Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
File: hJICE8sjC_5REhzl-03s4oAYvtA.mft (raw, json)
Hash identifier: VY897GB7xCMu5EftlPO7/XL1JFUboFv0NkhYdkH9WZM=
Subject key identifier: 1E:6F:1C:91:D7:0E:91:56:0B:E2:24:E4:96:E8:37:9A:DF:CC:41:88
Authority key identifier: 84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
Certificate issuer: /CN=84920213cb230bfe51121ce5fb4dece28018bed0
Certificate serial: 019FAD51875F695F024EB821AC434D4A3E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 10:00:29 +0000
Manifest this update: Wed 29 Jul 2026 10:00:29 +0000
Manifest next update: Thu 30 Jul 2026 10:00:29 +0000
Files and hashes: 1: hJICE8sjC_5REhzl-03s4oAYvtA.crl (hash: 6O/UCmso8QEKYQx8M01T/RonnTRdUo8ZRVXGFOtKVOU=)
2: z_fYCrrGSV54cj1knb3xBk4SK5U.roa (hash: EFlql6uKuI4YQL66OtBnNw+c0chssYW8DVC7ieJRlbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:87:5f:69:5f:02:4e:b8:21:ac:43:4d:4a:3e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84920213cb230bfe51121ce5fb4dece28018bed0
Validity
Not Before: Jul 29 10:00:29 2026 GMT
Not After : Jul 30 10:00:29 2026 GMT
Subject: CN=1e6f1c91d70e91560be224e496e8379adfcc4188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:99:f1:fb:83:d8:ef:70:29:f9:4d:2c:12:
c4:fa:09:35:3c:b9:c0:e9:f4:3e:d4:bb:80:ec:ed:
13:ab:4e:57:c6:6a:91:ef:94:14:60:62:8c:dd:31:
b6:91:fa:f8:c0:35:7e:6f:f0:fa:41:3a:87:a3:b5:
c1:75:d3:a9:41:f9:8a:e8:48:9c:c4:1a:f7:ef:93:
0a:fe:96:3e:82:83:b8:ab:44:db:f6:8c:d6:71:01:
0c:6c:38:89:c5:0e:c4:ad:65:a1:3e:74:7e:80:91:
e5:87:14:a3:6c:5d:67:bc:48:e2:24:d3:e6:99:96:
6e:f6:24:ed:d2:0e:3a:7d:ee:94:5f:cc:0a:1e:66:
f7:58:b4:b4:6e:5f:6a:4f:bd:d7:9b:d9:3f:6f:d8:
e3:3d:0c:15:a5:39:0c:bd:ee:75:e5:05:62:bd:2b:
56:56:53:1e:15:43:22:1d:4b:f4:49:2d:fc:cf:4a:
2d:77:fd:a7:82:65:3c:d7:9f:91:b2:ae:3c:50:fd:
6c:de:85:67:7f:51:2a:05:8c:ef:20:66:88:fe:a5:
81:7b:45:eb:58:4f:67:5c:ad:0c:91:e1:72:e7:1f:
45:44:5a:3d:e6:62:0b:e4:10:1b:3c:40:10:9e:33:
17:39:ba:70:79:74:4d:cd:0d:4d:d7:6e:dd:b6:9a:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:1C:91:D7:0E:91:56:0B:E2:24:E4:96:E8:37:9A:DF:CC:41:88
X509v3 Authority Key Identifier:
keyid:84:92:02:13:CB:23:0B:FE:51:12:1C:E5:FB:4D:EC:E2:80:18:BE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJICE8sjC_5REhzl-03s4oAYvtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/a8a09c-0f84-4a89-8a16-b04b4d043f9f/1/hJICE8sjC_5REhzl-03s4oAYvtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:58:de:73:50:99:17:d2:27:e1:e9:00:b3:4d:e5:7f:07:e4:
