Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
File: hCIIK4U0vXrmP6gAimhbZfTNJZM.mft (raw, json)
Hash identifier: ettvNX62K5oVdryAGFbsylf/kOrQfMkGpSKKsSITs1o=
Subject key identifier: 58:6B:57:8D:51:6E:A1:AB:F5:95:B4:7B:0B:B3:97:DF:E5:34:B8:9F
Authority key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Certificate issuer: /CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Certificate serial: 019FA9ABFAE47CF8408A1879B9F0864E31DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
Manifest number: 07DF
Signing time: Tue 28 Jul 2026 17:00:47 +0000
Manifest this update: Tue 28 Jul 2026 17:00:47 +0000
Manifest next update: Wed 29 Jul 2026 17:00:47 +0000
Files and hashes: 1: 7ObucnjBknjOc9VGyDvq-rah57Q.asa (hash: AfmsB5ElxTW0o9bXlvelsvJ0CpTckZTI7iwTHE4nG1E=)
2: hCIIK4U0vXrmP6gAimhbZfTNJZM.crl (hash: V4HRc0BwbyZsUOUfLxzW1I4r1njCZCEo9RF9SGD4dk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:fa:e4:7c:f8:40:8a:18:79:b9:f0:86:4e:31:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Validity
Not Before: Jul 28 17:00:47 2026 GMT
Not After : Jul 29 17:00:47 2026 GMT
Subject: CN=586b578d516ea1abf595b47b0bb397dfe534b89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:7c:a6:4d:99:b5:23:f1:b4:b0:4d:fb:f2:
8f:2e:b7:8a:d3:dc:a9:62:f6:99:f1:86:e9:f2:37:
ca:76:36:e3:27:0b:67:78:9a:d0:03:da:07:e8:64:
e6:d8:9b:4e:dd:ac:9e:40:33:cb:d3:38:42:c8:18:
72:88:b0:7e:7f:f5:a6:8b:44:22:15:a6:36:a5:1c:
ed:84:a5:06:1b:ff:c9:a7:4a:9f:49:18:12:35:14:
e6:f5:6d:d7:9c:47:e0:7d:b2:93:f2:7c:c4:f3:53:
05:45:b8:f8:66:27:ce:2d:bb:74:f9:86:98:4e:0b:
76:d6:73:77:a0:2b:56:5f:41:bd:27:34:59:62:60:
ad:f0:b0:a9:ac:8e:98:c5:72:74:ed:14:2e:54:49:
4d:b0:e3:47:66:6f:56:2e:8f:9d:7c:74:b6:56:9b:
f6:f7:e2:23:c9:d5:1a:71:d2:2a:70:d0:f5:8a:3e:
6d:af:df:11:f9:b8:9f:ff:7d:ff:8f:57:ec:b2:91:
0b:80:d3:b5:1b:97:af:5b:f3:57:18:ed:62:0f:e0:
9a:db:b2:83:c7:3b:3c:e0:33:17:82:9a:fb:6a:4b:
51:66:17:87:00:0b:20:c6:7f:14:7d:b8:9e:5b:c7:
74:e9:0b:fb:dd:ca:9b:ff:3c:fa:1f:87:b5:b9:ca:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:57:8D:51:6E:A1:AB:F5:95:B4:7B:0B:B3:97:DF:E5:34:B8:9F
X509v3 Authority Key Identifier:
keyid:84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1d:f1:7d:ed:fe:c4:9a:45:06:71:ac:63:0e:77:79:15:85:
63:c4:b9:3d:90:a0:25:f6:d1:b0:8a:d7:10:f9:56:28:15:ee:
