Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: JqbP7FtNy1XOTsU3GB9VvbvqgbXVA6JvY26ulfTqVPc=
Subject key identifier: 3B:D3:25:75:14:0C:73:73:F5:E5:ED:6B:2B:D0:8C:E6:CA:22:EE:D9
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 019FAD51A94B3D466D449828645B83EFE5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 10:00:37 +0000
Manifest this update: Wed 29 Jul 2026 10:00:37 +0000
Manifest next update: Thu 30 Jul 2026 10:00:37 +0000
Files and hashes: 1: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: EkJyBYe7pThvm+u9eM++JF9AYK/fM6Xg5cJjS00Rn/Y=)
2: heDWIjAtV4Dfu6bhg1J9nZcl5qo.roa (hash: zW/+lZ7RfSWqiEzqmlzW/11hnbmw6v/qc+vi/mY5ysc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:a9:4b:3d:46:6d:44:98:28:64:5b:83:ef:e5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Jul 29 10:00:37 2026 GMT
Not After : Jul 30 10:00:37 2026 GMT
Subject: CN=3bd32575140c7373f5e5ed6b2bd08ce6ca22eed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:35:d1:42:a9:ee:f2:fa:ce:92:0f:7b:31:
9d:52:69:9c:96:2a:79:c0:6b:23:11:f0:12:f9:b5:
8d:b3:27:a5:5d:c4:75:b5:06:b7:dd:fe:e6:4a:09:
40:72:ac:94:85:b3:c7:e7:be:51:26:ab:ba:99:f9:
63:64:a0:f1:c7:26:cb:9a:c4:56:4e:8d:97:e5:34:
08:85:9f:ac:4c:3e:ae:cc:90:04:cc:8d:2c:13:4a:
9b:40:e4:da:07:25:dd:fb:8a:6c:77:e7:c7:30:51:
11:69:5d:5a:0a:7d:8e:e7:f3:23:1f:4b:1b:58:b7:
43:d9:ec:e2:84:8f:f3:94:78:c9:61:ef:79:1e:ff:
62:22:ff:30:fa:2d:63:c7:d6:26:49:1a:76:58:31:
56:e1:53:8f:8c:23:6f:f4:05:f6:b4:65:ca:07:08:
e1:c3:05:37:9b:ae:ff:e8:82:fd:f2:0d:b7:05:73:
83:cc:a5:c3:da:1f:95:55:b5:87:1c:74:da:f3:41:
a0:35:d9:34:42:ba:f0:3b:a4:c0:50:e8:5f:69:70:
3f:f3:91:93:72:ac:c1:fb:a9:fd:3c:23:1e:d2:5a:
13:23:cb:9d:15:31:c5:17:c1:12:8c:0f:1b:f3:13:
e3:b6:99:da:2b:3f:e0:88:c9:a0:60:62:58:e5:06:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D3:25:75:14:0C:73:73:F5:E5:ED:6B:2B:D0:8C:E6:CA:22:EE:D9
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:11:16:b3:f3:2d:74:50:32:34:0f:df:4a:07:ba:12:6c:ea:
f0:1f:2f:5b:6c:ad:3e:1a:27:98:13:3c:1b:94:c3:d8:18:67:
67:d5:4a:c8:8f:f1:6f:61:c7:34:00:46:36:9f:65:cc:81:d1:
ad:d1:12:03:e3:b3:e6:da:06:13:7b:c8:74:2f:84:53:b6:0b:
bd:2d:62:37:8f:69:7a:f4:d7:f0:c0:42:65:ff:e8:9b:f5:93:
77:b5:0a:09:cb:f8:47:ed:0b:34:84:04:1f:bc:64:52:70:13:
ca:59:57:e6:84:8d:e4:3f:1e:08:4c:67:4b:34:1c:ac:08:95:
c4:69:c2:1d:55:db:36:9f:49:71:a1:8a:2a:16:9d:8d:c7:fe:
99:dc:aa:0a:fb:be:d9:fc:40:83:f4:46:7e:6c:31:a8:7e:d6:
53:bf:d0:40:60:1f:f8:9c:c0:03:ad:8d:0c:67:85:5a:e2:60:
9f:60:0e:cb:5c:5c:e4:ce:1e:0d:00:5d:7d:49:39:59:ac:a6:
fb:10:e5:46:12:41:4d:f3:7d:2c:b8:f4:5e:e7:59:b8:e3:7a:
ec:25:31:b5:67:ec:8c:ea:9a:d2:26:cd:5c:81:41:08:bb:fe:
1a:f4:3a:be:b9:29:bb:18:77:ba:56:36:33:71:1b:8a:e4:af:
5f:39:36:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:00:34 2026 by rpki-client