Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
File: HitHgD4Tf9WetFz67ZNixDAxjt4.mft (raw, json)
Hash identifier: KoSSJi1xBknmn2NwrIyUIXi6UJKoEKhcwXfV5Tkl/Mc=
Subject key identifier: 0D:25:C4:CA:53:81:24:B4:43:F3:69:37:EC:EC:76:63:DA:66:70:24
Authority key identifier: 1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
Certificate issuer: /CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Certificate serial: 019FAC76E26073A03BA2E296909B7962177C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:39 +0000
Manifest this update: Wed 29 Jul 2026 06:01:39 +0000
Manifest next update: Thu 30 Jul 2026 06:01:39 +0000
Files and hashes: 1: FAKw80vpI-mpfVtupkmvFk-yZPI.roa (hash: 473+Mp3hmze1LQyjXKCCeGguRS7ioXSZyLlwQX5dUjI=)
2: GZxpNzGC-1BStPRxl0AuXHTYpms.roa (hash: N5+X5onvfO8vCXWo09NVsFmRf/WIuQPxs6kWhVhvR6c=)
3: HitHgD4Tf9WetFz67ZNixDAxjt4.crl (hash: /cAyk87kRhe3d3PMCy2Y7EFZ8LdPzAX0FhEzZON/CHA=)
4: LRl7tzJxtNnx97ijDx7oqU2JGxE.roa (hash: 7BTG2mL/bSNfXC71H09Is4jffKot0dA2702ucToT2e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:e2:60:73:a0:3b:a2:e2:96:90:9b:79:62:17:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2b47803e137fd59eb45cfaed9362c430318ede
Validity
Not Before: Jul 29 06:01:39 2026 GMT
Not After : Jul 30 06:01:39 2026 GMT
Subject: CN=0d25c4ca538124b443f36937ecec7663da667024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:d4:3b:05:fb:6a:76:6d:19:0e:93:e5:25:
51:d3:37:6c:93:95:18:64:e8:a6:19:bb:79:f2:75:
d8:12:9b:2f:e6:b0:84:42:73:e8:c0:b8:2b:d7:93:
37:73:7e:3b:48:32:4d:7a:a5:f5:d1:38:c0:d6:ba:
42:77:13:ce:97:e8:4f:5d:e3:79:d9:de:94:75:1e:
b6:a6:d9:56:3d:1e:67:2a:bb:35:42:91:ff:a9:62:
23:29:46:03:af:e5:95:cf:95:c3:35:d4:73:90:9d:
47:b0:9a:40:ae:c6:17:70:5a:c5:87:e0:e0:32:c5:
c2:2e:77:dc:a5:b8:c6:1e:89:16:c9:73:75:31:9e:
dd:be:f9:9e:84:af:ed:05:35:b2:42:72:6c:ab:ce:
32:a8:c1:0c:c9:4c:53:5a:ff:2e:23:4c:cd:06:21:
d4:f4:ed:a0:e2:c6:4d:72:b0:79:2d:e7:94:f7:a3:
24:40:15:fb:83:07:7a:5a:68:4f:10:5b:42:52:5c:
40:6b:07:00:8e:4b:89:8a:d1:ff:18:52:c0:4c:b0:
11:c8:ab:7d:e0:a7:43:3c:8a:e3:e0:2b:f6:df:82:
a0:8c:96:2f:97:a9:60:6b:a4:9b:f3:be:32:46:91:
11:2c:65:31:1e:41:54:42:22:dd:a3:5a:a0:2d:1b:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:C4:CA:53:81:24:B4:43:F3:69:37:EC:EC:76:63:DA:66:70:24
X509v3 Authority Key Identifier:
keyid:1E:2B:47:80:3E:13:7F:D5:9E:B4:5C:FA:ED:93:62:C4:30:31:8E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HitHgD4Tf9WetFz67ZNixDAxjt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/HitHgD4Tf9WetFz67ZNixDAxjt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0e:53:e4:5d:b0:76:2b:09:be:1d:14:b7:03:bc:45:62:cd:
