Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
File: HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft (raw, json)
Hash identifier: +FjpK5egdHwWY1DOLkqskYhVvnU1kUlGbvugOuaZJPw=
Subject key identifier: CE:40:8C:89:7A:F5:32:67:26:AF:62:C1:DF:1E:EC:F8:9A:BB:13:3D
Authority key identifier: 1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
Certificate issuer: /CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Certificate serial: 019FAB63835B8A12AB6468396524CC157A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
Manifest number: 1966
Signing time: Wed 29 Jul 2026 01:00:53 +0000
Manifest this update: Wed 29 Jul 2026 01:00:53 +0000
Manifest next update: Thu 30 Jul 2026 01:00:53 +0000
Files and hashes: 1: EUQPSRByg2QMDNqMMHo2oQZNlbY.roa (hash: H+d5ds358KBr4HrcZ0lWa3uis3q9gOlPohiMxXosS7w=)
2: HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl (hash: hsJIpgmUS9D0jxqHAr+v+y2Mit7iG6OEIn4zJ7q3/ys=)
3: zj0oGLpPGtWJ6IpHxLEQfH2DpKo.roa (hash: ctimHgQjwKly2d3TDS9AzpF0v6QUFIibm4H4p93sG5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:83:5b:8a:12:ab:64:68:39:65:24:cc:15:7a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c53911705ae860c299e6a1a412e50eda1c8228e
Validity
Not Before: Jul 29 01:00:53 2026 GMT
Not After : Jul 30 01:00:53 2026 GMT
Subject: CN=ce408c897af5326726af62c1df1eecf89abb133d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:fa:33:3a:f4:ad:df:6c:49:a9:d5:b1:71:
59:b0:aa:c7:f9:77:ea:e4:6d:95:73:36:71:98:ea:
d9:69:10:79:5a:06:68:9a:bb:a5:77:36:20:6c:b4:
48:e9:8a:6f:7b:7a:2c:77:b0:34:e9:38:95:b7:ce:
92:64:61:1e:f9:32:01:6f:cf:2d:95:1c:2c:c6:8c:
df:24:3a:e6:e5:31:1f:8e:b1:cc:93:3e:93:6b:ce:
95:ce:53:74:4c:4d:ad:9e:50:af:dc:83:f2:a3:a7:
55:65:76:25:d5:53:10:a3:0a:23:12:24:19:85:3d:
e9:09:c9:26:a1:a6:e3:a1:d3:43:2b:e4:6c:ff:fb:
97:76:63:b4:dc:43:b0:63:b7:c0:2e:6e:d2:54:7c:
5d:67:3a:44:58:e3:c2:ca:84:64:c7:6a:3e:da:a3:
8d:85:7c:d9:d8:b1:46:03:98:a7:62:32:89:44:f5:
63:91:73:2f:fb:df:00:58:9b:2a:ba:09:90:46:e1:
db:70:e8:d6:65:84:50:a2:70:47:e3:6e:97:40:92:
8c:68:2a:49:d4:cc:50:40:95:5f:3f:7d:3e:3a:48:
24:98:83:77:20:11:2a:d3:0c:ce:f6:a1:f9:20:f1:
c6:9a:67:34:0f:92:f6:7b:3c:b7:7c:c4:3f:83:06:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:40:8C:89:7A:F5:32:67:26:AF:62:C1:DF:1E:EC:F8:9A:BB:13:3D
X509v3 Authority Key Identifier:
keyid:1C:53:91:17:05:AE:86:0C:29:9E:6A:1A:41:2E:50:ED:A1:C8:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFORFwWuhgwpnmoaQS5Q7aHIIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ad6ef5-3216-46cb-965e-3e7f8308cc55/1/HFORFwWuhgwpnmoaQS5Q7aHIIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:cc:37:e8:a4:63:f7:83:49:54:db:26:ff:b2:fc:38:f2:6b:
26:31:da:4b:ff:3b:29:ca:e1:e7:52:09:79:51:b9:69:9d:da:
e8:77:20:6b:15:2e:2a:db:51:c1:29:cf:ec:16:b7:0e:4c:75:
10:8e:1e:5d:b4:d1:b4:88:ca:17:ba:36:1c:b6:43:30:24:75:
1e:09:81:1f:12:1e:84:f7:57:90:cb:32:72:29:85:3a:d5:82:
8b:b6:10:ae:9e:34:06:2d:a0:2e:54:33:97:d0:bf:34:f8:1b:
cb:12:35:c8:99:ba:85:0e:3e:33:7f:66:5d:ad:0a:3e:52:1b:
32:b2:4c:63:31:fe:d4:ad:82:f6:5c:33:c3:1b:dc:00:ad:4f:
40:53:58:ea:cf:fd:fe:87:45:62:b5:34:67:48:70:d6:20:0e:
dd:46:61:4e:51:ed:f6:31:29:8c:38:7d:8f:be:ae:19:13:cb:
67:af:b2:2e:98:b6:35:a9:da:f7:1e:ce:ef:c7:c3:12:51:87:
04:60:4c:04:63:8e:bc:73:b0:3c:ad:61:4d:b6:1c:b7:7a:69:
be:88:22:a2:f9:1f:9d:b0:9f:27:cd:37:00:f0:f3:b6:41:29:
25:c2:a5:d5:62:c4:31:66:2b:a3:7c:88:c9:f8:70:69:7a:f3:
dc:c3:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:00 2026 by rpki-client