Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
File: hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft (raw, json)
Hash identifier: PE2eyDJfeG9a4ct1IeAlqt3VSIY8mQBDUGLXkIjMwLg=
Subject key identifier: 21:0E:27:0A:D8:14:C5:CC:2B:ED:B3:42:D6:F3:FB:8C:AD:6E:72:84
Authority key identifier: 86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
Certificate issuer: /CN=863841506d026131965057409a1604a5671f0541
Certificate serial: 019FAD5260DBEF2CA7BA0A0204CD97A341E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
Manifest number: 079D
Signing time: Wed 29 Jul 2026 10:01:24 +0000
Manifest this update: Wed 29 Jul 2026 10:01:24 +0000
Manifest next update: Thu 30 Jul 2026 10:01:24 +0000
Files and hashes: 1: A_-FW985zbY15HsoQHY3jzaLsqE.roa (hash: eSJY0BewKa72GIdMnrs7+2x+KiKuirCjSmv68OLB6u4=)
2: hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl (hash: VNc4JqzrpKwRIfqcK9wEuIWFPz4Y5RlUI4T8YNpCWNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:60:db:ef:2c:a7:ba:0a:02:04:cd:97:a3:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863841506d026131965057409a1604a5671f0541
Validity
Not Before: Jul 29 10:01:24 2026 GMT
Not After : Jul 30 10:01:24 2026 GMT
Subject: CN=210e270ad814c5cc2bedb342d6f3fb8cad6e7284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:19:97:b9:36:45:5f:ac:22:2c:d3:00:1f:
96:64:8d:34:75:7f:39:c3:17:e4:74:3f:11:cc:cd:
e3:a1:2a:de:c6:01:75:35:e2:c1:6c:eb:58:9b:02:
97:c5:a5:cd:22:c3:18:38:1f:cc:65:81:11:b5:7a:
1d:46:5e:93:d6:30:f5:40:23:70:a1:5d:23:0a:52:
b4:5b:b6:cc:44:48:3e:1e:7e:0f:22:30:39:8f:81:
8b:0e:43:65:12:c0:92:92:8e:cd:b3:5b:24:df:f9:
c9:8a:be:3f:e7:20:1d:02:0c:8e:d7:66:0b:7a:62:
0f:73:7a:18:76:7a:3c:74:61:26:43:25:42:6b:ee:
65:e7:ce:63:4c:a2:1e:5f:84:77:6c:b7:51:05:94:
dc:ff:12:33:9e:0d:27:4a:02:c9:fc:08:1f:5e:ac:
6f:bb:35:8a:8d:2f:26:a8:07:1f:07:07:0f:fe:af:
4b:e6:df:c6:d2:b2:1d:9c:bb:5c:b8:08:d3:9c:bc:
58:ca:d3:e8:2e:ce:83:70:57:06:12:6c:f3:bd:81:
f3:65:6e:8b:eb:cd:23:29:79:b9:ba:8e:b6:9f:3b:
d8:47:5c:ac:ca:48:73:59:45:c6:9a:5b:56:da:e4:
af:b0:99:7c:2c:55:b9:bd:f5:00:2b:9e:3e:93:8b:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0E:27:0A:D8:14:C5:CC:2B:ED:B3:42:D6:F3:FB:8C:AD:6E:72:84
X509v3 Authority Key Identifier:
keyid:86:38:41:50:6D:02:61:31:96:50:57:40:9A:16:04:A5:67:1F:05:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjhBUG0CYTGWUFdAmhYEpWcfBUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/1f1563-b331-43a9-b9cc-3bfa0509201f/1/hjhBUG0CYTGWUFdAmhYEpWcfBUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:35:dd:37:b6:79:77:40:80:ad:93:c0:2e:20:48:43:7c:b9:
45:a2:80:51:b9:3d:b3:c6:59:47:ce:4a:8f:e0:d1:c4:f5:03:
12:e9:b6:72:66:ed:76:72:5a:09:2d:35:99:7e:ec:d5:df:84:
6c:e0:8e:89:b2:87:19:23:af:e3:86:c1:fa:44:42:2d:fb:9f:
55:0f:94:41:94:e0:7f:33:39:c7:c6:65:20:b4:d6:40:47:f0:
09:e6:f2:36:2f:df:3c:48:b0:2d:9d:06:a3:ad:c8:16:bd:f3:
89:17:4d:a9:a0:9f:d0:28:30:90:86:47:b0:87:10:9b:c8:c0:
4d:a4:45:54:0e:56:c1:cd:f2:b0:2f:6a:6e:9a:5d:75:10:ff:
e5:e2:07:a8:31:85:1c:88:58:c8:40:16:a5:b1:4a:25:07:30:
60:82:36:5d:61:ad:5f:55:f5:39:45:42:ff:06:57:84:e0:bb:
35:70:dc:4a:e7:a0:a6:47:ce:4d:1b:f4:f7:54:8f:4d:7c:b2:
5b:b4:cb:44:09:68:27:35:8f:e4:c0:3b:5b:75:0e:cd:36:b7:
c6:61:04:d4:3d:0a:65:f1:d2:ce:b8:cf:c0:a9:c4:e2:da:56:
4b:3b:79:49:fc:55:31:07:bd:04:57:4b:a6:e8:b8:f3:23:6d:
bb:17:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:56 2026 by rpki-client