Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: jTg/RwvFLHEba2Hl64hOSonGFkATVAnU4yhukTOISC0=
Subject key identifier: 20:D0:49:92:50:C1:48:A9:28:7E:1A:26:92:43:96:BC:A0:07:12:3C
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 019FAD1B02827C02C8BF2BC5094A1AB383C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 1409
Signing time: Wed 29 Jul 2026 09:00:56 +0000
Manifest this update: Wed 29 Jul 2026 09:00:56 +0000
Manifest next update: Thu 30 Jul 2026 09:00:56 +0000
Files and hashes: 1: Kj0HsXicjlUn-679OFq2n6YXriA.roa (hash: oCViwBHC3VWx+KMwr83UJNJcJLGK68aAWyXoMhEGcUQ=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: hc1tuwW9TPX3fr8pYBVotCd/5+/65porP3cM6YST0F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:02:82:7c:02:c8:bf:2b:c5:09:4a:1a:b3:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Jul 29 09:00:56 2026 GMT
Not After : Jul 30 09:00:56 2026 GMT
Subject: CN=20d0499250c148a9287e1a26924396bca007123c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:d3:de:69:ea:d1:5e:f0:7e:59:aa:b2:05:
9e:ae:e5:e7:eb:f3:40:d6:88:63:91:d4:8d:53:f8:
2c:a7:7b:d4:01:b4:5c:51:23:b6:89:71:b6:b0:e7:
ce:26:6f:a5:11:c6:17:9d:b5:e3:ba:91:90:45:0c:
92:e2:ef:92:d1:af:a6:b8:53:79:85:94:33:dd:be:
37:e5:00:81:17:d6:54:87:0e:9f:99:96:fa:c0:40:
92:c7:5b:30:10:7b:50:47:09:d6:3c:88:3d:7b:ec:
4e:d8:43:04:8d:4f:7a:f2:d7:e9:3e:77:15:5a:34:
29:83:2f:45:a1:23:0e:1e:38:9c:82:2e:c5:86:d1:
46:41:ce:47:e1:77:ff:52:89:9f:7d:be:56:2a:37:
00:90:15:d0:e4:f6:84:d5:4f:81:be:63:ce:b8:30:
37:a5:04:69:08:47:da:ce:c3:c7:98:8d:49:4c:df:
80:06:64:9e:31:96:3b:a4:c9:e7:d4:d5:c3:da:71:
c4:8a:6b:32:bb:9a:1a:f4:02:cd:b0:de:89:b2:c0:
2c:df:4a:9d:8f:ae:80:32:cc:22:ea:95:0f:03:06:
93:2e:ec:55:c5:93:a4:01:37:c9:f6:de:09:1f:1b:
14:b0:77:d7:57:74:87:bd:84:b3:28:e0:2c:3d:31:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:49:92:50:C1:48:A9:28:7E:1A:26:92:43:96:BC:A0:07:12:3C
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:75:94:45:09:2e:0d:8c:c5:53:83:b2:b9:a2:24:0f:29:cc:
02:4d:d9:c6:a6:f7:6a:db:97:0b:d8:61:b9:35:71:af:76:a4:
f2:47:82:47:3d:7c:da:86:ab:02:25:5c:1b:91:70:63:a7:9d:
be:8b:c4:4a:3c:5e:b1:e9:5c:52:e9:f6:c6:13:3f:30:b6:4e:
52:f0:24:b9:8d:20:e6:d5:be:a6:1c:37:c6:20:69:d4:a1:ad:
1c:65:cb:de:a5:f7:11:1a:0f:b2:ea:1c:ba:3e:ad:c7:ae:55:
ec:bb:57:ce:3a:f9:c2:7f:de:81:79:9a:58:26:12:b6:5d:0e:
72:3b:5b:97:ac:8c:de:49:d6:e6:00:8b:c8:48:e2:d0:94:95:
b2:f2:77:f9:f8:6d:60:7e:a8:af:33:42:d3:62:37:09:c7:65:
82:95:f4:a0:2d:0c:0b:f9:66:1c:d8:2d:3c:39:6c:8f:3b:a4:
fb:5d:21:1a:b2:74:0f:86:e5:b5:98:9c:6e:67:3e:6a:15:c6:
5e:a2:0d:ce:22:34:36:27:08:4b:be:57:14:92:12:54:6e:04:
60:c0:35:c2:71:10:00:fb:5a:09:b9:80:b3:99:5f:56:d7:f1:
ce:d4:6e:8f:12:ec:49:62:58:0f:10:e7:79:d6:99:6d:ad:52:
6d:df:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:45:13 2026 by rpki-client