Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: mbJjKVs8piONGdPQSsK/Pa1AZMymbfctP5sz0N1u5lE=
Subject key identifier: 1C:94:12:94:68:7F:5E:7C:7B:C8:3F:56:41:03:98:39:DD:42:A1:E9
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 019FAD1A75836D6C0B2AD2FA7F54756FB2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 13D9
Signing time: Wed 29 Jul 2026 09:00:20 +0000
Manifest this update: Wed 29 Jul 2026 09:00:20 +0000
Manifest next update: Thu 30 Jul 2026 09:00:20 +0000
Files and hashes: 1: ETi6rBv0jmHDZMdhavHXc91w57c.roa (hash: dIyT+dh+7DYUIlNnbK/CAN49jDHLvDXQ+GqXfT4OXIo=)
2: PvyjMnxxCs-iD8nNqvgJP0qyjY8.roa (hash: 7iRXsmizHd8Z7h/cdyZGhXFEz1E/csMcQ5uEyt4e7f8=)
3: iIFXLBXRyhHRxODZud1xrElh64s.roa (hash: AExhCYGcQMhNtoiQSq64xmFEgJgvDNV9lYLc/Z+6mC0=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: 5OJLQdsXg1ozg38L0qORdXUrwJuW41djBMjG7hxguFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:75:83:6d:6c:0b:2a:d2:fa:7f:54:75:6f:b2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Jul 29 09:00:20 2026 GMT
Not After : Jul 30 09:00:20 2026 GMT
Subject: CN=1c941294687f5e7c7bc83f5641039839dd42a1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:57:16:fc:22:a7:6d:de:a5:6e:e6:18:73:
5a:c6:48:26:ff:f3:c1:1c:80:91:f6:8e:32:86:ca:
3c:61:a0:3c:97:dc:7c:92:58:71:09:a4:6f:07:0d:
a0:68:17:6a:04:41:41:da:3e:73:d2:b6:c2:5a:cc:
b0:99:20:fc:82:35:01:15:bb:b2:4e:71:4d:0c:bc:
48:de:08:bd:fd:4c:eb:89:a9:b8:84:33:03:5a:39:
4a:35:65:dd:9e:a1:3a:df:4e:45:54:36:95:88:45:
2d:7d:f8:31:c2:3e:17:d7:cd:bd:88:1c:89:37:2f:
59:db:dd:b6:29:f8:b1:3a:f5:01:91:e7:c1:95:a4:
7c:d2:31:0e:9c:93:9d:78:62:b2:ba:09:b4:f2:e4:
bd:0c:89:6c:36:a9:a9:83:0a:89:c5:cc:5b:fd:6c:
6b:d5:6c:2a:74:fa:69:00:1d:d9:7a:dd:70:e5:d7:
7a:96:89:44:78:71:6f:0b:3b:7b:95:13:02:06:55:
46:62:1a:ed:fc:28:6e:dd:bf:40:f2:c2:a9:b2:d0:
a7:6b:a9:7e:90:c3:03:09:25:67:4b:25:6a:82:fd:
f0:cf:12:16:47:cd:5f:2c:f8:00:b7:0f:60:de:9c:
0f:e0:ef:83:5f:cf:74:08:c9:c2:52:9d:25:b8:b9:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:94:12:94:68:7F:5E:7C:7B:C8:3F:56:41:03:98:39:DD:42:A1:E9
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e5:20:ab:a7:0b:58:a5:25:34:8a:e1:43:d9:1a:40:eb:b1:
bd:8e:30:bb:11:da:98:db:d0:65:c5:3d:7b:ec:c0:bf:34:32:
30:3b:e6:d1:c0:7b:37:78:f8:ec:06:e6:f0:ea:fd:3f:31:45:
f5:1e:a4:57:8a:1c:6b:5f:80:bc:c7:ac:03:9f:9e:b7:2b:69:
e6:47:90:d7:1b:fb:8d:f5:f9:1c:c2:6b:12:87:d6:f6:d3:7c:
18:ad:93:9d:cc:4d:3e:18:d2:0d:ab:fb:35:ca:0f:3e:f8:90:
65:09:4a:b1:4b:09:ff:ae:e7:15:f5:c4:04:55:57:3e:66:0d:
5c:bc:36:1f:57:25:a9:44:18:31:21:e3:44:87:34:a3:b8:6b:
37:81:9a:40:30:09:95:d4:73:f2:01:f4:e7:74:a6:6a:7e:26:
61:dd:d8:38:38:15:3a:73:f4:ad:df:8e:f2:a0:d6:c0:7f:6c:
48:fb:80:fb:87:c0:cf:c1:c1:84:ad:9e:47:36:5d:25:91:11:
09:5c:36:c4:b1:99:50:36:0d:4b:7e:e7:48:f2:23:3b:4c:25:
81:12:ff:02:22:d4:dd:7a:d8:a6:f4:c0:a4:38:a3:98:43:88:
6a:fa:b2:7d:76:e7:3f:56:60:74:85:9f:17:7a:6d:f6:a8:64:
e1:05:69:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGnWDbWwLKtL6f1R1b7KrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy
YjMwMjcwHhcNMjYwNzI5MDkwMDIwWhcNMjYwNzMwMDkwMDIwWjAzMTEwLwYDVQQD
EygxYzk0MTI5NDY4N2Y1ZTdjN2JjODNmNTY0MTAzOTgzOWRkNDJhMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyitXFvwip23epW7mGHNaxkgm//PB
HICR9o4yhso8YaA8l9x8klhxCaRvBw2gaBdqBEFB2j5z0rbCWsywmSD8gjUBFbuy
TnFNDLxI3gi9/Uzriam4hDMDWjlKNWXdnqE6305FVDaViEUtffgxwj4X1829iByJ
Ny9Z2922KfixOvUBkefBlaR80jEOnJOdeGKyugm08uS9DIlsNqmpgwqJxcxb/Wxr
1WwqdPppAB3Zet1w5dd6lolEeHFvCzt7lRMCBlVGYhrt/Chu3b9A8sKpstCna6l+
kMMDCSVnSyVqgv3wzxIWR81fLPgAtw9g3pwP4O+DX890CMnCUp0luLn6wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByUEpRof158e8g/VkEDmDndQqHpMB8GA1UdIwQY
MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt
OWUwNDQwOTJiODI2LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2
LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+Ugq6cL
WKUlNIrhQ9kaQOuxvY4wuxHamNvQZcU9e+zAvzQyMDvm0cB7N3j47Abm8Or9PzFF
9R6kV4oca1+AvMesA5+etytp5keQ1xv7jfX5HMJrEofW9tN8GK2TncxNPhjSDav7
NcoPPviQZQlKsUsJ/67nFfXEBFVXPmYNXLw2H1clqUQYMSHjRIc0o7hrN4GaQDAJ
ldRz8gH053Sman4mYd3YODgVOnP0rd+O8qDWwH9sSPuA+4fAz8HBhK2eRzZdJZER
CVw2xLGZUDYNS37nSPIjO0wlgRL/AiLU3XrYpvTApDijmEOIavqyfXbnP1ZgdIWf
F3pt9qhk4QVpsA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:29:09 2026 by rpki-client