Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File: hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier: 1Pv8MbLo79NV+At309Rrkm2BhtB9k8NXjnz25gP+bdc=
Subject key identifier: FA:91:C2:8E:A0:46:5D:FB:92:CD:50:10:57:5A:E7:F9:C9:AD:A9:83
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer: /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial: 019EC1EE536B6E3B6C3C37CC25C22458063D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number: 17F9
Signing time: Sat 13 Jun 2026 17:01:22 +0000
Manifest this update: Sat 13 Jun 2026 17:01:22 +0000
Manifest next update: Sun 14 Jun 2026 17:01:22 +0000
Files and hashes: 1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: XRAqzvBV2VpAxY4TbXYAnMlxmF84BqwIws81eCbsk0o=)
4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:53:6b:6e:3b:6c:3c:37:cc:25:c2:24:58:06:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Validity
Not Before: Jun 13 17:01:22 2026 GMT
Not After : Jun 14 17:01:22 2026 GMT
Subject: CN=fa91c28ea0465dfb92cd5010575ae7f9c9ada983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:58:c3:b9:01:72:5b:7e:77:8a:17:66:5e:
37:a0:38:40:ad:b9:cf:92:c3:de:77:47:0b:db:98:
65:90:5b:4f:d9:77:28:78:ae:7a:67:eb:06:26:51:
f0:cb:52:34:f2:4e:b7:66:61:79:21:a5:4e:c3:e0:
d7:a0:9d:bc:26:b0:14:af:4c:d1:f6:f0:c4:df:b5:
11:0b:b1:4e:fb:11:95:93:f7:b6:c0:08:66:53:93:
03:c4:e0:5c:76:9c:23:6c:d4:64:11:30:df:1d:5b:
30:c5:f0:14:a7:d2:e5:26:e2:c2:5f:2d:8d:e9:a5:
a1:91:af:cf:17:e3:f8:b2:a6:8f:d2:12:14:69:5f:
de:43:3d:97:a0:53:e4:9d:b9:21:44:99:e0:1c:a7:
e3:02:96:5b:ec:c4:db:e7:58:0f:b0:13:2b:c2:32:
d5:46:ab:7a:66:ff:f7:7c:88:1a:2d:21:08:f7:8c:
6d:25:36:f5:ae:16:bb:59:2c:59:68:3c:94:a5:4e:
bf:21:fd:0b:fd:ab:6f:ab:a0:69:73:6d:99:fb:c7:
d9:f9:67:f8:ab:e3:96:ce:1a:5c:c5:d0:f0:bb:1f:
5c:b4:b5:03:e6:6d:05:41:17:fc:cf:a2:60:c9:53:
ac:c1:7b:ac:ef:e6:d1:44:dd:9c:d0:5d:50:73:31:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:C2:8E:A0:46:5D:FB:92:CD:50:10:57:5A:E7:F9:C9:AD:A9:83
X509v3 Authority Key Identifier:
keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8d:60:d8:9a:7e:94:ea:69:67:ee:a0:8e:81:b6:42:d4:19:
56:76:46:a0:69:b9:7a:27:a6:fe:55:5c:ac:85:a7:c4:d9:0b:
97:ed:f0:f6:8d:20:00:e2:16:3e:95:e5:85:3d:e0:22:f4:f1:
80:09:6e:05:db:a7:78:48:e8:19:e5:5b:7a:78:5e:35:ae:80:
a3:13:45:e7:40:53:a4:7a:ab:81:f9:13:0c:08:dd:c7:fd:d2:
3e:5a:c4:4f:2c:e2:ce:ba:d6:d1:fe:7b:48:12:34:ef:f6:3c:
cb:71:71:1e:50:7a:d6:3b:41:2f:af:2a:ee:46:85:fc:17:53:
2b:0e:b2:f8:85:44:e1:94:9e:9e:5c:b6:c5:be:d8:98:9d:aa:
b7:a5:c9:5f:e6:7c:a0:6d:7d:74:e2:c9:4d:85:82:87:cf:70:
7a:ba:fe:2c:0a:22:ea:02:5d:ad:b4:ba:fd:f4:82:e1:8b:d5:
60:e0:1c:63:e0:87:77:81:a8:09:02:11:97:3e:d6:cb:05:30:
fe:05:4c:45:9f:81:27:dc:8d:8e:46:d6:81:c0:56:85:3e:8d:
7e:7c:1f:5a:72:cd:c2:6d:8c:15:79:7c:a8:c0:e4:29:e4:eb:
1c:08:2a:22:11:57:c1:1a:94:56:f0:56:e5:77:58:07:c1:86:
b9:87:c7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:57:30 2026 by rpki-client