Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
File: hp2fc3396q0-lfhm6NMqZsT4oLI.mft (raw, json)
Hash identifier: TCCAICc6o3kIdrmeTu8x5aSXQct1VQspv4wRoBoaXUU=
Subject key identifier: DF:84:40:05:98:A4:A9:8B:50:CA:DA:58:A6:17:7A:D5:E6:37:71:12
Authority key identifier: 86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
Certificate issuer: /CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Certificate serial: 019FA898E5803F30F53CD5202EFF1E56A15C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:20 +0000
Manifest this update: Tue 28 Jul 2026 12:00:20 +0000
Manifest next update: Wed 29 Jul 2026 12:00:20 +0000
Files and hashes: 1: 7Tyv75qflu1MI2EbiYIYOe-EMOs.roa (hash: VD2V/Wqx8qVUzX6JNvOF1zN+nPxKD5Y7QjXuUoG/ZVc=)
2: hp2fc3396q0-lfhm6NMqZsT4oLI.crl (hash: KnOSDG74VuRXdWZwMp9Fykug/fHXxMvP0yoY80bSBow=)
3: ylnh5jHJGqU5w3NKWDSXLJQlbV8.asa (hash: DhXmkIGv0YJ5BrhiAQaTPI3U/c809JbcweCxcOd5t5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:e5:80:3f:30:f5:3c:d5:20:2e:ff:1e:56:a1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Validity
Not Before: Jul 28 12:00:20 2026 GMT
Not After : Jul 29 12:00:20 2026 GMT
Subject: CN=df84400598a4a98b50cada58a6177ad5e6377112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:d5:2f:da:61:fe:bc:b7:5e:94:f9:d3:f6:
c7:a7:13:93:66:d6:69:fa:2c:2b:4c:2e:ec:e7:3d:
28:85:3d:b0:87:15:6b:54:5c:c4:7c:cd:8f:be:aa:
e0:f3:4a:31:21:6c:6b:ad:ec:4e:9b:fe:19:01:54:
a1:a7:f0:20:18:93:ca:89:a5:c0:06:ff:84:06:ea:
53:4e:76:af:51:c6:cc:78:83:49:bd:7a:8f:a4:ad:
c3:b1:47:12:53:41:27:89:e4:9d:03:4d:35:df:ba:
e5:ee:7e:08:97:2c:9e:4d:3a:81:91:45:d4:c0:59:
4f:e7:48:01:7f:c2:36:32:f1:7a:19:e3:58:83:5a:
75:37:c1:a9:53:eb:be:4e:55:a4:80:ed:4a:00:2a:
7b:0d:bc:07:c7:f8:43:d0:e2:6a:33:a2:c5:98:8b:
60:f5:67:86:c1:a3:12:3e:f9:ca:10:c5:52:a1:26:
16:eb:86:1c:99:58:cd:16:2b:e7:86:c9:e4:8b:77:
31:d0:aa:bf:1c:90:33:d0:69:0e:0a:d8:01:53:29:
a8:a5:6e:ea:82:3d:f6:89:f2:58:97:41:39:00:76:
a7:38:ff:0a:0d:5f:0b:40:4d:2a:af:1a:0d:38:43:
26:a9:f5:3f:6e:3f:9c:41:d1:57:20:09:a9:d6:f4:
b2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:84:40:05:98:A4:A9:8B:50:CA:DA:58:A6:17:7A:D5:E6:37:71:12
X509v3 Authority Key Identifier:
keyid:86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:29:5f:d1:02:09:36:84:f5:6b:2f:4c:00:81:8a:70:6d:7e:
0d:9e:cc:07:7d:9f:f9:d0:b2:77:33:8e:c8:1a:12:63:cb:bc:
74:e0:54:23:65:ae:67:5e:d9:fd:da:f4:2d:f0:c7:75:69:06:
44:e5:7f:3f:1f:de:50:e9:16:91:3f:cf:8f:3d:32:e8:ed:26:
0a:91:e3:25:e3:85:19:8b:91:bb:29:49:75:82:a8:d3:93:d3:
d9:0f:ca:ba:5e:c0:2c:51:a7:d6:7a:b8:95:17:1b:ba:b4:72:
19:98:2a:c8:67:a4:29:fa:fa:b9:d7:49:cb:a5:39:2a:0b:b9:
da:e6:31:8f:73:8e:2f:dc:29:74:e9:4f:48:b5:2a:32:7d:e0:
d4:24:13:eb:af:f7:42:1d:a6:36:ad:da:3e:f0:9e:78:aa:d5:
d6:6e:2c:b4:a3:10:f1:bc:18:8e:39:b4:d8:da:a0:8d:7b:0e:
8a:51:89:32:97:95:88:4b:96:6b:80:d7:a0:ca:42:51:02:b0:
d6:3e:42:e9:3b:7c:0d:05:61:a0:4c:a2:70:d7:c9:97:f1:be:
2d:db:4b:e0:5c:dd:9c:88:a7:d7:09:07:7e:e5:56:23:22:49:
dc:a5:c9:1c:dd:8a:ca:6e:31:d0:f2:b4:74:16:c6:78:6a:22:
a0:05:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:07 2026 by rpki-client