Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: JNBx6o21376/MFEV3USp/QxVaS/Yqfrnq2oMGjakAEo=
Subject key identifier: 62:43:E2:14:DF:CB:28:05:A7:89:BB:90:98:3F:82:1E:D9:E9:8B:F0
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019FA9ABF08B7DE31AAFCB3C8A89AC1DA32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 06B0
Signing time: Tue 28 Jul 2026 17:00:45 +0000
Manifest this update: Tue 28 Jul 2026 17:00:45 +0000
Manifest next update: Wed 29 Jul 2026 17:00:45 +0000
Files and hashes: 1: YEZIYMekfV4MSTcSWZQWUheIYSA.asa (hash: RvCtRmtfiK0V0w8kYFvxJFZ93JlcgF8ks3HVxGrymb8=)
2: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: 38dt/k1S5APYiGuyHJ1zgq1q8uHbo3xF8w+xU700/es=)
3: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:f0:8b:7d:e3:1a:af:cb:3c:8a:89:ac:1d:a3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Jul 28 17:00:45 2026 GMT
Not After : Jul 29 17:00:45 2026 GMT
Subject: CN=6243e214dfcb2805a789bb90983f821ed9e98bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:25:b1:e3:99:95:0b:c7:16:a3:f9:1b:5a:
82:ca:01:ca:02:a7:d6:78:15:c6:c3:d3:08:a6:1c:
22:1e:a2:a6:64:81:11:95:a0:64:06:f2:87:6d:34:
46:cf:a8:f7:0a:6a:12:9b:d3:f7:44:98:b8:a5:b5:
5b:85:19:26:67:42:15:0d:35:c0:ec:30:e6:a2:ad:
95:43:fa:de:74:32:68:24:31:72:d4:61:8f:db:5e:
f1:0e:ba:72:35:25:7a:d6:85:da:4d:5a:17:93:87:
75:83:b1:c7:f5:18:f4:33:83:ea:ad:8a:8d:cf:b1:
46:c5:12:be:ed:eb:36:95:09:42:0f:a6:dc:82:da:
e4:68:8c:e1:08:97:72:37:e2:08:72:15:75:e6:b9:
b7:7d:55:84:ae:ba:4b:28:eb:9f:7b:31:6c:cb:cd:
fa:2d:bb:22:8c:e1:8a:0d:33:4e:73:1c:40:84:4b:
0e:54:b7:3f:c8:50:55:0e:15:a0:5f:0d:fa:b1:b5:
b5:65:40:66:c6:4f:b2:2c:ad:6a:f6:e7:64:4a:a1:
5b:3d:4f:69:40:e2:8a:1f:25:65:cc:53:33:9f:fc:
52:67:e9:15:4e:32:58:62:11:cf:51:97:69:a8:fa:
5e:e5:b0:91:7b:32:c6:58:68:5f:f1:a5:af:f3:10:
06:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:43:E2:14:DF:CB:28:05:A7:89:BB:90:98:3F:82:1E:D9:E9:8B:F0
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a7:cf:67:a7:ef:c4:0e:e5:60:bc:5b:24:51:56:28:09:38:
5f:37:14:96:1f:0a:4b:64:1f:88:42:b8:82:2c:30:ac:7e:c8:
a7:b9:7b:5d:77:b1:22:7a:e7:b6:94:69:85:36:91:b8:48:21:
6c:10:6e:ea:05:30:b3:99:ea:a9:1f:e9:dd:df:d8:3f:fc:16:
75:a1:fb:99:0f:93:69:25:1b:2a:be:13:0e:7a:c2:97:f3:49:
42:86:55:32:cd:1f:1a:d5:85:8d:4b:c7:ae:cf:f9:c8:01:0b:
32:34:8a:a8:a1:82:85:db:58:7b:a9:d6:10:ae:01:1f:f8:fb:
c8:95:66:dd:96:bb:ff:ea:07:10:76:fb:bc:c4:ea:98:95:db:
47:b8:d1:17:db:84:97:c6:16:4c:8c:2e:e3:1f:89:31:f0:e2:
0e:0a:64:aa:21:78:ff:f0:f1:81:86:17:49:7f:48:65:1a:01:
6b:eb:89:4f:5c:79:50:d3:9e:ce:8e:21:ba:9c:a0:ff:c3:0f:
ee:94:5b:28:2a:b2:f6:ac:b7:c4:a2:95:85:11:a9:7c:2e:bd:
62:b0:06:ff:7b:a3:a8:6f:ea:99:39:37:ba:44:3b:b6:27:a7:
0e:57:84:f7:7b:3a:c8:fc:35:46:06:f4:5d:8d:28:20:6f:a4:
d7:8f:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:05 2026 by rpki-client