
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
File: hElpeAFBgkzQrL-lp4RhHusKfds.mft (raw, json)
Hash identifier: oEKfWxiE3L1cX5EOLxK56DEc8FIfPBRCyfSv8Z4W3vg=
Subject key identifier: 60:8D:E6:0F:9F:22:17:AF:57:61:3B:C9:92:43:AA:52:B4:25:98:5D
Authority key identifier: 84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
Certificate issuer: /CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Certificate serial: 019FAA8849CD88F1D3E7395917A7F9950E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
Manifest number: 0A8F
Signing time: Tue 28 Jul 2026 21:01:26 +0000
Manifest this update: Tue 28 Jul 2026 21:01:26 +0000
Manifest next update: Wed 29 Jul 2026 21:01:26 +0000
Files and hashes: 1: 1-ZrQbFc7NRMGl29jtjWMKsIp2ZQ.roa (hash: He4PUZhKvLvJbADEv84xs1x0RYoT7WY7P6/fpECXwDc=)
2: FkErPbDIeaRtvt2mbo2Rn3cHaTE.roa (hash: Udc4j3pbjPbQNDOUkwyNVr+rebw3Mlt0Hcd+vSG/cyg=)
3: GUhp8Wvci_j7T4kmVTXcfm-wQGw.roa (hash: sCSjIJ+mAkndBqHerekCSW8OY51YrH4HeTZcaJ0ddlk=)
4: Lx10w8QEiPDY7QbmkKm1WqjMKzY.roa (hash: 2Jg8RPIFYFJg9gr44bQNGOwxTHbO7QCXzzpqCpKGJY4=)
5: hElpeAFBgkzQrL-lp4RhHusKfds.crl (hash: Xvxbcq4GlX6MnrKTRaOFekd58yw9MOJQLKfSg7w5bvY=)
6: x0cR6jRtni_l8MuSLZAtEqFxSP0.roa (hash: yoZ8H34hrukbP1OK2g71bu2hsQg8D//pklb5IZbtw1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:49:cd:88:f1:d3:e7:39:59:17:a7:f9:95:0e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844969780141824cd0acbfa5a784611eeb0a7ddb
Validity
Not Before: Jul 28 21:01:26 2026 GMT
Not After : Jul 29 21:01:26 2026 GMT
Subject: CN=608de60f9f2217af57613bc99243aa52b425985d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:17:a7:64:bd:6d:0e:03:86:54:52:99:2f:
c9:09:44:07:3b:4d:ca:fa:e9:c0:0e:ea:c3:7d:c8:
1a:63:3f:f2:d8:36:a0:85:56:30:1d:fd:66:5e:a3:
49:b4:a2:9c:c5:fd:6e:60:5e:7e:4d:15:fc:10:fa:
4c:b5:22:87:b1:de:4c:32:4b:4c:8a:73:c5:b7:bb:
f4:ae:ba:ee:6b:f6:48:b4:16:b4:a8:ad:ac:40:ea:
b7:da:65:3b:4e:84:e3:36:d8:80:22:0a:c1:33:2c:
dd:27:f0:f3:90:a4:6c:e3:f3:a9:ca:fc:ed:85:da:
c2:51:6b:69:83:ec:21:f3:7b:e8:a1:40:ae:c1:16:
9e:56:c3:38:09:c2:c6:57:a6:44:16:6c:5d:53:f7:
02:ca:4e:6d:f6:6c:df:ca:97:db:7b:cf:b8:17:d0:
e9:54:69:5d:ac:26:c5:7c:51:26:e0:37:58:d3:8e:
b7:4d:56:ac:e4:37:33:22:3e:22:bd:59:1a:9d:4a:
6e:91:99:b3:e0:c5:f9:a6:83:7d:28:23:28:15:71:
c6:7b:0c:6a:2d:65:9a:85:03:72:e2:15:f5:dd:82:
c2:e0:c6:fc:ac:2e:df:73:ca:fb:a2:19:c7:59:64:
28:0d:0d:36:53:04:44:e9:02:ce:60:1f:77:6d:c1:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8D:E6:0F:9F:22:17:AF:57:61:3B:C9:92:43:AA:52:B4:25:98:5D
X509v3 Authority Key Identifier:
keyid:84:49:69:78:01:41:82:4C:D0:AC:BF:A5:A7:84:61:1E:EB:0A:7D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hElpeAFBgkzQrL-lp4RhHusKfds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e62f95-abbd-430d-8160-04ac17881aa9/1/hElpeAFBgkzQrL-lp4RhHusKfds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:55:a9:69:e6:c1:5e:84:89:14:b2:47:fb:1c:06:4e:d4:bb:
d3:75:6d:8a:60:d2:07:32:ec:cd:da:59:e9:e0:4c:0c:34:ab:
6d:43:2a:b5:d1:88:aa:6a:dc:68:33:2d:d8:5a:f5:48:49:a8:
b9:8e:b3:11:bc:15:30:01:93:11:7f:7c:47:b8:67:d2:8d:91:
04:82:1a:3c:56:da:9e:89:2b:65:e7:74:b3:2e:c8:88:4b:69:
69:a3:b4:5d:1a:d7:b2:85:19:7f:43:2a:0a:bc:e9:6f:3e:85:
51:90:a1:4b:80:eb:f1:66:35:fb:a8:e5:20:14:64:72:cb:c1:
11:7c:4c:d7:77:f2:91:a8:48:96:dc:8a:70:c7:a2:09:ad:73:
b1:19:78:36:c0:a9:90:fb:a4:26:6e:c1:6e:58:07:a7:7f:fe:
2e:f8:a9:d3:18:80:c1:d5:78:9a:64:fc:6a:ed:0f:47:8c:08:
74:44:e0:11:87:2a:bc:47:0c:04:1f:c5:56:16:b9:5f:56:96:
93:4d:b9:9a:a8:e9:0d:e1:83:e1:fb:8d:c1:ba:d8:e7:0a:6b:
8a:68:ed:9b:ca:67:24:cf:e9:f2:cc:0a:18:d2:0a:23:17:43:
71:89:f0:62:ae:90:3c:38:8b:8b:1f:0c:c6:b8:50:86:95:d2:
8d:70:9d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:31:38 2026 by rpki-client