Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: uN9SKJr3aSocjxLPOIV6FwE09OjdhJGQ0yByZkXlz7k=
Subject key identifier: 53:AC:D0:0F:63:C2:30:BC:21:B8:B3:EB:EB:14:4C:54:37:33:61:01
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 019FAAF569E55B6F6AA11C573099AA87CDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 0B27
Signing time: Tue 28 Jul 2026 23:00:37 +0000
Manifest this update: Tue 28 Jul 2026 23:00:37 +0000
Manifest next update: Wed 29 Jul 2026 23:00:37 +0000
Files and hashes: 1: hCqBnwi3tLGPnGEkwFbaiiOi1Tw.roa (hash: ipklKvl4vE4704mx0vkFCsJ5FNBwNV4h3Vvuy2DJyMQ=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: Seg+a7CwxBpIsHeV+krhvWVUxGEIMaIwNs+/ciF0RY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:69:e5:5b:6f:6a:a1:1c:57:30:99:aa:87:cd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Jul 28 23:00:37 2026 GMT
Not After : Jul 29 23:00:37 2026 GMT
Subject: CN=53acd00f63c230bc21b8b3ebeb144c5437336101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:52:83:fd:26:8d:21:1e:85:40:09:af:a3:
41:c8:62:cd:08:07:46:4e:56:c1:3a:2b:0b:b4:00:
51:ef:cb:b1:6e:06:47:4e:ed:8c:f7:5a:cd:c3:b9:
a7:3f:4e:31:cc:dc:06:0a:14:56:25:7b:d3:05:65:
5b:7d:77:9f:c6:cc:eb:99:1f:16:f3:87:c8:e2:96:
52:82:67:e9:96:0b:db:eb:e7:29:0f:ff:98:28:21:
11:9d:5b:c6:44:dd:17:0a:53:7f:cc:37:fc:37:30:
6c:b6:91:1b:7c:07:48:e0:85:b3:92:01:39:c8:e9:
f3:ff:f8:7f:b8:13:13:6f:77:50:79:1d:b4:69:a4:
05:e4:8f:94:51:f2:70:1f:43:bf:25:b2:98:be:c0:
0a:aa:fc:a5:67:08:77:57:75:3c:2e:a1:56:23:e6:
b6:6b:22:ad:70:c3:ae:36:b9:ea:7f:59:bd:e6:c5:
1a:94:4f:66:a7:7d:d0:65:99:36:c2:7d:97:25:ce:
57:95:49:3f:30:9b:88:4f:c4:3d:4b:04:47:9f:76:
b2:80:9c:0e:bb:16:0e:36:a6:f4:8d:34:94:5b:97:
69:30:89:fc:6d:6e:93:c9:9b:d9:8d:ed:90:ee:7e:
f3:f5:16:e7:f9:52:a2:b5:af:f3:05:4d:a8:d5:68:
d3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AC:D0:0F:63:C2:30:BC:21:B8:B3:EB:EB:14:4C:54:37:33:61:01
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:26:0c:fc:03:3a:a8:de:1e:4f:17:ef:4d:5d:d0:c7:71:49:
1d:b6:d8:47:7a:11:8a:4f:65:b1:ba:dd:ea:f1:cc:44:94:68:
69:cc:73:52:2f:05:a4:6e:be:1d:a4:91:8e:66:62:31:d9:b3:
4a:3e:e8:68:18:1f:a9:a5:2f:57:2d:c0:3a:3d:13:e2:45:e6:
b1:88:66:24:c6:f6:f6:b2:ee:2e:93:16:3f:37:ad:62:15:54:
99:f5:b0:56:03:be:8e:f3:d3:63:74:c7:38:61:06:b4:60:3e:
e6:ae:25:75:74:fe:c2:c8:34:11:fa:a8:62:f2:90:74:10:f1:
c2:88:98:99:55:b6:75:eb:e5:20:d1:57:24:2d:0e:0d:45:4d:
8a:45:09:70:d3:70:70:76:54:b2:e2:92:95:71:c0:26:f6:46:
04:96:70:cc:f3:30:bb:97:45:b6:37:13:26:2c:38:bf:47:94:
f8:e1:e8:ab:c4:cd:67:20:e2:b1:cb:8a:f7:b7:43:1f:b9:06:
b8:bc:5d:24:2c:6e:f1:05:48:4c:76:c2:d3:4d:5e:b2:7d:10:
02:0f:c3:c2:63:e2:eb:90:86:f5:8a:f5:89:a4:7e:26:66:df:
f9:bc:a1:97:b1:59:e0:03:7d:51:b3:9a:a6:ff:93:de:51:5f:
26:e1:9e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:58 2026 by rpki-client