Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: GXtJIMsFJLB+I6Q4UChgUCobNbRgQ8j1a2vns8ml/lA=
Subject key identifier: 01:14:77:BF:43:F2:84:CA:37:0D:27:2E:0F:CD:E1:12:F4:EE:F7:11
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 019FAB635E0E8B46FED25D47B94DD8BF8B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0A23
Signing time: Wed 29 Jul 2026 01:00:43 +0000
Manifest this update: Wed 29 Jul 2026 01:00:43 +0000
Manifest next update: Thu 30 Jul 2026 01:00:43 +0000
Files and hashes: 1: 6Zls-m6M9cBINWFd4w7uZTmGtY8.roa (hash: G1IdsClkRwxJrpDcDQsqLk4FP+v4Gfd2cicmc4XSPyc=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: uSeshrLPLa8KCXYG0eopbLnH9jzAXxQAAIKOGzMbWEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:5e:0e:8b:46:fe:d2:5d:47:b9:4d:d8:bf:8b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Jul 29 01:00:43 2026 GMT
Not After : Jul 30 01:00:43 2026 GMT
Subject: CN=011477bf43f284ca370d272e0fcde112f4eef711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:17:6b:b5:b9:a0:09:67:2e:60:be:0b:89:9c:
ff:4c:7d:28:dd:47:57:46:a7:12:47:3a:45:eb:dc:
0d:23:c0:5d:38:c1:2b:94:0c:24:b3:76:54:6c:35:
51:d2:1b:29:41:47:8b:4b:6f:56:c3:59:94:2f:d5:
54:e6:21:3b:dd:dc:76:d8:cc:2e:a6:f2:f8:7e:c0:
53:4e:ee:83:12:2f:75:9a:ae:77:62:e2:f6:97:f5:
c1:44:29:3a:1c:70:49:e5:26:26:59:08:aa:8b:dc:
d2:88:97:6e:ab:ca:c5:35:e9:d7:f3:a0:6d:46:91:
a8:de:38:05:cb:f0:1a:05:cb:d6:24:ef:b1:b5:b0:
b8:7a:c5:e5:88:0f:af:b4:30:6a:3e:7f:c2:b9:4f:
1a:cf:fe:33:49:c0:e7:8d:01:b1:ff:b1:c9:fe:73:
db:11:0c:21:91:3c:14:4a:68:d9:a5:17:97:a5:e7:
df:cb:8b:2d:03:70:b4:3b:da:3a:12:0b:5c:b7:36:
23:f8:41:1c:5d:98:69:ca:60:5d:3f:2b:ff:ea:98:
df:7c:8f:61:98:2b:77:1b:6c:a7:18:ef:95:0f:f3:
ab:ad:15:b4:90:1a:83:bf:4b:7e:7b:3c:d6:93:fc:
e9:67:df:4b:bb:17:ab:a0:8f:16:a7:80:87:06:1e:
22:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:77:BF:43:F2:84:CA:37:0D:27:2E:0F:CD:E1:12:F4:EE:F7:11
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:44:2e:1f:c7:34:4c:dd:c4:15:88:57:ac:ed:4f:47:f0:0d:
cc:42:11:33:9f:f1:00:3f:a1:2a:c8:fe:ea:19:8f:67:2b:b9:
3e:fc:3f:21:34:a8:d6:b0:52:5c:76:84:6d:67:17:c6:b6:b9:
0b:a7:33:8b:ec:f4:54:0e:7b:8e:75:89:85:7c:fc:9f:d5:4a:
ff:70:d5:91:21:92:50:4b:03:9b:f8:78:4e:01:e6:16:50:68:
ea:2d:9a:d8:38:09:07:c6:12:fb:cc:b6:09:b1:30:38:1c:d1:
72:3e:68:30:3b:d7:2e:37:f2:ab:6e:96:8f:f5:39:e2:8c:04:
3f:70:06:8e:83:20:21:b1:27:23:7e:11:36:db:f5:2e:39:e8:
36:ef:c6:70:46:4d:e7:a9:52:73:fc:51:ae:c7:f1:a6:b4:77:
26:35:78:a6:b8:aa:54:ac:d3:3d:25:26:66:f3:5b:db:c6:b4:
b5:37:3b:53:42:d6:56:3b:98:5d:ea:f6:c3:14:43:18:88:be:
2f:04:8d:5c:e7:eb:e4:ea:d0:e0:ca:54:61:be:9d:23:e7:33:
d6:05:62:be:a9:92:8b:f1:72:3c:a9:be:09:61:21:19:cf:7c:
27:61:f4:37:fd:e7:0d:55:fa:f3:4d:dc:08:84:73:8a:08:e4:
06:61:d8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:29 2026 by rpki-client