Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
File: hiGwt9-gp4iPde_yDzIUWgs_DdU.mft (raw, json)
Hash identifier: RAbr8lW5uqUWt8bxKxzzIYn5Bhrf75dmXhdYBOCOiKk=
Subject key identifier: 5A:65:2C:4A:A5:F4:80:FB:24:BF:D1:F5:7A:68:0C:B5:29:03:24:1F
Authority key identifier: 86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
Certificate issuer: /CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Certificate serial: 019FAAF5FFBC99FC5A714DD21B2E42D2F5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:01:16 +0000
Manifest this update: Tue 28 Jul 2026 23:01:16 +0000
Manifest next update: Wed 29 Jul 2026 23:01:16 +0000
Files and hashes: 1: hiGwt9-gp4iPde_yDzIUWgs_DdU.crl (hash: umO4+JJwXOBOQVeEUKtf91kGhR91myUZgYIkTbIB9P0=)
2: kLUM1YAOMcHfG5kPB5ctMeQ6zO4.roa (hash: wZEOFTFIMct/33jsnIoNoec+GVySts9zmn8n8Vg4eB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:ff:bc:99:fc:5a:71:4d:d2:1b:2e:42:d2:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8621b0b7dfa0a7888f75eff20f32145a0b3f0dd5
Validity
Not Before: Jul 28 23:01:16 2026 GMT
Not After : Jul 29 23:01:16 2026 GMT
Subject: CN=5a652c4aa5f480fb24bfd1f57a680cb52903241f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:c5:2e:4e:8f:56:f1:42:28:53:a0:d5:2f:
cc:c6:0d:ab:e0:10:69:c4:32:1f:df:ba:10:ef:46:
d0:ba:21:8f:2d:51:71:f1:5c:44:af:c1:a1:ee:cc:
0b:bf:d2:68:84:33:c1:34:e8:2f:f8:8f:45:11:4a:
b4:e5:8a:c0:72:99:63:df:2c:35:e7:73:41:c4:31:
6f:64:a4:51:1c:3f:05:d2:59:54:f7:29:04:34:92:
41:a3:1e:99:a2:f2:e5:29:84:dd:ab:62:18:f8:58:
dc:ef:55:5b:c8:94:99:db:3c:9d:77:71:e0:02:9d:
bf:21:0d:c4:35:c4:9c:0b:68:91:04:1c:f8:92:b8:
77:57:41:75:78:3f:e4:62:1c:9d:d8:78:cd:9b:57:
da:8b:7a:a6:08:15:d8:42:15:59:cc:91:23:a5:43:
12:e8:8f:7e:36:29:f4:9c:7c:a6:98:25:c0:17:5c:
d9:8a:74:6a:51:d9:be:1f:3d:65:78:de:34:3c:eb:
8a:84:03:c1:0a:6c:d5:bb:a3:ff:4a:a6:1c:2f:c2:
52:ba:56:a7:7f:d9:82:a0:33:45:21:27:7e:8f:3a:
68:b8:12:01:79:6d:27:29:79:4d:cf:d4:a8:6f:db:
12:a2:02:2d:57:ee:bc:05:06:99:36:ca:ee:09:7a:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:65:2C:4A:A5:F4:80:FB:24:BF:D1:F5:7A:68:0C:B5:29:03:24:1F
X509v3 Authority Key Identifier:
keyid:86:21:B0:B7:DF:A0:A7:88:8F:75:EF:F2:0F:32:14:5A:0B:3F:0D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiGwt9-gp4iPde_yDzIUWgs_DdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba0579-a1e7-4b24-8033-6b3e0aa2cbb2/1/hiGwt9-gp4iPde_yDzIUWgs_DdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c0:e3:cb:da:7d:fc:b4:d2:78:e4:fd:d5:64:93:7c:13:45:
be:9e:fd:a1:67:77:81:0a:37:69:fb:6d:76:78:51:84:f3:46:
c7:01:46:69:cf:a7:49:3d:2a:83:ca:d5:a4:da:a9:2c:03:28:
c3:d0:94:de:e6:e8:25:18:ec:2a:18:c4:0c:d7:b9:ea:5e:c8:
d0:38:92:9b:d9:b9:fa:a5:c1:c3:6f:95:ed:a3:53:ea:94:66:
fd:35:9a:f1:dd:bc:34:76:43:1d:a0:a1:8a:fb:73:16:cc:ed:
6b:b8:a3:56:0f:ca:f5:88:b0:36:d5:4b:8f:3c:37:2b:2b:35:
c8:08:23:e4:37:18:20:37:89:2f:77:84:47:b5:1a:9e:e0:79:
e1:d6:44:55:32:77:0b:70:2b:20:10:26:1e:05:4d:7b:0d:04:
9f:bb:f5:8d:c9:3b:4f:e7:d6:52:c6:7a:30:fc:b8:b7:80:4a:
17:4b:93:31:fa:29:ea:0e:88:b0:fc:6c:3b:7d:47:33:91:e4:
db:4e:bf:d7:77:56:1a:e2:f5:c1:eb:05:ac:9f:4a:09:66:27:
29:09:c8:5e:74:b4:34:74:6d:4a:d6:90:97:73:90:2f:5c:6f:
ce:af:9c:73:95:b8:f6:9a:3b:05:cf:09:4a:d5:c6:ad:41:05:
f1:40:2b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:40 2026 by rpki-client