
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: g0X7NIpJ8PyZOCZmwOTF4AUNubg5Z9hvUVFEl5Ed7Mw=
Subject key identifier: FE:F3:93:76:2A:94:CD:88:B4:40:5E:C8:BF:AD:6B:61:DE:FB:9D:43
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 019FAB2C434093500D60AB52A088D40909D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0F4B
Signing time: Wed 29 Jul 2026 00:00:32 +0000
Manifest this update: Wed 29 Jul 2026 00:00:32 +0000
Manifest next update: Thu 30 Jul 2026 00:00:32 +0000
Files and hashes: 1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: 4cGjScmdogEsHuY/Fzcpzw0Uf0Y9J5bosCQU6gs4usw=)
3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:43:40:93:50:0d:60:ab:52:a0:88:d4:09:09:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Jul 29 00:00:32 2026 GMT
Not After : Jul 30 00:00:32 2026 GMT
Subject: CN=fef393762a94cd88b4405ec8bfad6b61defb9d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:14:9d:23:c7:b3:8f:93:05:48:47:6f:52:df:
f4:a6:4e:ed:3b:ec:36:c9:e4:b1:11:03:33:90:b2:
f3:97:17:39:78:3b:f4:0d:18:18:d7:e9:31:3d:dc:
e3:bd:1d:1a:60:b4:f8:bf:d5:9a:07:f5:13:a0:3f:
13:62:63:ff:61:7a:d3:9a:79:d5:63:a0:1e:0e:78:
8c:86:9f:ab:15:41:86:81:09:c3:b4:05:b7:f7:a1:
85:9b:7c:7d:94:bf:8e:6c:e9:78:ac:a7:20:ad:c0:
38:47:8c:77:49:7f:4e:7c:6e:69:f1:c2:d8:fe:a0:
66:e5:8d:7f:5b:0b:f8:63:e6:59:b6:8f:af:74:38:
e5:21:1e:16:76:ff:a9:a5:96:6e:d6:fb:31:85:4a:
e7:c9:b8:55:b0:d7:a1:32:34:f2:1b:25:e0:3c:5b:
7f:de:9c:c0:5a:5d:99:ff:83:c4:5b:0b:cd:72:64:
5f:60:24:be:ca:71:d3:66:1f:15:cc:39:00:82:be:
a5:ac:a7:0c:20:09:47:96:37:67:4b:17:8c:1f:de:
1e:8f:e7:8a:55:15:a6:c1:37:22:b4:b3:ee:78:88:
f4:f6:b5:a2:69:f6:4c:27:5e:cb:93:f0:21:50:f3:
de:0e:77:af:7a:39:1e:0b:85:df:07:00:6a:67:05:
1e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F3:93:76:2A:94:CD:88:B4:40:5E:C8:BF:AD:6B:61:DE:FB:9D:43
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1e:4f:7e:d8:d1:fb:fe:12:b3:ec:72:36:8e:30:41:df:89:
65:f4:5b:6e:3e:e1:02:10:92:ac:fb:74:e2:8b:74:2f:28:a6:
cc:dc:8f:86:db:86:1f:d0:c6:bd:4f:0b:d2:7c:24:4e:5b:63:
24:17:3c:14:8f:47:9e:b2:07:b7:3f:40:ab:9f:59:5a:26:d7:
2a:bb:a4:c7:5e:f5:f2:23:98:b6:7e:e6:d2:85:35:42:7f:49:
05:d6:16:ad:50:b3:36:4c:fc:24:8a:71:75:76:e7:f0:b2:0a:
91:ef:53:c0:04:a0:ab:a8:ce:ed:56:25:11:31:76:42:9d:f3:
41:57:e5:d2:71:15:bc:64:0c:27:d9:3a:fa:18:5d:05:3e:15:
67:d3:ea:3a:c8:07:3a:a6:ae:3b:2b:99:05:42:8e:b3:f9:ea:
fc:f1:69:53:95:38:39:71:c0:94:8c:8a:85:1e:dc:46:4e:f3:
19:84:a3:18:af:91:91:e3:ba:60:24:8c:5c:b3:f0:9b:73:1a:
67:84:44:26:69:c0:0d:0a:34:71:47:06:2c:bd:d8:4f:af:f2:
36:68:81:1f:7a:f5:e6:21:dc:4e:95:4a:51:25:2e:05:49:cb:
a4:ec:51:f6:c6:0a:1e:7d:27:da:68:59:b0:47:78:66:1d:43:
fc:66:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:45:35 2026 by rpki-client