Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
File: hmVxtAaXbJ-viHcwKBnPVQ554p0.mft (raw, json)
Hash identifier: lKpRrS+bF/Mat/5Jx4SrB+SHg3DBUz8ZNFILltHJTsU=
Subject key identifier: FB:83:85:EE:F3:AD:7F:46:6D:DE:92:0D:0B:99:82:02:43:B1:A0:09
Authority key identifier: 86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
Certificate issuer: /CN=866571b406976c9faf8877302819cf550e79e29d
Certificate serial: 019FACAC9E7DECD3814E2BFD0A545AE013AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
Manifest number: E5
Signing time: Wed 29 Jul 2026 07:00:21 +0000
Manifest this update: Wed 29 Jul 2026 07:00:21 +0000
Manifest next update: Thu 30 Jul 2026 07:00:21 +0000
Files and hashes: 1: PFBKsrtOCbGhBn0cYx9bOrROX78.roa (hash: 7K+faRfy2CkTQM6e5qFvQ/b7USgvSKY/AFQOmLzDB3g=)
2: hmVxtAaXbJ-viHcwKBnPVQ554p0.crl (hash: XdKdot7teTzSgA/nBKDD5HxG7QRs9Bem+u7aYOl9oz4=)
3: jKNT_AJmqKLUzRsNV17SW2IxOf8.roa (hash: YzX7y6hNOozFt4OF66OKcy+9YHHPACtTPRFr+JGkOjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:9e:7d:ec:d3:81:4e:2b:fd:0a:54:5a:e0:13:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866571b406976c9faf8877302819cf550e79e29d
Validity
Not Before: Jul 29 07:00:21 2026 GMT
Not After : Jul 30 07:00:21 2026 GMT
Subject: CN=fb8385eef3ad7f466dde920d0b99820243b1a009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:cb:4c:fe:4c:89:68:4a:92:86:2a:8b:fb:
26:97:38:07:8d:c3:28:c2:aa:68:b2:8d:8c:c5:36:
bf:5a:8b:63:21:fc:f4:2b:a9:04:b1:07:23:aa:f2:
6b:0f:55:8e:0d:69:05:73:b8:bd:5d:3d:5a:6f:b6:
09:db:d3:70:8c:cc:9c:67:03:9f:56:e5:63:18:47:
dc:6c:94:70:e9:1f:23:21:d8:3a:8b:b5:b5:d0:64:
23:bb:61:ca:a4:07:b2:ba:51:3d:de:d0:92:ad:0e:
9b:cc:90:6a:a4:84:a7:00:bc:62:37:a0:5f:bf:45:
dd:fd:5a:83:52:4c:de:04:ec:06:c9:81:ce:6e:fa:
7d:68:cf:f5:cc:4e:98:d9:b0:47:00:91:f7:fd:da:
a8:b1:15:5a:e2:ee:b6:98:8b:a4:3a:1e:c1:9b:90:
ef:bb:cc:4e:f1:2a:ce:ae:b3:97:a3:b7:8c:e2:be:
69:6d:54:3f:bd:86:41:34:24:23:9e:a0:04:6f:95:
5d:25:73:73:08:a9:8a:75:e0:8e:34:0d:ad:e7:d9:
f0:d6:4f:2f:69:4d:0a:2b:94:96:91:92:a4:19:4d:
e9:db:03:38:14:3f:a6:0e:54:25:e1:3f:3d:d3:59:
06:fa:a6:6b:2d:e8:fa:42:1a:ae:1e:6c:0b:85:bd:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:83:85:EE:F3:AD:7F:46:6D:DE:92:0D:0B:99:82:02:43:B1:A0:09
X509v3 Authority Key Identifier:
keyid:86:65:71:B4:06:97:6C:9F:AF:88:77:30:28:19:CF:55:0E:79:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmVxtAaXbJ-viHcwKBnPVQ554p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/fdc741-5f66-446d-a944-5bc9a63ceaf6/1/hmVxtAaXbJ-viHcwKBnPVQ554p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f2:e6:08:27:4b:41:94:52:2d:6b:04:09:da:94:dd:ec:0c:
95:55:7f:6c:e0:db:5d:47:b8:de:4e:c1:85:9e:43:89:f9:6e:
6c:2c:30:07:56:e3:44:24:7a:fa:2b:a7:99:7c:fc:b7:70:d6:
42:9f:3d:4b:17:fa:fc:d2:01:b6:bd:d1:16:81:17:91:41:0e:
a0:93:bd:1c:4d:2e:d6:73:11:d9:f3:a0:21:29:a8:99:c0:fb:
4b:05:ba:39:36:cf:ee:8b:c9:39:05:80:f8:50:07:9c:63:8e:
01:cc:78:05:74:28:a1:4b:c8:20:b5:6e:64:5f:e3:14:f2:62:
65:a9:b8:32:65:d6:6e:0b:75:8f:c2:3b:0d:00:42:9e:93:6a:
9f:7a:91:60:70:01:3c:24:3a:8a:8a:6e:3c:42:df:8a:34:e6:
bb:58:86:03:6e:4c:21:c0:62:46:d3:25:22:1f:43:c2:12:20:
35:f3:60:9d:e0:b3:10:63:3a:d7:2c:cc:62:97:44:66:d1:36:
e4:25:14:a4:a5:52:85:0b:61:cd:20:07:7a:16:a6:d6:3c:8f:
18:5c:bf:7b:b2:90:bc:df:c8:1f:63:22:a6:96:7e:c5:6c:92:
37:75:8b:2c:e3:20:1f:37:95:2b:61:50:a8:d0:c9:b9:02:29:
89:fa:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:16:57 2026 by rpki-client