Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: MKLDzerO2f7Bda8F+80PSKFH1j7+ZXXX2Bql16CBu7s=
Subject key identifier: D3:89:B5:14:7F:07:4C:A4:AF:5D:E1:C1:6C:9A:6C:67:CD:71:FB:12
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 019FA899B73088D3293E8C52871485E440D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 186A
Signing time: Tue 28 Jul 2026 12:01:13 +0000
Manifest this update: Tue 28 Jul 2026 12:01:13 +0000
Manifest next update: Wed 29 Jul 2026 12:01:13 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: GogRFsX8nFCmDCspEVcY73R7xPZU8eCwSnICpRFFeJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:b7:30:88:d3:29:3e:8c:52:87:14:85:e4:40:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Jul 28 12:01:13 2026 GMT
Not After : Jul 29 12:01:13 2026 GMT
Subject: CN=d389b5147f074ca4af5de1c16c9a6c67cd71fb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:9b:fa:f5:5c:e9:80:b3:bc:19:c7:85:58:
f5:e8:2a:df:d2:cf:30:4d:73:0e:d1:6e:85:00:32:
7c:1f:d6:b1:fe:dd:ec:3c:b4:88:44:92:7a:56:e2:
ba:42:e5:b2:a1:cc:1e:6f:b4:22:c3:ad:7e:a0:81:
62:0d:1b:4c:51:70:45:4f:55:d1:16:1d:b1:20:4b:
18:aa:76:ed:c0:e0:94:97:06:1b:f2:96:56:eb:b1:
7b:c0:1a:b2:c1:56:eb:dd:3b:5b:4d:28:6f:8b:05:
84:31:c3:2f:5d:f7:94:76:be:ef:62:3b:70:9d:4d:
a1:c3:9e:55:e1:95:3d:46:d1:44:a3:c6:68:58:d4:
72:36:ba:90:91:24:22:e1:98:95:e3:8f:6f:78:06:
62:a8:0c:92:f9:07:44:a7:6e:fe:a9:01:44:f7:a4:
74:00:10:4e:56:8e:88:8d:1a:ea:f5:58:32:03:6a:
87:da:9c:ad:71:48:90:a9:65:d2:8b:8b:e6:3a:21:
aa:98:04:2d:07:04:1f:62:06:68:bc:3b:b1:95:3d:
68:4b:2a:bb:f2:c1:a9:7e:46:08:f1:c2:84:ea:4d:
8a:9f:d0:3f:11:91:34:45:55:9c:87:da:b3:29:11:
50:aa:52:9a:b4:ef:6d:41:8c:ed:62:a7:75:a5:45:
33:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:89:B5:14:7F:07:4C:A4:AF:5D:E1:C1:6C:9A:6C:67:CD:71:FB:12
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:b6:49:2c:56:3f:26:10:f7:ef:12:db:47:c5:c7:2e:6e:
27:20:c3:10:c1:61:38:46:16:9e:f2:95:d9:84:9f:f7:32:7c:
4d:fd:a5:87:07:dd:ef:72:38:67:82:24:d4:11:a9:2d:74:6f:
a3:18:92:b5:a5:d7:e8:01:d5:f9:f6:a8:f9:f0:28:2b:c7:e0:
65:11:c8:9d:da:80:4e:b3:d8:ee:73:77:b4:6a:09:24:99:1a:
e9:07:d9:9c:52:bc:f9:72:a7:de:c4:e1:25:a0:48:c9:d2:03:
64:eb:ea:ec:99:3f:b4:e4:d4:f1:d9:c4:7e:e1:19:c5:fb:28:
c1:a1:89:d4:ee:c5:ab:0c:3e:c3:46:43:ca:4f:cb:c3:2d:fe:
76:fc:0c:a7:61:fe:15:1f:97:91:2f:88:98:b8:c0:4d:70:47:
26:0e:c4:e2:ea:14:a8:76:15:e2:68:c5:f5:22:7e:90:6b:1f:
70:ff:9f:9d:79:1a:5a:a7:6f:bb:ab:21:05:71:06:34:5a:92:
80:3f:d7:33:7f:1a:e2:fe:3f:4a:ec:d9:a9:8e:db:a4:59:d7:
24:cb:fd:e5:86:5c:cd:73:82:a8:4a:63:5e:d8:39:43:a7:3e:
c3:21:a0:15:5c:85:5b:f3:79:cd:7e:c0:3a:36:76:28:9e:30:
d2:f2:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:17 2026 by rpki-client