Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: Xy7mU3WBnZmnXFot19kdHmwayTXxl8Yodo5XEwuJY/c=
Subject key identifier: A5:D9:0E:A1:CC:AC:67:6C:18:75:CF:89:B8:CD:5B:78:18:17:63:87
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 019FA906FE9E5FE76B44E29CCB788A6581BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 1474
Signing time: Tue 28 Jul 2026 14:00:35 +0000
Manifest this update: Tue 28 Jul 2026 14:00:35 +0000
Manifest next update: Wed 29 Jul 2026 14:00:35 +0000
Files and hashes: 1: V6Mvsnc7Z774Ev5q6h6Mb-ytj-8.roa (hash: /GNFnTbzQDf+YRxBgnXt7mG8KTDdxxNld8mJ/4Y6skk=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: yi+s5aWAFKHffucRBTFvR95AQmpMOJpsBNjC38TqGjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:fe:9e:5f:e7:6b:44:e2:9c:cb:78:8a:65:81:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Jul 28 14:00:35 2026 GMT
Not After : Jul 29 14:00:35 2026 GMT
Subject: CN=a5d90ea1ccac676c1875cf89b8cd5b7818176387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3f:96:71:09:a8:e4:e6:f6:05:33:c5:19:ce:
d0:a6:9d:18:bd:2b:21:82:0e:07:23:09:ce:43:6d:
ce:67:73:f5:9b:39:94:b9:bb:46:f4:e2:90:13:a5:
f6:49:da:d6:54:ef:1a:12:45:1b:67:93:f9:75:4c:
80:25:90:50:6e:e6:c8:8b:cc:38:99:4e:4b:5c:3b:
1f:b5:f6:5b:5f:ab:03:2b:7b:51:0c:9d:10:8b:30:
e1:a6:c9:04:1c:6e:4a:ef:89:8d:a7:b7:ac:85:9b:
ec:c0:93:7f:04:04:14:8b:ad:ea:35:c2:47:a9:ae:
3b:77:f0:a8:9e:64:03:09:bd:34:06:88:d6:4e:74:
b0:77:c5:b2:68:c5:89:a9:8c:ca:37:03:93:13:47:
fc:af:c1:80:8c:a6:df:c9:5d:d7:6a:8a:26:e0:60:
60:a3:bd:d2:18:97:d6:f3:3e:9b:bb:f0:d4:47:2f:
fa:74:d1:90:dd:5b:94:bf:f4:38:2f:e2:74:ac:be:
fb:00:a7:9a:1e:73:90:dc:27:8f:02:f5:2e:df:5e:
27:37:92:0c:20:6e:67:11:bf:f3:89:18:2b:f8:99:
79:b8:1a:08:ce:d7:38:d0:59:80:5b:fb:ca:1b:15:
d6:03:b7:67:f0:d6:bb:c1:ef:c3:52:17:f9:f9:f3:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D9:0E:A1:CC:AC:67:6C:18:75:CF:89:B8:CD:5B:78:18:17:63:87
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a6:d0:10:49:5a:a1:f7:56:6b:27:12:d5:9c:7f:e4:d1:4d:
ce:56:46:94:ff:34:50:09:12:e8:d5:06:4d:a1:58:2e:93:72:
16:48:5c:2f:2f:27:46:25:f3:8e:fc:e7:c9:dd:ba:b3:3f:6f:
82:7e:16:ed:32:f2:41:12:8b:46:a6:27:85:88:56:97:f8:c0:
8a:96:d6:7c:48:72:eb:e8:ef:b1:d0:84:5b:e7:57:0b:f2:38:
6d:ac:93:ce:51:84:da:af:b7:e2:3c:00:69:d0:fa:15:11:2e:
09:46:9a:e7:fc:e3:b6:be:10:73:7a:5d:31:2f:49:7a:cf:88:
90:0d:4c:88:6e:07:50:3e:e0:c4:5c:71:f3:a5:d3:cf:58:e8:
0a:b2:ae:d1:46:12:78:61:93:f7:58:61:32:c7:57:d8:08:1e:
4c:f2:39:0f:87:38:d8:b1:44:34:a6:af:6a:d1:0c:2a:87:68:
f4:b8:14:50:7e:99:a3:09:bd:dc:76:f2:1b:9c:82:54:4c:e2:
d1:8e:8a:70:d0:f4:62:e7:97:3c:3c:07:61:15:99:22:b9:8f:
c0:34:5d:76:ee:24:45:86:7a:45:10:2c:6e:cc:18:67:54:2c:
37:e6:fc:9b:f7:70:ce:96:e9:79:d5:cb:86:86:8b:32:df:03:
ce:e3:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:49 2026 by rpki-client