Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: 9o72BhIN34BS4fQ1SI+pIgTPxh8sHptrYLdiII3pg1A=
Subject key identifier: 5D:B5:1A:19:03:F1:E7:0A:4C:38:D0:F9:DC:96:25:32:4B:95:27:6C
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 019FAC3F62B045C9BA33D3C5322B45395FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 196A
Signing time: Wed 29 Jul 2026 05:01:02 +0000
Manifest this update: Wed 29 Jul 2026 05:01:02 +0000
Manifest next update: Thu 30 Jul 2026 05:01:02 +0000
Files and hashes: 1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: fPSR9ToETh7DxG4MSCUPKjpMxnTXAwLxkIKb7ZR5fRQ=)
2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:62:b0:45:c9:ba:33:d3:c5:32:2b:45:39:5f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Jul 29 05:01:02 2026 GMT
Not After : Jul 30 05:01:02 2026 GMT
Subject: CN=5db51a1903f1e70a4c38d0f9dc9625324b95276c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:15:ab:52:72:89:37:9c:54:2d:a2:67:0a:fc:
bd:b9:a1:9a:d3:ea:a3:14:aa:35:84:ef:85:25:6d:
33:55:7f:85:11:d8:7f:f8:fb:a7:28:f8:c0:26:a3:
25:96:67:bf:1c:eb:70:50:b7:1a:2e:20:04:b4:7b:
b8:2a:b9:2d:eb:c8:37:57:81:0c:51:30:37:d8:16:
6e:6f:74:d8:d3:71:c4:0a:28:14:e2:1d:09:78:78:
33:52:12:13:e0:bd:af:36:24:cb:cd:3c:dd:9c:d8:
6a:8c:56:5c:c7:62:bc:b2:b0:98:4e:f9:56:d7:5f:
fc:93:49:45:73:77:b8:55:48:43:dc:eb:b0:0d:9f:
3a:7e:12:07:6f:b6:45:73:64:56:5a:66:aa:44:9f:
bb:83:9f:fc:be:9d:76:48:0d:46:54:82:54:31:cc:
d0:50:a1:83:2b:c7:7d:d1:e6:45:89:58:fe:df:bc:
55:c5:69:22:d7:8a:9b:f5:4d:3f:48:31:31:2b:73:
a2:26:ad:bd:17:4c:92:0d:b4:de:0a:8f:aa:ce:31:
ee:82:85:1d:59:e3:ce:d3:51:6b:70:bc:ee:fb:9c:
d5:e5:df:73:d3:75:2d:c5:8d:fc:e4:df:a6:50:17:
3d:63:78:62:9a:26:0d:82:fc:26:28:7c:00:1e:9c:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:1A:19:03:F1:E7:0A:4C:38:D0:F9:DC:96:25:32:4B:95:27:6C
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9a:4a:6e:14:af:f5:f2:a0:27:ad:29:3d:78:82:9a:69:4a:
45:39:84:fe:18:51:aa:08:3f:f4:d0:d8:bb:12:01:3d:6f:ec:
78:5f:31:ac:b7:53:0d:ce:a9:38:5a:9e:d8:37:3b:aa:39:11:
e0:d0:0b:c7:bf:ff:cc:cb:00:10:b0:dc:a3:36:6d:7d:c7:87:
ac:4b:d2:77:a2:73:33:0a:8d:51:7e:13:b2:a5:98:28:8c:34:
a4:8e:3b:c0:f1:1b:81:20:f8:9a:7e:90:b4:10:98:65:e7:f0:
39:e1:88:83:3c:76:db:65:d0:98:56:a9:aa:81:43:23:2c:6c:
c8:e5:d1:d7:7b:c9:cb:4a:b9:c9:ec:53:62:59:87:4e:35:ce:
40:db:50:0c:19:e0:9f:89:e0:f1:ca:64:c3:3d:4e:56:50:54:
e6:76:45:d6:bc:76:67:84:82:6c:8e:fa:e7:0c:bb:69:d1:cb:
da:98:4c:dc:3b:45:44:0c:59:eb:37:d7:10:44:b1:d6:94:b3:
bf:89:1a:c4:43:bd:a2:29:83:49:c8:c1:a7:2a:f6:7b:2d:dc:
4b:24:6b:1d:14:e5:f5:c3:ee:16:f8:9b:7a:d2:f6:ac:97:92:
26:f7:d3:7e:4e:2f:51:b7:20:50:ff:14:97:96:65:32:9a:bc:
6a:15:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:30:58 2026 by rpki-client