Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: NMVMoSyewkcN3drKfE9v6GQNC/4f6je4OTQ8rUaj5hE=
Subject key identifier: AB:AD:84:79:38:67:73:77:D8:BF:D7:0A:18:69:B6:78:06:FC:F6:37
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019FA7BD8434056A8E2768560C2A10EE5662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 06AF
Signing time: Tue 28 Jul 2026 08:00:42 +0000
Manifest this update: Tue 28 Jul 2026 08:00:42 +0000
Manifest next update: Wed 29 Jul 2026 08:00:42 +0000
Files and hashes: 1: YEZIYMekfV4MSTcSWZQWUheIYSA.asa (hash: RvCtRmtfiK0V0w8kYFvxJFZ93JlcgF8ks3HVxGrymb8=)
2: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: Gl16yUOGmDkCzp+GbX7GlbWM/K88g06G50/ehwaKqJU=)
3: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:84:34:05:6a:8e:27:68:56:0c:2a:10:ee:56:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Jul 28 08:00:42 2026 GMT
Not After : Jul 29 08:00:42 2026 GMT
Subject: CN=abad847938677377d8bfd70a1869b67806fcf637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:b6:d9:df:90:35:0b:ed:43:88:f1:8d:85:
87:f4:d8:a2:2e:18:59:b3:4b:ce:48:1d:99:57:65:
bd:1b:19:00:ad:de:28:7f:ea:0c:a6:77:34:09:7f:
5e:95:e5:75:94:a6:22:97:22:1e:bc:9f:df:9d:8f:
11:73:21:c7:f9:22:03:3c:1d:06:3c:6a:a2:43:01:
4d:d9:87:dd:98:80:72:8d:07:99:0d:40:2b:f9:e3:
f6:fd:97:91:1c:b9:29:1f:14:98:91:f7:70:be:be:
b6:90:f5:6c:b3:6d:74:55:bb:cd:1b:6b:42:d1:a9:
f5:b9:4d:3b:59:46:c1:ec:0d:e6:0c:cd:e8:94:5c:
75:9f:6f:97:c8:2b:56:97:32:0b:85:0b:bd:07:20:
ba:66:37:07:26:5d:8f:66:ec:5b:e6:ed:4e:ee:d4:
81:45:20:fe:53:c0:35:05:16:93:03:ac:fc:59:f9:
34:60:d6:5c:4f:1f:6a:2d:ce:d3:80:5c:9d:a7:bc:
9d:d1:50:ef:33:47:ba:66:88:34:a3:07:86:4f:9f:
f4:af:a3:53:ce:64:c1:c6:e5:2e:0a:75:71:bb:ee:
e4:20:3f:87:88:38:d2:c9:0d:36:99:c7:2c:8d:ae:
ea:c9:79:a7:b7:e8:5a:a5:9c:c1:40:94:bb:c5:fd:
40:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AD:84:79:38:67:73:77:D8:BF:D7:0A:18:69:B6:78:06:FC:F6:37
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ca:34:11:e4:33:3b:12:f1:f0:ef:dd:0b:55:12:0c:89:1c:
60:47:fa:bb:bc:1a:67:32:5a:bd:7c:fb:ac:55:b1:8f:88:ff:
8e:5c:1e:63:6f:06:44:b4:f0:b1:fd:16:b5:3e:b2:23:4a:7f:
3b:d9:68:38:19:13:15:39:55:26:92:d2:53:44:73:2b:f7:51:
ba:2f:d6:35:1d:66:02:6f:54:50:1f:a7:93:a6:29:a8:57:b4:
85:e4:ec:67:a1:22:71:3f:c4:87:7b:82:30:d1:8a:5c:e7:ff:
f2:3a:bb:64:3d:78:80:88:56:00:0d:c8:97:d2:a3:4a:3f:c4:
bb:2c:19:68:f9:83:70:f3:26:2c:eb:61:4c:dd:0b:32:de:28:
de:34:da:11:ca:ad:51:fc:99:e1:27:69:5d:54:24:54:a5:3e:
1a:fd:de:69:1a:78:57:fd:ad:c5:a8:25:fc:7e:03:51:62:4f:
fe:fe:35:ec:9b:46:b6:7c:85:09:3e:4f:c0:22:23:60:eb:ef:
9c:2b:09:3c:9f:b9:62:0d:92:b2:7f:a5:aa:9f:87:86:bc:54:
9d:16:f4:f5:70:d4:ad:2a:e9:0f:dc:53:d1:da:3b:12:1d:5b:
ab:11:ae:ad:fc:a8:ba:c2:93:81:51:67:14:03:1b:19:6b:45:
b2:da:ad:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:56:31 2026 by rpki-client