Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
File: hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft (raw, json)
Hash identifier: MP/HJfcb3XEceVrTSXVXkmwV91yWuZ75fnXWr2FeL7Y=
Subject key identifier: B3:6D:10:57:F9:7B:DF:5D:F9:C2:A1:C2:5C:11:41:8E:A3:F9:26:5A
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 019FA8CFEAF707094FD2E9291D3FDC62C3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
Manifest number: 0312
Signing time: Tue 28 Jul 2026 13:00:26 +0000
Manifest this update: Tue 28 Jul 2026 13:00:26 +0000
Manifest next update: Wed 29 Jul 2026 13:00:26 +0000
Files and hashes: 1: hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl (hash: JjnauX87O3FSpxJWL3pYMoHvjn0v5rE+ZvWmNHFpiVY=)
2: ouVL9f4Kp01QdxrOilk4XOoPv2E.asa (hash: BkjPDfglBBFYk69JDCryPzYQnQSRslBsIgc8pXRMNs0=)
3: qEfXUfQHl_EsP_P4Lk42SnqgMYI.roa (hash: 4IfXp7dyRNjrRdAgPWfTKulvifdvK1AOsusHD7QgNHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:ea:f7:07:09:4f:d2:e9:29:1d:3f:dc:62:c3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Jul 28 13:00:26 2026 GMT
Not After : Jul 29 13:00:26 2026 GMT
Subject: CN=b36d1057f97bdf5df9c2a1c25c11418ea3f9265a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:12:bc:31:e2:fd:54:49:36:eb:ee:0e:42:
01:c1:57:1a:57:e9:29:06:70:15:9d:31:43:bd:f2:
53:62:71:9e:1f:2a:58:a0:a6:e0:2c:ec:57:3e:71:
ed:d6:7d:9f:db:be:72:cf:75:05:5f:6f:a9:fc:e0:
78:27:30:0b:05:52:91:1a:94:e2:b1:4e:2e:cc:57:
73:34:64:ac:93:36:b2:c8:11:40:d7:22:9b:a1:2e:
46:21:df:25:cf:d3:0f:2e:9e:e8:79:45:3c:05:5c:
79:ed:0e:f9:dc:7d:e3:fb:9a:ee:57:28:44:21:c7:
a2:a5:19:bd:b5:f7:81:26:2b:02:88:f6:76:ea:71:
b0:c9:1e:2b:55:fb:1c:df:4e:e2:ae:62:74:0d:d6:
8a:5a:c7:ed:ad:51:e5:3c:c4:a5:7d:90:8d:d9:3c:
99:3e:cf:13:6c:f5:9a:56:7d:7a:11:39:7b:fe:f0:
90:c6:8b:e4:1e:48:b9:b9:06:e5:f6:e7:99:3a:c3:
ad:34:c1:af:ac:85:99:76:cf:e8:c1:c6:f0:1c:b8:
b2:8a:e0:b9:62:6b:93:ff:8b:28:34:fe:f5:1b:9b:
93:ff:3e:c7:54:45:3c:f8:54:78:e9:d7:6d:e9:f5:
16:be:ab:58:7a:aa:c1:f9:ed:3b:78:16:b3:c6:db:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6D:10:57:F9:7B:DF:5D:F9:C2:A1:C2:5C:11:41:8E:A3:F9:26:5A
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:75:17:41:e4:34:3b:29:7f:1e:a9:32:e3:14:c7:50:ef:38:
97:39:95:da:0f:d3:7f:00:d1:da:a2:a7:32:c2:7f:ea:d7:52:
06:7d:92:f7:fe:60:57:93:ba:ed:30:01:41:5a:d4:50:7c:c9:
23:98:9c:cc:ac:cb:55:a8:03:9d:98:14:35:9d:90:10:d1:ec:
33:b7:e2:bd:32:5c:4f:16:25:5e:d5:fb:1e:9d:31:c3:9f:4e:
38:c3:b8:cf:3b:4c:ef:bb:fe:91:ac:49:54:56:6b:d0:92:35:
75:99:b6:2d:7a:c9:6f:02:1b:e7:42:f6:81:74:ba:bc:0d:92:
a8:05:4a:0e:b3:66:06:fb:41:0f:d8:19:78:84:eb:88:14:8a:
2b:88:88:ee:44:49:3d:f7:19:b2:41:3a:4f:fb:c0:bb:6c:5a:
25:c0:8d:1e:fd:f0:a3:20:4e:c5:fb:d4:33:9e:0d:f7:57:99:
a9:51:c9:f3:41:d0:a5:54:34:a3:1c:8b:d5:4a:8f:ae:d0:6c:
69:4c:aa:ed:70:1e:03:7a:8f:28:e7:94:74:40:3e:bf:78:5f:
c5:80:15:b1:84:35:47:5e:70:4c:5b:e5:07:99:14:a8:0f:2f:
26:2c:27:b2:78:51:b9:ff:d4:67:c0:98:66:4c:73:49:e1:8f:
71:19:93:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:12 2026 by rpki-client