Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File: Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier: x+dr0y2A23kC7B7Iz3a8eqqMpBOinN/MBKuUFXuvHiI=
Subject key identifier: 12:23:5B:0C:82:DE:73:19:C5:6E:6F:F1:9F:F0:81:05:B5:BB:44:38
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer: /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial: 019FAE9B853E44248380678C72CE4F15E6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number: 0521
Signing time: Wed 29 Jul 2026 16:00:55 +0000
Manifest this update: Wed 29 Jul 2026 16:00:55 +0000
Manifest next update: Thu 30 Jul 2026 16:00:55 +0000
Files and hashes: 1: 5Kagby_sStjMFhSw2G6-l1YpdBk.roa (hash: Noo2j7EiUwmhRo9X0f0rtLLladI+Ufm3DSaLlHlT9cg=)
2: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: lBYiwxOT8L3WfyhC/fJqyGrVtg6jTbVGyY6YGPmqLyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:9b:85:3e:44:24:83:80:67:8c:72:ce:4f:15:e6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Validity
Not Before: Jul 29 16:00:55 2026 GMT
Not After : Jul 30 16:00:55 2026 GMT
Subject: CN=12235b0c82de7319c56e6ff19ff08105b5bb4438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:9f:b7:46:a1:59:d9:cf:fd:4e:5c:fe:59:
f1:32:51:fb:bc:60:53:c8:00:f0:52:3e:1f:a0:1b:
34:92:07:be:ae:6b:e8:20:47:17:91:25:6c:60:8a:
fb:44:c1:43:9d:2f:fa:94:47:08:3e:68:d7:6b:a6:
48:2e:d2:e5:21:b2:7e:0d:a1:98:08:b3:52:e8:6a:
62:85:dd:8e:59:ee:d8:e0:50:1c:ac:ce:cb:73:bc:
d2:43:f6:57:0b:6c:ad:a4:62:6f:3f:f6:62:da:07:
f8:fc:32:1c:e6:14:2d:69:48:eb:ec:b2:57:1b:4e:
00:a7:59:77:69:99:e5:c5:dc:f6:7c:11:61:11:11:
0f:ac:33:a5:5f:05:d1:5a:27:c0:cd:9b:a9:b7:f5:
6b:47:14:55:a0:3f:f8:d4:27:31:61:e8:00:de:cb:
77:7e:aa:b1:80:1e:c7:2b:4b:37:a7:54:83:f5:f9:
da:e6:8e:94:97:6c:f6:d9:74:f8:45:eb:6d:68:b9:
46:b2:db:df:68:84:ba:1e:97:be:dc:24:a5:72:10:
97:ce:2f:26:e4:e0:8b:da:57:ec:0e:92:e4:2b:f8:
f4:d1:48:52:d8:c1:65:ae:56:b4:45:3f:ed:24:89:
55:ef:96:10:2c:db:18:3f:c5:a5:d0:4e:4a:3e:31:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:23:5B:0C:82:DE:73:19:C5:6E:6F:F1:9F:F0:81:05:B5:BB:44:38
X509v3 Authority Key Identifier:
keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:8c:36:0a:b4:01:62:a8:a7:a9:04:a3:f0:8b:07:c2:b5:
75:93:1a:04:aa:34:27:a2:b9:86:b8:a4:35:42:40:66:2d:6d:
12:fb:ac:74:e0:93:30:5a:c4:2b:cf:ed:7e:7c:ff:d9:f6:37:
37:53:48:9d:1c:ad:40:b7:db:e6:28:47:7d:63:61:0c:9b:fb:
61:d7:69:f8:6f:78:c4:f8:dc:ec:fd:e5:11:1b:92:ff:e5:82:
3e:19:84:e1:ba:6f:17:0b:09:75:58:ea:0e:4f:d0:49:fa:1d:
21:9c:2d:3a:0b:17:b0:f4:ac:8b:a9:5d:07:b0:f9:37:ff:3b:
8c:53:6e:f4:0b:15:08:0c:1a:79:50:25:d1:62:cd:9d:5e:b1:
ca:1d:95:03:7e:1f:41:ae:66:95:ca:88:3c:75:b9:ca:c5:6f:
fa:42:3a:4f:0c:fe:94:46:1b:ef:25:25:08:e4:07:8d:09:e5:
14:e0:5c:ed:33:97:40:97:05:12:cb:2f:6a:fd:6e:a3:cf:5f:
7b:a9:1a:b5:b2:39:c7:dc:f9:cf:ee:d8:f7:3c:6b:d8:1a:74:
05:e4:27:17:ca:a1:7a:55:d1:49:1d:34:0a:c1:9d:70:54:39:
c6:32:89:54:1b:f8:26:29:6b:bb:f9:e1:e6:9a:c6:be:5e:25:
9e:cb:f4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:28:26 2026 by rpki-client