Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: vdzFizhCXsCPa+009wR/Qwdm40gB2iVBfjrTDlFbRmY=
Subject key identifier: 52:85:9D:C8:DC:DB:2A:52:12:EA:D0:A0:75:50:88:C4:CE:23:61:03
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 019FAA508836056D72BA5387DB77417F8192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 20:00:32 +0000
Manifest this update: Tue 28 Jul 2026 20:00:32 +0000
Manifest next update: Wed 29 Jul 2026 20:00:32 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: au_k5KTkHwmYgyGwQL9kaGDMGdc.roa (hash: TQ4e7aFpXjYOcX/z8GmwxlZOtaffODMat2Hj3Al3L2Y=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: Z+VPBZOwXuiXfElTvW5Pn86T7ZcItxQRABHdWLDtSKU=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:88:36:05:6d:72:ba:53:87:db:77:41:7f:81:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Jul 28 20:00:32 2026 GMT
Not After : Jul 29 20:00:32 2026 GMT
Subject: CN=52859dc8dcdb2a5212ead0a0755088c4ce236103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:19:4f:20:d9:2e:a3:d0:8b:c4:20:29:79:77:
c3:84:d6:9b:62:eb:06:f7:3c:68:c1:ef:ee:6d:91:
b0:84:53:2e:61:ec:7b:99:f3:18:08:0e:f2:80:aa:
2e:37:b5:a5:ec:27:61:b9:70:cd:53:18:fa:e5:0d:
f7:81:c8:1d:36:4e:4c:63:6d:9d:41:25:ec:e9:4e:
e2:2f:13:16:76:92:55:b1:40:82:55:96:c7:2e:54:
58:33:24:c7:26:d8:26:e3:dd:9a:bf:20:2b:d8:3e:
1f:a2:52:63:f1:29:43:9a:d6:b0:b5:2a:8b:fd:94:
fe:9b:a7:60:81:63:ab:7d:f8:d5:71:b2:49:76:b0:
b7:3c:37:2c:b4:cf:8b:34:37:64:97:ad:9d:83:ae:
6c:b2:11:6d:37:5e:56:a6:e4:71:0f:c9:3d:c6:d4:
69:22:c6:52:c3:84:97:76:8e:d7:f8:36:c4:f0:53:
dc:74:7a:d4:57:a2:f8:44:5d:97:22:dd:ea:1f:24:
7c:7d:9d:6f:59:6c:20:2e:c0:1c:7f:00:51:6e:71:
97:76:d7:35:e9:06:4b:e7:6b:08:af:6c:c0:f4:d2:
48:69:1c:fb:a6:d2:d3:50:6a:9a:b4:91:0b:51:c8:
4f:6a:80:1e:18:4a:26:64:71:97:3c:94:eb:bc:6f:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:85:9D:C8:DC:DB:2A:52:12:EA:D0:A0:75:50:88:C4:CE:23:61:03
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f6:3a:59:a8:45:83:0b:5a:07:40:ef:d3:77:32:58:e5:1d:
56:be:58:d4:aa:9c:17:1c:12:16:99:de:c3:02:b8:cb:27:d0:
a7:e0:60:db:44:4d:a9:02:e4:73:a6:2a:80:17:d8:ed:77:2b:
bf:e2:2c:86:d5:fd:94:7a:60:91:c1:a0:be:e8:6e:0f:df:df:
8d:e7:0c:df:42:9f:fb:74:24:b1:b1:ca:ad:06:5c:e0:44:85:
26:24:a6:79:71:93:85:9b:c9:0f:18:51:ab:d4:20:dc:8c:e7:
cc:77:50:69:ae:e6:0e:1c:03:f0:3c:da:6b:20:b5:ff:f4:6e:
6c:ac:c3:93:36:3c:3c:99:b6:d4:2c:8e:6f:b7:5a:63:99:78:
07:71:78:14:33:d6:dd:fc:da:cd:11:64:e6:86:e5:24:07:a9:
c3:ab:a7:de:78:85:31:e5:f2:df:37:7e:61:67:34:b3:e5:27:
5e:c0:17:91:58:c8:e9:33:10:d9:67:97:86:40:87:09:de:5d:
80:7a:ad:1e:74:ca:50:d2:1b:d9:0a:96:08:87:54:ac:41:b4:
26:39:86:44:25:06:f5:31:60:83:55:b9:a7:07:2a:83:c8:a9:
ef:fb:88:ae:9d:d3:3e:de:b5:31:87:0d:e7:1a:12:af:3d:26:
c3:ab:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:42:58 2026 by rpki-client