3e:9a:76:28:7a:cd:3a:af:c3:30:f0:19:13:ec:67:03:8e:1c:
b7:95:04:27:fd:08:40:10:a4:b9:86:73:30:88:f7:3d:a9:4d:
0a:3a:bd:aa:ba:9a:cf:d0:8f:3a:2b:ba:6e:b5:cc:a9:9d:8e:
bc:be:53:07:98:3c:67:8c:f4:94:72:3d:34:a7:95:b6:b8:ea:
05:70:e4:a7:07:4b:31:05:b2:6d:65:1b:04:2d:4a:32:1b:74:
13:94:e4:7b:37:47:b1:a8:7c:ea:3f:44:ba:59:89:d8:f5:56:
f8:fa:f0:af:65:e2:3b:41:2e:d3:79:4b:96:3e:16:49:10:fd:
be:3b:3f:2a:e9:e6:ee:b2:af:65:6e:26:6f:0a:50:0b:20:30:
05:23:4e:4e:4a:f1:23:fd:a4:72:78:b7:f2:25:6b:cf:9c:0e:
dc:6a:59:46:1d:4f:c6:2c:f6:9d:ce:06:f9:50:7b:af:2c:d2:
8e:63:be:a2:13:18:a0:1c:b7:c3:60:c6:17:73:30:f1:c5:03:
59:0b:9c:99:0e:b7:32:89:f6:f8:fc:b6:b5:fc:be:d1:e7:bd:
0b:5e:67:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq/rkfPhAihh5ufCGTjHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0MjIwODJiODUzNGJkN2FlNjNmYTgwMDhhNjg1YjY1ZjRj
ZDI1OTMwHhcNMjYwNzI4MTcwMDQ3WhcNMjYwNzI5MTcwMDQ3WjAzMTEwLwYDVQQD
Eyg1ODZiNTc4ZDUxNmVhMWFiZjU5NWI0N2IwYmIzOTdkZmU1MzRiODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFp8pk2ZtSPxtLBN+/KPLreK09yp
YvaZ8Ybp8jfKdjbjJwtneJrQA9oH6GTm2JtO3ayeQDPL0zhCyBhyiLB+f/Wmi0Qi
FaY2pRzthKUGG//Jp0qfSRgSNRTm9W3XnEfgfbKT8nzE81MFRbj4ZifOLbt0+YaY
Tgt21nN3oCtWX0G9JzRZYmCt8LCprI6YxXJ07RQuVElNsONHZm9WLo+dfHS2Vpv2
9+IjydUacdIqcND1ij5tr98R+bif/33/j1fsspELgNO1G5evW/NXGO1iD+Ca27KD
xzs84DMXgpr7aktRZheHAAsgxn8UfbieW8d06Qv73cqb/zz6H4e1ucpSWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhrV41RbqGr9ZW0ewuzl9/lNLifMB8GA1UdIwQY
MBaAFIQiCCuFNL165j+oAIpoW2X0zSWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaENJSUs0VTB2WHJtUDZnQWltaGJaZlROSlpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wOTRkYjMtZTM4OS00NDYxLWI1MGUt
NTgxNjlmYmVjZGZhLzEvaENJSUs0VTB2WHJtUDZnQWltaGJaZlROSlpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wOTRkYjMtZTM4OS00NDYxLWI1MGUtNTgxNjlmYmVjZGZh
LzEvaENJSUs0VTB2WHJtUDZnQWltaGJaZlROSlpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiB3xfe3+
xJpFBnGsYw53eRWFY8S5PZCgJfbRsIrXEPlWKBXuPpp2KHrNOq/DMPAZE+xnA44c
t5UEJ/0IQBCkuYZzMIj3PalNCjq9qrqaz9CPOiu6brXMqZ2OvL5TB5g8Z4z0lHI9
NKeVtrjqBXDkpwdLMQWybWUbBC1KMht0E5TkezdHsah86j9EulmJ2PVW+Prwr2Xi
O0Eu03lLlj4WSRD9vjs/Kunm7rKvZW4mbwpQCyAwBSNOTkrxI/2kcni38iVrz5wO
3GpZRh1Pxiz2nc4G+VB7ryzSjmO+ohMYoBy3w2DGF3Mw8cUDWQucmQ63Mon2+Py2
tfy+0ee9C15ncA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:01 2026 by rpki-client