Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: jgBCZct6/oh1Cs7+fgp8Ql/rUTn4NgDQhH9IpM99fys=
Subject key identifier: 7E:34:33:EE:7B:4F:7B:01:04:CD:0F:8F:00:A0:08:CC:71:43:97:A3
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 019FA8D03A85ADF00B0FE620EDF10CFC9311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 1964
Signing time: Tue 28 Jul 2026 13:00:46 +0000
Manifest this update: Tue 28 Jul 2026 13:00:46 +0000
Manifest next update: Wed 29 Jul 2026 13:00:46 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: f5d61i5SA//Rbzo34wR1K5OkQ8vlN2VdK78ed0caXhM=)
2: jeVYoAlmG_sEvFtGiKgaPSf17pw.roa (hash: 1XW/CIVJ1Xt4kEijZkBhaCtanmPdLXj+hDRhskw3N+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:3a:85:ad:f0:0b:0f:e6:20:ed:f1:0c:fc:93:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Jul 28 13:00:46 2026 GMT
Not After : Jul 29 13:00:46 2026 GMT
Subject: CN=7e3433ee7b4f7b0104cd0f8f00a008cc714397a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b6:a4:36:17:67:08:64:69:2f:94:83:76:16:
56:f2:64:c2:f2:4c:8e:b5:04:28:cc:c5:5f:a1:b6:
bf:b6:5f:dc:9c:91:6c:84:5d:88:8a:af:48:eb:c5:
67:d9:6d:33:37:26:20:91:03:99:f9:41:39:dc:54:
f1:bc:b0:96:1e:74:14:a9:cb:df:a3:c3:c3:bc:70:
9d:fd:b6:11:dd:a5:15:b1:0b:a8:60:91:64:d2:44:
5c:8a:69:47:3a:3c:87:2e:78:f1:ad:6f:9b:4b:23:
d5:60:23:e4:f0:dc:26:b4:42:c1:b5:93:50:5a:47:
b4:a9:70:f1:ea:44:16:e7:1e:67:44:c7:21:9f:94:
fa:3e:da:fd:67:93:24:3a:b0:a0:99:19:11:26:f1:
64:2b:d3:3a:98:b4:8b:bc:59:56:83:6e:0f:77:a2:
80:4b:15:e4:ff:ab:ac:89:15:46:97:25:7e:ae:7f:
78:ce:a1:16:18:b4:83:8f:c7:7e:bc:cb:e8:e2:00:
c9:ff:24:dd:eb:44:5e:a6:66:20:3e:9b:c3:52:e6:
65:e6:53:59:26:97:89:68:4d:da:c5:bf:fd:ee:14:
a0:09:bd:51:db:e3:75:0a:e1:98:1d:e2:be:bc:63:
3e:02:07:23:fa:f3:98:f5:d2:86:47:d2:76:a2:87:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:34:33:EE:7B:4F:7B:01:04:CD:0F:8F:00:A0:08:CC:71:43:97:A3
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:84:83:10:5f:ed:03:92:5a:93:0e:45:f5:2e:8f:f1:c1:26:
28:56:04:aa:cf:3a:27:3b:de:aa:87:28:2c:a7:04:c7:d3:45:
cf:0d:7b:74:f2:c4:59:72:bb:53:10:97:1c:37:37:5f:65:63:
51:fd:85:f1:70:11:d6:d6:d4:b1:1d:d0:52:8b:2a:8a:a6:f1:
22:4c:17:fd:3c:9f:80:e4:8d:12:39:36:e0:82:c0:00:bf:a2:
45:3b:dc:60:99:27:66:80:81:2a:d1:91:ae:68:cb:a8:3f:e2:
09:db:50:b4:3b:fc:a3:9e:63:ab:5a:c4:eb:2e:60:03:44:17:
6a:76:59:1f:a9:f5:31:29:8c:9c:3a:4e:c0:95:5a:c1:b7:48:
c2:fc:19:3c:a7:f2:70:6c:ad:d9:9f:fb:39:7c:8a:bb:b1:a9:
f2:b5:73:b2:77:fa:b5:5f:73:32:90:91:d4:d2:0d:82:d9:02:
e3:7f:5e:61:5a:b9:92:f6:03:50:77:af:5c:e4:11:89:88:a2:
a8:cd:8b:ca:a1:e2:82:a9:69:f3:42:78:36:49:b9:1c:8d:ce:
2a:cc:77:6c:d6:ae:49:11:83:46:b4:81:ac:dd:8d:97:dd:25:
00:86:9d:1f:a3:6b:0d:fe:ab:04:ca:f4:bd:14:ca:76:51:8d:
9c:84:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:22 2026 by rpki-client