14:59:f0:7f:e0:70:31:61:ff:24:c0:8b:e4:27:90:15:47:02:
e8:08:72:1c:36:31:80:a9:4b:0d:44:78:ce:9a:78:04:48:30:
c3:73:b4:9f:76:f4:ce:80:a3:7e:b3:5e:b6:11:d9:74:90:48:
3d:31:31:7b:4b:52:d9:ac:d0:8b:73:cd:2f:be:31:85:86:5c:
cf:16:bf:7c:fd:81:36:d0:46:5a:32:aa:43:9f:b4:6d:9a:71:
98:7e:7c:93:44:fb:30:cd:5b:5a:d9:7e:a2:ab:f3:51:bd:e2:
23:b6:b5:23:ec:bf:1a:08:69:11:db:3a:cd:00:72:5f:85:20:
52:e1:9e:2d:93:d4:09:8c:cf:1a:81:6f:6f:b3:48:9a:9f:11:
9d:03:ba:6e:da:34:b3:9c:96:25:d1:05:fa:9a:61:58:ed:b8:
58:88:ed:1f:05:95:ad:b3:c6:1c:13:1d:43:ff:ad:ef:4c:13:
ce:c5:c0:d7:8f:5a:e4:b7:6d:82:71:fc:02:46:e4:57:fb:7c:
e0:fe:64:0b:af:b9:4e:10:ea:62:ff:b7:c3:e9:8e:8c:58:3b:
5f:20:ae:34:85:e3:7c:33:b7:54:03:3c:22:2e:74:4e:25:26:
b9:06:d7:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUYdfaV8CTrghrENNSj6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OTIwMjEzY2IyMzBiZmU1MTEyMWNlNWZiNGRlY2UyODAx
OGJlZDAwHhcNMjYwNzI5MTAwMDI5WhcNMjYwNzMwMTAwMDI5WjAzMTEwLwYDVQQD
EygxZTZmMWM5MWQ3MGU5MTU2MGJlMjI0ZTQ5NmU4Mzc5YWRmY2M0MTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaeZ8fuD2O9wKflNLBLE+gk1PLnA
6fQ+1LuA7O0Tq05XxmqR75QUYGKM3TG2kfr4wDV+b/D6QTqHo7XBddOpQfmK6Eic
xBr375MK/pY+goO4q0Tb9ozWcQEMbDiJxQ7ErWWhPnR+gJHlhxSjbF1nvEjiJNPm
mZZu9iTt0g46fe6UX8wKHmb3WLS0bl9qT73Xm9k/b9jjPQwVpTkMve515QVivStW
VlMeFUMiHUv0SS38z0otd/2ngmU815+Rsq48UP1s3oVnf1EqBYzvIGaI/qWBe0Xr
WE9nXK0MkeFy5x9FRFo95mIL5BAbPEAQnjMXObpweXRNzQ1N127dtpo0JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5vHJHXDpFWC+Ik5JboN5rfzEGIMB8GA1UdIwQY
MBaAFISSAhPLIwv+URIc5ftN7OKAGL7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9hOGEwOWMtMGY4NC00YTg5LThhMTYt
YjA0YjRkMDQzZjlmLzEvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9hOGEwOWMtMGY4NC00YTg5LThhMTYtYjA0YjRkMDQzZjlm
LzEvaEpJQ0U4c2pDXzVSRWh6bC0wM3M0b0FZdnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFjec1CZ
F9In4ekAs03lfwfkFFnwf+BwMWH/JMCL5CeQFUcC6AhyHDYxgKlLDUR4zpp4BEgw
w3O0n3b0zoCjfrNethHZdJBIPTExe0tS2azQi3PNL74xhYZczxa/fP2BNtBGWjKq
Q5+0bZpxmH58k0T7MM1bWtl+oqvzUb3iI7a1I+y/GghpEds6zQByX4UgUuGeLZPU
CYzPGoFvb7NImp8RnQO6bto0s5yWJdEF+pphWO24WIjtHwWVrbPGHBMdQ/+t70wT
zsXA149a5LdtgnH8AkbkV/t84P5kC6+5ThDqYv+3w+mOjFg7XyCuNIXjfDO3VAM8
Ii50TiUmuQbXSg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:54:38 2026 by rpki-client