:44:86:78:
7d:92:0b:b0:b7:c4:82:09:cb:fb:16:bc:a8:ea:ed:
ff:98:5e:3a:c7:ae:d0:7f:9a:ab:09:1c:0b:fc:27:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EF:72:F5:A5:BB:21:6E:2A:E7:90:9A:EC:42:68:72:3A:DB:17:C2
X509v3 Authority Key Identifier:
keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:89:59:db:c7:16:d8:89:d5:c5:3f:1f:e4:83:c9:25:1c:ab:
49:0b:8e:0d:73:8c:33:5f:a3:04:5f:2f:68:18:bc:c3:d8:04:
d3:d4:cc:a7:cd:ae:18:a0:7b:09:7d:1c:97:5b:d2:2d:a2:8f:
eb:af:88:6a:45:dd:73:92:40:93:fb:54:ca:3c:05:23:92:8f:
e5:30:46:f8:a1:41:6d:37:c2:e4:be:42:98:ff:cd:5d:0f:91:
34:a9:e4:87:04:ae:57:e3:be:0d:b6:aa:52:93:f7:c2:91:02:
bb:02:93:ce:0a:ad:64:5d:d8:61:ce:f4:e3:aa:ee:7b:fa:72:
06:69:fb:3f:d9:dc:14:e0:e4:52:22:cb:e4:a4:51:30:5b:52:
d9:92:40:7b:9a:9c:9f:94:4e:5f:ea:22:89:5d:0b:32:18:cb:
3f:3b:c7:3b:86:52:86:49:a2:99:13:fc:58:6d:b8:13:bd:7d:
72:eb:4a:05:32:2c:f1:75:b5:39:87:28:34:06:60:ac:79:8c:
68:9f:2e:26:7a:d9:5f:3e:b2:9d:09:fd:2a:2f:ea:1a:79:15:
12:8f:66:2a:8e:a2:50:cc:d7:63:2f:6c:e6:86:e4:46:72:f1:
5c:db:75:5d:f0:c0:44:3f:b3:81:15:7e:95:c5:13:87:83:2d:
bb:3a:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:12:25 2026 by rpki-client