Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
File: hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft (raw, json)
Hash identifier: pvW/5bGi8+bc39kJDXPkLztP9vtL8sYDwcP7acNHZuc=
Subject key identifier: DD:FA:29:E5:E6:12:FF:8A:9B:5C:1D:26:79:AB:C8:94:4C:D1:0C:8F
Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Certificate serial: 019FAD8850BE018CE807D931D6E72D77C574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 11:00:19 +0000
Manifest this update: Wed 29 Jul 2026 11:00:19 +0000
Manifest next update: Thu 30 Jul 2026 11:00:19 +0000
Files and hashes: 1: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (hash: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM=)
2: hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl (hash: lGRV8+uDzcHNg/3YXqYwxmBXQGQaj0jSO/hDWy0rOV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 11:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:50:be:01:8c:e8:07:d9:31:d6:e7:2d:77:c5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80
Validity
Not Before: Jul 29 11:00:19 2026 GMT
Not After : Jul 30 11:00:19 2026 GMT
Subject: CN=ddfa29e5e612ff8a9b5c1d2679abc8944cd10c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:95:c9:aa:de:e3:69:3c:5e:c8:5c:36:5c:
d1:cf:83:51:ec:fe:40:73:aa:04:1d:30:f2:77:1c:
18:40:7b:e9:da:96:2f:1b:3d:c3:a9:42:77:bb:8b:
7d:b7:8f:5e:f2:03:21:ca:f4:46:19:ff:e0:3f:33:
1d:31:e1:3f:ac:c5:4f:3d:75:47:ae:dd:f0:c2:4b:
cb:b0:08:fd:f7:97:40:ed:1b:ed:5a:3f:e3:69:3c:
ec:42:b9:dd:fe:50:aa:ad:17:6e:95:ff:17:54:a7:
85:42:43:97:96:b2:60:f5:f6:65:32:a7:54:9f:0c:
da:a4:4d:ae:7d:a9:5f:17:3d:e8:2a:d0:1b:4b:bc:
d5:a5:cc:f8:90:6f:aa:8c:dd:27:5e:1e:16:84:55:
cc:fc:11:3b:e8:56:e6:83:83:7f:26:34:f4:5b:65:
0c:b9:5c:0e:a9:31:b1:7f:c7:40:c5:42:66:6d:cc:
c2:90:1a:b2:a2:07:b0:ec:ee:cc:03:e2:44:47:b4:
e4:7b:70:8b:ff:b7:9d:a7:5f:20:e8:9b:65:12:31:
f7:34:8b:a9:a4:3e:76:f8:90:8a:e9:d1:d4:1c:37:
04:3e:15:6e:3a:b4:b9:40:3d:ac:aa:22:42:98:b3:
38:8c:ba:74:c9:8c:c2:5c:44:ea:39:48:67:32:6c:
3f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:29:E5:E6:12:FF:8A:9B:5C:1D:26:79:AB:C8:94:4C:D1:0C:8F
X509v3 Authority Key Identifier:
keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c1:1d:f6:75:6a:82:7d:ab:36:4b:bd:e5:aa:62:1c:ce:c7:
9f:5e:ea:59:22:0b:50:2d:0e:95:69:17:10:7e:20:f2:ee:30:
7e:6e:18:ac:aa:e9:3c:46:83:4c:c4:85:98:b7:bf:d5:87:c6:
e3:22:d0:4e:9c:80:5f:b5:37:cc:28:e2:eb:30:3d:2e:1f:bd:
96:32:59:18:a3:e3:25:e3:06:a5:ec:5d:c7:08:36:0d:bb:91:
28:85:e3:eb:85:b2:06:75:2d:18:0c:52:50:01:c1:40:f3:27:
b8:5f:b1:63:95:e4:19:e0:10:c5:c1:a6:fe:0b:cf:ea:3d:dc:
87:45:02:9b:c7:4b:6a:f6:8f:31:b5:43:4a:cc:e0:8f:a0:0d:
79:4a:e0:e4:c3:ff:be:d4:ad:01:f5:fa:e9:c2:b5:73:12:51:
28:31:48:1a:d2:3f:11:21:a6:d4:2f:19:15:ab:d4:a3:c7:5d:
23:67:14:6d:8b:f9:74:da:b7:8f:8d:0f:6e:f8:63:21:8f:84:
88:2a:cf:e9:54:d8:82:a9:4a:1f:35:4e:2b:ed:97:f8:dd:20:
72:c5:17:17:da:53:34:63:a6:f3:6f:32:f4:27:c5:08:c9:ee:
5d:41:cc:d6:b2:0d:4e:57:76:16:1a:24:b5:19:62:6b:ff:9f:
b2:71:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:22:04 2026 by rpki-client