
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: EuVsq6AUfi7Tw3u3NpKHogIo+c4QDzHBwLYpBKVubdA=
Subject key identifier: B7:D5:F8:B0:20:0C:A9:2D:20:B3:46:9B:5C:C0:17:D3:97:CC:54:D6
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 019FAB9A931931402EF05176400618055663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 1872
Signing time: Wed 29 Jul 2026 02:01:01 +0000
Manifest this update: Wed 29 Jul 2026 02:01:01 +0000
Manifest next update: Thu 30 Jul 2026 02:01:01 +0000
Files and hashes: 1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: VnByMX7t/T0Gy94uwapfJrkbtcSk5A6y0LeURTkJNjc=)
4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:93:19:31:40:2e:f0:51:76:40:06:18:05:56:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Jul 29 02:01:01 2026 GMT
Not After : Jul 30 02:01:01 2026 GMT
Subject: CN=b7d5f8b0200ca92d20b3469b5cc017d397cc54d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:92:a6:dd:82:7a:2d:d2:5b:f9:fe:11:24:
61:88:b3:ab:f2:75:80:aa:0d:53:31:93:b2:81:e3:
c2:88:f4:80:cc:9e:be:66:8f:b3:6f:20:e6:5c:1a:
cf:5b:0d:76:5c:00:5b:c4:ac:d3:29:0c:85:9a:b0:
00:65:83:08:e4:88:7f:2f:c9:ce:3a:ea:e0:51:ed:
f0:8f:4d:f4:b3:10:b3:29:36:4f:3b:bb:e1:60:d2:
72:5e:3a:24:c8:19:54:ff:66:92:41:ea:ff:9d:c8:
0c:20:fd:9b:41:5e:a1:2e:63:1e:7b:49:77:30:c3:
f4:78:ac:6d:5d:44:d0:57:7a:96:3f:c5:6f:b1:3e:
aa:6e:1e:82:c6:78:df:4b:bd:5b:eb:0b:70:5f:d5:
6f:4d:47:2b:db:cb:57:ca:00:cc:e6:72:75:96:2a:
7e:ce:1d:a7:9d:34:78:e1:03:f6:f5:be:aa:f5:0b:
97:61:8c:6b:b8:62:05:e7:46:c4:43:a0:fd:03:f8:
5d:fb:cd:9c:82:a4:f7:3c:a0:5d:5f:3a:35:b4:d2:
69:09:93:a6:a3:75:21:c5:fa:7b:b8:ac:7d:6a:3b:
da:ce:12:e6:49:fd:ad:07:c8:8f:a0:1b:8a:9e:ee:
db:ca:14:56:f2:7e:6c:c5:2d:c6:7f:fc:cc:84:53:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D5:F8:B0:20:0C:A9:2D:20:B3:46:9B:5C:C0:17:D3:97:CC:54:D6
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fd:11:b3:2d:47:3c:c5:e9:af:ec:04:40:11:5d:70:62:a4:
32:06:15:ed:2c:b2:16:fe:ee:b0:5d:11:58:8e:0e:e8:92:47:
16:ae:c3:60:d9:d5:71:b3:b7:a7:da:32:a2:72:c0:11:47:7c:
2c:78:61:33:1f:57:eb:61:a5:c2:a6:f5:db:31:b4:92:36:78:
a2:76:88:87:44:c4:ac:70:6c:8b:9e:71:e3:3e:6e:06:81:c6:
7a:95:6d:33:4d:2c:2c:7e:2a:b3:bd:f0:fb:32:28:95:bb:0c:
cb:85:33:9f:d6:2e:a6:e6:88:31:68:df:ca:50:3d:22:07:80:
60:b9:2b:26:22:ce:69:b4:b4:fe:64:b0:08:ea:93:1f:fc:56:
08:52:9f:16:6c:28:c3:34:3d:66:45:81:03:92:36:3f:cf:71:
d1:22:d5:60:e8:e8:e1:36:56:2d:e2:0d:2c:14:23:af:ef:52:
42:97:b8:72:09:68:0f:20:82:af:d0:53:60:04:83:b2:ca:61:
ec:1c:f3:79:cd:12:41:d8:66:6f:2b:cb:2b:8f:38:3f:82:b2:
94:10:9c:00:0d:d9:77:06:ac:fb:fe:1b:44:37:b7:c0:b0:b1:
bf:c3:25:37:e4:b9:99:d9:0e:9d:ce:ee:6c:8e:21:a9:f3:a3:
4a:2e:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:27:53 2026 by rpki-client