b3:0b:9f:b8:df:5e:98:a9:5f:b9:ab:71:b4:da:92:67:60:2c:
2b:62:53:c6:fb:b6:e1:21:ea:ba:18:f7:9f:49:36:aa:7e:94:
c8:8b:11:3c:42:55:b7:e5:d3:13:76:d3:36:4b:e2:2a:80:09:
ed:b7:ae:64:d8:ac:25:67:58:cd:89:31:94:37:0d:b7:8e:e2:
95:cd:0a:07:17:70:f8:a9:10:2c:61:47:ae:2b:6f:78:4c:fa:
0e:a2:5f:31:82:f2:65:74:00:ba:25:86:3b:af:2e:f2:d8:c3:
fe:a0:8d:08:b2:0d:9e:a1:26:b3:ad:32:b0:ce:db:73:19:64:
3d:a4:ab:55:95:fc:ea:37:36:62:59:49:f0:1d:f2:63:f9:46:
04:6a:c0:2d:72:70:39:8b:d1:70:88:d8:44:73:2a:74:87:c8:
ff:8e:f1:b4:4c:4d:76:57:1d:18:d1:70:a6:94:f0:5b:0a:1c:
01:4b:88:06:29:ff:ff:1d:36:5e:4d:ad:b8:d7:83:cd:03:2d:
ed:33:d2:7d:d0:69:56:17:f6:e8:78:51:5a:a0:23:e6:e3:b4:
01:89:02:43:37:ab:d4:65:14:b2:cd:f2:fb:76:b7:e7:38:3c:
2c:93:06:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sduJgc6A7ouKWkJt5Yhd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMmI0NzgwM2UxMzdmZDU5ZWI0NWNmYWVkOTM2MmM0MzAz
MThlZGUwHhcNMjYwNzI5MDYwMTM5WhcNMjYwNzMwMDYwMTM5WjAzMTEwLwYDVQQD
EygwZDI1YzRjYTUzODEyNGI0NDNmMzY5MzdlY2VjNzY2M2RhNjY3MDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtazUOwX7anZtGQ6T5SVR0zdsk5UY
ZOimGbt58nXYEpsv5rCEQnPowLgr15M3c347SDJNeqX10TjA1rpCdxPOl+hPXeN5
2d6UdR62ptlWPR5nKrs1QpH/qWIjKUYDr+WVz5XDNdRzkJ1HsJpArsYXcFrFh+Dg
MsXCLnfcpbjGHokWyXN1MZ7dvvmehK/tBTWyQnJsq84yqMEMyUxTWv8uI0zNBiHU
9O2g4sZNcrB5LeeU96MkQBX7gwd6WmhPEFtCUlxAawcAjkuJitH/GFLATLARyKt9
4KdDPIrj4Cv234KgjJYvl6lga6Sb874yRpERLGUxHkFUQiLdo1qgLRt5IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0lxMpTgSS0Q/NpN+zsdmPaZnAkMB8GA1UdIwQY
MBaAFB4rR4A+E3/VnrRc+u2TYsQwMY7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGl0SGdENFRmOVdldEZ6NjdaTml4REF4anQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgt
ZjlkOWMwM2Q0YjRjLzEvSGl0SGdENFRmOVdldEZ6NjdaTml4REF4anQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84NGVlZGMtYTJmNi00YTM5LWE5MTgtZjlkOWMwM2Q0YjRj
LzEvSGl0SGdENFRmOVdldEZ6NjdaTml4REF4anQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgg5T5F2w
disJvh0UtwO8RWLNswufuN9emKlfuatxtNqSZ2AsK2JTxvu24SHquhj3n0k2qn6U
yIsRPEJVt+XTE3bTNkviKoAJ7beuZNisJWdYzYkxlDcNt47ilc0KBxdw+KkQLGFH
ritveEz6DqJfMYLyZXQAuiWGO68u8tjD/qCNCLINnqEms60ysM7bcxlkPaSrVZX8
6jc2YllJ8B3yY/lGBGrALXJwOYvRcIjYRHMqdIfI/47xtExNdlcdGNFwppTwWwoc
AUuIBin//x02Xk2tuNeDzQMt7TPSfdBpVhf26HhRWqAj5uO0AYkCQzer1GUUss3y
+3a35zg8LJMGEA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:03:03 2026 by rpki-client