Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
File: HRxS8VUvbqDwZNejt521wc8Wa9A.mft (raw, json)
Hash identifier: 9OGGV5T+JwryTt8/Xlh6LH8MIwGwFjg9rPfd03l5qi0=
Subject key identifier: 7E:7B:C6:03:04:D1:FD:46:EB:87:57:33:03:F2:82:3C:4E:16:FB:11
Authority key identifier: 1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
Certificate issuer: /CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Certificate serial: 019FAD51E2909302A2D1F3E00D16E461FEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
Manifest number: 1969
Signing time: Wed 29 Jul 2026 10:00:52 +0000
Manifest this update: Wed 29 Jul 2026 10:00:52 +0000
Manifest next update: Thu 30 Jul 2026 10:00:52 +0000
Files and hashes: 1: HGJ3ZEnNk3YpVjp51uFW7fVRLgc.roa (hash: cUV79+nq1UfEgnpECvrj1jXV8gIvKA75fQt4Y8wK7Xg=)
2: HRxS8VUvbqDwZNejt521wc8Wa9A.crl (hash: JPhEjFReQUA0eu8vXXlC46Iis8JDROzDOYC423EqMFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:e2:90:93:02:a2:d1:f3:e0:0d:16:e4:61:fe:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d1c52f1552f6ea0f064d7a3b79db5c1cf166bd0
Validity
Not Before: Jul 29 10:00:52 2026 GMT
Not After : Jul 30 10:00:52 2026 GMT
Subject: CN=7e7bc60304d1fd46eb87573303f2823c4e16fb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:58:76:a5:c8:6a:09:03:af:00:54:fb:72:
06:84:3e:b1:38:3d:9f:4d:62:5b:05:89:69:8d:19:
c9:03:6a:25:00:ff:0b:0d:9a:ff:86:8d:ef:89:c5:
5b:83:2b:8f:c2:a5:3d:05:bd:00:80:f0:e2:ff:27:
84:fa:7b:3c:4f:2c:a5:5a:48:f8:a7:88:94:59:c8:
97:c2:7d:b1:12:83:ae:d7:66:7e:b1:70:0a:d3:8f:
b0:59:b0:6e:b2:b7:66:4f:d6:40:8c:ed:f9:50:ac:
ee:48:2a:3d:57:f5:08:13:d4:e8:58:b7:25:fb:64:
bc:0e:69:20:95:19:f8:9a:ca:69:90:79:b6:b5:e2:
e3:f9:78:b9:79:30:f7:fb:3a:3a:25:91:de:0b:5c:
42:ad:2f:30:02:a4:88:a6:11:50:8e:ff:ff:43:f2:
20:a8:62:09:a3:4f:48:dd:40:8f:2d:1c:38:3c:c2:
39:6d:94:e1:ff:bf:5f:ed:00:e1:6a:93:80:dc:ba:
ea:1c:9b:11:fd:05:49:b0:b0:26:1f:7b:d0:f0:69:
a6:3e:50:34:b7:4e:b0:81:22:bf:46:31:89:12:da:
ff:94:af:07:1f:96:03:e2:51:d4:49:43:b6:0b:fa:
71:a8:d0:1a:c7:85:c7:4a:60:e7:23:66:cc:47:bd:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:C6:03:04:D1:FD:46:EB:87:57:33:03:F2:82:3C:4E:16:FB:11
X509v3 Authority Key Identifier:
keyid:1D:1C:52:F1:55:2F:6E:A0:F0:64:D7:A3:B7:9D:B5:C1:CF:16:6B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRxS8VUvbqDwZNejt521wc8Wa9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/64f539-feda-49fc-a922-201d5a9bb8aa/1/HRxS8VUvbqDwZNejt521wc8Wa9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cf:9e:a4:3f:f9:b5:e5:69:f2:7a:2f:e9:bd:be:e3:4a:a5:
c3:26:78:6c:5e:fc:5d:8f:f8:c6:c5:10:b7:5b:0d:88:f9:53:
03:d1:3f:53:e5:c5:8d:5c:31:d0:67:5a:1d:54:a0:83:cf:bc:
35:0c:6f:4e:7d:dc:a0:f8:51:6f:fb:6e:25:e2:c0:25:01:8e:
aa:94:12:fd:89:27:95:a6:9a:b6:d2:20:59:7a:2e:e5:43:9d:
87:4f:7f:5d:ea:54:dd:dc:a3:76:00:2f:6b:82:6c:62:18:76:
9a:0b:3b:e5:ca:96:af:90:7f:c4:45:4d:05:2b:71:00:6f:47:
b4:e5:f7:cf:f8:38:b6:c8:aa:b6:e9:7e:50:74:08:22:2a:e4:
31:02:db:d7:57:3b:52:49:a6:59:97:fe:d1:a8:be:db:3f:e2:
bf:6a:58:77:2f:1b:8b:27:e3:59:2a:1c:b5:32:42:33:17:7c:
fe:82:42:e2:9c:8a:11:4b:6b:3c:95:95:b9:50:9b:cb:be:04:
4c:5f:b1:79:49:61:60:bb:57:c2:8c:1d:09:59:f5:63:ca:3a:
6d:5f:e8:07:fb:d3:17:a9:48:a9:4b:e9:01:53:95:a8:42:24:
96:ec:59:0c:36:fd:15:3c:5a:d5:e4:9d:ce:05:8f:07:86:a2:
cc:85:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:34 2026 by rpki-client