Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: mrF5JFLoUtO5Fu348XCv98wz3TwLLAbazXnaYRQpyTk=
Subject key identifier: 9E:98:20:0F:B8:AA:E5:6D:CD:CD:2E:67:9F:78:B6:09:FD:40:A9:F7
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 019FAB637161A40CDF17B773AF1E5AE1C345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 01:00:48 +0000
Manifest this update: Wed 29 Jul 2026 01:00:48 +0000
Manifest next update: Thu 30 Jul 2026 01:00:48 +0000
Files and hashes: 1: Dbjfk_x94XkWbUqrQRgXiB2IZmc.roa (hash: K3KjeMVe4MzmZ6PY7GfHmSzcgyG6kpzevKCxHtsqWyY=)
2: TQnSP-doaEZ3QwoQxZQkKdn_Zm8.roa (hash: tNscAkBZYAiTq3QBweAAt6lTq4JqIfcKk5dVMuydvOY=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: Cnit/gQu3/Bg56FTOe8ZwBjf1d6uetvG4t+m0NqbdbM=)
4: hPluaz2ce72z5Cezy2XMePaJEmA.roa (hash: l8ELIU5y8+HQtxJL1W6JSqmakct+AgSg22KUXwRKNOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:71:61:a4:0c:df:17:b7:73:af:1e:5a:e1:c3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Jul 29 01:00:48 2026 GMT
Not After : Jul 30 01:00:48 2026 GMT
Subject: CN=9e98200fb8aae56dcdcd2e679f78b609fd40a9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:fc:00:1c:66:02:41:73:bd:40:d4:b7:44:
01:66:ee:88:45:d4:59:9e:e1:5a:05:5c:6d:60:e9:
57:03:be:7c:8d:8e:61:d1:03:db:8b:a3:ca:3a:e2:
ea:56:3a:5b:7a:94:15:ef:11:86:37:d0:c3:f1:5c:
32:a9:bc:00:d3:c9:f1:88:92:48:16:f0:f9:21:93:
cb:00:e6:a8:a6:05:96:13:03:3e:81:dd:2d:ef:31:
b3:7e:56:7e:31:7b:7f:40:04:eb:03:e3:c4:90:34:
98:d6:24:2f:d0:39:60:a8:69:7b:35:e1:22:00:cb:
b1:fa:64:4c:02:63:60:79:40:94:1f:3d:8e:44:48:
51:6a:f8:0d:4f:8c:d3:95:56:17:a4:40:20:a4:fa:
17:dc:b8:fb:52:ea:f6:36:39:11:d4:93:70:b5:e8:
02:29:13:b8:89:7e:be:9d:fd:7a:76:8d:e0:e6:46:
f5:7c:ff:bb:b9:11:b0:c9:db:a4:05:0b:6b:4e:c6:
8d:a6:7a:8a:1c:80:0a:90:02:a5:bd:34:d5:8e:15:
1f:43:c1:59:70:53:4a:4c:3f:70:6f:7c:a7:d1:75:
a3:70:01:66:be:d5:ac:5d:c8:fa:f2:85:ce:62:48:
03:85:74:15:8a:52:8b:46:09:61:21:32:df:60:65:
2b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:20:0F:B8:AA:E5:6D:CD:CD:2E:67:9F:78:B6:09:FD:40:A9:F7
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:48:78:ed:0f:bf:af:9f:c3:0e:0a:0e:c3:d1:5d:71:b8:ef:
51:ba:fe:57:20:0e:48:81:0c:24:9f:b9:41:00:8e:5d:95:01:
59:04:65:e4:26:30:c1:8f:9e:17:63:56:63:4e:e4:e4:35:9d:
2a:d7:02:9a:6a:89:ca:c1:21:58:24:d9:78:de:81:aa:e7:5d:
a2:2d:d9:10:e7:d8:24:50:1f:7a:02:95:1c:7e:cd:b6:46:ef:
ce:48:17:18:50:4c:2a:69:16:67:c1:ea:66:de:31:c1:50:9e:
84:12:7a:f3:e7:36:3b:fe:eb:48:89:f7:cb:47:73:e6:e0:fa:
57:8f:ea:eb:06:4d:55:77:e4:26:4e:13:b7:5b:01:20:ec:0a:
6f:f6:64:3e:e9:11:fb:be:f8:6c:c1:66:a9:c5:c9:b9:57:42:
86:6b:38:d8:4f:a0:0d:91:64:db:8d:72:cf:f5:16:7e:29:db:
32:ba:10:60:d9:5f:a6:35:dd:d4:be:91:23:f9:c1:b5:b1:d8:
03:f9:23:34:9b:08:fa:da:15:60:9c:50:e3:6e:69:67:4e:90:
35:3f:af:85:8c:b2:63:12:9e:06:6d:b4:b4:7e:b9:84:0f:a6:
03:3b:58:0b:da:42:c3:e3:40:c8:23:59:40:e7:ae:f8:ee:e2:
10:78:5e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY3FhpAzfF7dzrx5a4cNFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MTg0Y2U5MTkwMjM2NDBiYjkyNTZjMmQ4ZDFhMDQ5ZmEx
MDI1MjAwHhcNMjYwNzI5MDEwMDQ4WhcNMjYwNzMwMDEwMDQ4WjAzMTEwLwYDVQQD
Eyg5ZTk4MjAwZmI4YWFlNTZkY2RjZDJlNjc5Zjc4YjYwOWZkNDBhOWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNL8ABxmAkFzvUDUt0QBZu6IRdRZ
nuFaBVxtYOlXA758jY5h0QPbi6PKOuLqVjpbepQV7xGGN9DD8VwyqbwA08nxiJJI
FvD5IZPLAOaopgWWEwM+gd0t7zGzflZ+MXt/QATrA+PEkDSY1iQv0DlgqGl7NeEi
AMux+mRMAmNgeUCUHz2OREhRavgNT4zTlVYXpEAgpPoX3Lj7Uur2NjkR1JNwtegC
KRO4iX6+nf16do3g5kb1fP+7uRGwydukBQtrTsaNpnqKHIAKkAKlvTTVjhUfQ8FZ
cFNKTD9wb3yn0XWjcAFmvtWsXcj68oXOYkgDhXQVilKLRglhITLfYGUrJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6YIA+4quVtzc0uZ594tgn9QKn3MB8GA1UdIwQY
MBaAFIQYTOkZAjZAu5JWwtjRoEn6ECUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEt
MGE3OWQ1NDk2NWE5LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8yOTIyY2YtMTg2MS00MTlkLTllZWEtMGE3OWQ1NDk2NWE5
LzEvaEJoTTZSa0NOa0M3a2xiQzJOR2dTZm9RSlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0h47Q+/
r5/DDgoOw9FdcbjvUbr+VyAOSIEMJJ+5QQCOXZUBWQRl5CYwwY+eF2NWY07k5DWd
KtcCmmqJysEhWCTZeN6Bquddoi3ZEOfYJFAfegKVHH7NtkbvzkgXGFBMKmkWZ8Hq
Zt4xwVCehBJ68+c2O/7rSIn3y0dz5uD6V4/q6wZNVXfkJk4Tt1sBIOwKb/ZkPukR
+774bMFmqcXJuVdChms42E+gDZFk241yz/UWfinbMroQYNlfpjXd1L6RI/nBtbHY
A/kjNJsI+toVYJxQ425pZ06QNT+vhYyyYxKeBm20tH65hA+mAztYC9pCw+NAyCNZ
QOeu+O7iEHheGQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:22:33 2026 by rpki-client