Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
File: HE5qHTzB5PPcAauWyUGWucSdKRY.mft (raw, json)
Hash identifier: LEgeiQbconktZ+xORV2XMqUz2horlvLbeaNsE/0UM5I=
Subject key identifier: 42:68:EC:8D:DF:D7:EF:E7:57:3E:06:09:5B:78:DE:C5:5C:E2:10:09
Authority key identifier: 1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
Certificate issuer: /CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Certificate serial: 019FAABEB2E1792D9FE5FC9F0324B7AC8B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
Manifest number: 03B5
Signing time: Tue 28 Jul 2026 22:00:52 +0000
Manifest this update: Tue 28 Jul 2026 22:00:52 +0000
Manifest next update: Wed 29 Jul 2026 22:00:52 +0000
Files and hashes: 1: 2HQOx4iO_xrJHvrUi4yD5jr-mvM.roa (hash: M1edUcZNtYk6o/wToAk4z5J0jw/3ZvfQIx1YRru5078=)
2: HE5qHTzB5PPcAauWyUGWucSdKRY.crl (hash: 5tyxHGNEgeYpEw1K1LZWtz/ZD2ct818sNLe2hRrDH68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:b2:e1:79:2d:9f:e5:fc:9f:03:24:b7:ac:8b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c4e6a1d3cc1e4f3dc01ab96c94196b9c49d2916
Validity
Not Before: Jul 28 22:00:52 2026 GMT
Not After : Jul 29 22:00:52 2026 GMT
Subject: CN=4268ec8ddfd7efe7573e06095b78dec55ce21009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:d5:94:4a:46:dc:8e:38:fc:78:98:be:0d:
5b:b9:3f:9c:8b:ea:ca:6c:d5:cb:86:42:09:ee:55:
22:65:ce:40:4e:80:5f:19:da:fe:5c:2e:6b:69:50:
4b:42:c4:eb:70:9b:b7:f0:57:bb:a4:56:02:e3:ab:
32:5d:c0:36:c8:bd:d1:84:f6:82:63:74:25:ca:63:
91:3a:90:97:e9:d3:7a:d2:77:37:08:11:5e:56:a0:
0f:7e:b5:7a:5c:5b:d8:55:b0:51:cc:24:9d:f2:75:
2e:1f:59:9f:f2:b9:b6:7f:e4:71:5f:1e:38:81:07:
09:d7:fc:7e:6e:2f:5d:0e:2e:02:b5:a2:05:c2:2b:
8c:7d:02:fe:6a:a1:0b:fb:2a:c3:dc:b0:cb:44:a1:
3d:b0:a1:c0:6d:c2:c3:52:fc:6f:ad:ff:8e:6c:11:
8b:26:06:c6:ba:c7:88:4c:3a:65:e4:83:0a:cb:2f:
98:83:33:78:7d:76:69:d5:9a:b0:31:54:66:45:48:
db:f1:66:55:aa:a1:13:37:ec:73:af:09:48:70:47:
a1:1f:d3:6e:f8:8e:89:4f:34:10:26:ea:4e:6f:13:
ea:8f:3a:b2:31:cc:c7:ef:69:1f:ec:89:95:2b:c5:
1b:14:e5:12:9a:2b:b6:84:b8:64:a6:08:7b:43:ca:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:68:EC:8D:DF:D7:EF:E7:57:3E:06:09:5B:78:DE:C5:5C:E2:10:09
X509v3 Authority Key Identifier:
keyid:1C:4E:6A:1D:3C:C1:E4:F3:DC:01:AB:96:C9:41:96:B9:C4:9D:29:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HE5qHTzB5PPcAauWyUGWucSdKRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/96b117-fd3b-4f74-b3bf-1a42f632c307/1/HE5qHTzB5PPcAauWyUGWucSdKRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f6:4a:3c:c0:a9:0f:a6:40:69:30:7a:4c:a4:b1:f9:8b:3c:
1a:d7:b1:45:4a:b0:b3:dc:ad:70:5d:29:6e:48:ca:8b:3b:0a:
b9:d4:66:52:e7:e3:7f:d2:47:1d:7f:5c:89:83:6d:92:39:67:
6f:f4:31:6b:26:c0:24:96:22:78:a9:55:e7:14:8a:69:6b:8a:
2b:bd:99:65:08:38:06:0e:ad:1e:7c:4a:f1:4b:67:8e:1a:77:
22:05:5a:e2:1d:14:17:d5:02:39:17:7b:d5:10:a0:f3:49:98:
36:0a:ff:ad:ef:c1:bc:d7:cb:25:11:8d:97:48:f8:2f:e4:77:
88:0f:7e:58:d8:13:bb:ae:bd:aa:13:9c:49:d5:99:2c:46:8c:
a1:00:5e:05:d5:e8:8e:86:07:73:19:10:0f:87:92:27:8f:2e:
b3:2b:49:47:5e:b7:cc:87:84:13:50:38:fb:11:d0:d9:29:c8:
52:48:1d:5e:c1:4d:bd:88:bb:18:6f:25:e3:00:e5:60:42:8b:
4e:d9:81:78:e9:95:93:c3:24:77:0b:6c:7b:7c:16:29:fb:ed:
08:f7:65:84:a3:e7:5b:37:9e:b7:dc:6b:8c:88:95:7c:04:2d:
00:d5:28:63:d0:a8:e0:cc:92:d3:68:08:bd:ad:4c:01:c2:f4:
60:d8:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:36:46 2026 by rpki-client