Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: 8Z0RUkK/W8bmG9EKn+D31x1BWvmVZXjXiokFEVm1WaU=
Subject key identifier: 75:BD:AB:E6:F1:29:B9:02:C9:7E:D3:80:68:1D:3B:2D:76:EC:7D:5F
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 019FA975631956F1B62A0A9D86DFFE9ED487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0CEB
Signing time: Tue 28 Jul 2026 16:01:10 +0000
Manifest this update: Tue 28 Jul 2026 16:01:10 +0000
Manifest next update: Wed 29 Jul 2026 16:01:10 +0000
Files and hashes: 1: VTGNe0wLMZV0ZCvK8WlwuJb3oIU.roa (hash: xQJpTfnGU7sVo8llzufhQdICBBAxKZdw2Wu7Ywev7hE=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: 1wUKWuojbNtNsdCdtYzbqoiD2Zv++LR20RN3VXOKu0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:63:19:56:f1:b6:2a:0a:9d:86:df:fe:9e:d4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Jul 28 16:01:10 2026 GMT
Not After : Jul 29 16:01:10 2026 GMT
Subject: CN=75bdabe6f129b902c97ed380681d3b2d76ec7d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:b2:d1:7b:31:7d:05:d6:b4:4c:7c:d2:d0:
c5:df:51:a4:d7:ec:bd:ad:58:51:b1:e2:31:1f:7a:
03:f6:10:f7:d2:dd:97:d9:44:67:33:f9:b5:b5:98:
ea:9d:ec:06:2b:87:c5:d6:6c:d1:1d:aa:70:a0:19:
3c:b4:80:af:f5:48:24:47:18:b9:53:f8:72:33:c9:
41:ab:75:56:98:89:66:bb:ab:d1:60:d5:b9:d8:3e:
c9:1e:7f:08:34:3c:63:af:c0:f3:58:28:85:c4:8a:
d5:cb:f0:be:45:91:36:b1:67:23:b2:e3:ec:67:9a:
26:84:eb:bb:ff:ef:4b:c9:92:6e:a6:1a:b4:34:6d:
fb:c6:57:d6:f9:25:74:4c:c7:b5:4a:8d:c1:e5:f7:
6d:e8:d9:3b:58:72:f2:d6:ce:fd:f6:b8:8d:50:b2:
30:e4:74:cf:37:2f:42:16:59:98:ee:a8:78:87:f7:
10:64:80:5d:85:e9:16:88:b8:c6:d7:11:03:ce:93:
43:8e:a5:0d:0b:84:5d:c0:5b:4b:a2:a7:7f:4f:87:
08:ec:de:0a:0f:09:d5:da:ea:4d:d3:2c:47:0c:49:
40:d7:19:96:67:5c:c6:57:a3:a9:64:04:9e:9c:ab:
ac:54:39:96:98:e4:17:27:80:9b:8d:3a:7f:36:8e:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BD:AB:E6:F1:29:B9:02:C9:7E:D3:80:68:1D:3B:2D:76:EC:7D:5F
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:33:bc:bf:d4:e3:7e:dc:11:84:76:57:09:c5:00:a0:86:d4:
e9:5f:5a:96:f7:43:49:ec:22:de:d1:a7:05:22:c5:cb:cf:46:
82:7b:fd:2b:fe:fc:e1:e1:ba:ec:6f:83:cd:cd:e8:a9:cb:2f:
73:f0:5b:60:df:4e:a7:4a:3d:b1:53:76:49:0c:93:4f:9a:80:
31:ff:ff:6f:b6:43:8c:b2:f6:f7:9c:bd:e3:ee:3d:ef:47:35:
4e:cb:d7:9a:cc:ec:cc:7e:f0:1d:14:fb:9a:8e:51:87:ed:08:
00:31:d5:b2:75:66:0f:85:8b:10:65:13:e3:f0:30:34:86:71:
3f:1f:7b:00:33:ba:18:5f:3a:39:e6:12:7d:a1:e9:75:17:3d:
29:01:31:4d:7b:0e:81:83:1d:e6:20:d6:0e:3c:be:54:49:ce:
af:22:d3:4c:7b:9e:d5:29:76:9b:6e:13:f8:91:06:af:6b:ac:
02:5a:48:28:a7:2f:25:c2:2f:da:14:d8:2e:9e:a7:c8:a6:c8:
b0:30:75:b0:4e:89:0a:12:e7:e3:b6:5f:d9:05:89:89:94:db:
29:47:f6:68:98:98:41:f3:c2:c5:d7:86:7a:bb:13:3b:b1:7f:
ed:8a:04:e1:2d:8b:1d:df:91:e4:fc:10:43:fd:de:b3:35:7d:
9f:72:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:09 2026 by rpki-client