Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: xO2Gl8iTiIlNFCNN8uyFyhec5WODFMLWya26RO+WRaQ=
Subject key identifier: 6C:1E:D0:BD:C8:2A:1D:A3:F0:88:CD:1F:95:19:BB:6D:3F:27:51:37
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 019FAA87430F92027EAF62F3767CF6E2F148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 12E0
Signing time: Tue 28 Jul 2026 21:00:18 +0000
Manifest this update: Tue 28 Jul 2026 21:00:18 +0000
Manifest next update: Wed 29 Jul 2026 21:00:18 +0000
Files and hashes: 1: FsEYUQUVL6IgAyC_3hTmIC05sYA.roa (hash: erfQp237zxf8AD8EH/ivbDYnw0vQY88Vf8ov2LTkk+Q=)
2: KhePy2KSChqSTO56xjFNB88Adhw.roa (hash: jSbx1Mp1yMnht16w7llcf9K2ZLPdIRkxkGJ6/eCHfII=)
3: Z-DKyWN4NlE9Oe6WxuczFCionOA.roa (hash: DCMKgnjrJbcUZjEDqwNnXXjpRG/93HbByWia9wwVNVM=)
4: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: +dVhuzMJrJpLtUnmaUKCbYTxM2VUAs1txrpy0HfE+vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:43:0f:92:02:7e:af:62:f3:76:7c:f6:e2:f1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Jul 28 21:00:18 2026 GMT
Not After : Jul 29 21:00:18 2026 GMT
Subject: CN=6c1ed0bdc82a1da3f088cd1f9519bb6d3f275137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:91:5e:c8:6e:b5:47:ed:b3:a6:89:87:8a:
f6:7b:66:33:a7:bb:13:8d:8f:66:07:ee:0b:05:c2:
da:ea:17:81:d6:38:d0:cd:c8:17:e0:a6:dd:cd:5a:
80:3b:82:ce:a5:81:21:f4:04:bc:7a:61:79:4e:27:
b9:e6:7b:93:78:11:8f:64:53:16:be:66:1a:9a:6b:
87:15:10:70:d3:4a:94:b3:db:4a:5f:0a:3d:18:ce:
a6:ad:f7:69:30:a6:be:22:c9:4e:1f:48:16:77:e2:
f9:aa:75:ad:2f:d5:f6:75:f6:84:14:9a:df:07:29:
27:5e:23:4c:63:32:49:f1:7a:45:55:f6:16:63:a6:
78:24:0f:94:ce:e1:e6:cb:08:f5:91:2c:a6:22:8f:
a2:d4:ba:df:a9:d5:4f:b5:7b:61:22:9a:7f:98:cf:
94:93:e1:c7:cf:77:17:05:e3:0c:f0:84:be:7d:d6:
18:91:01:73:83:c5:58:a2:92:b2:72:19:36:dc:0f:
a8:d2:c1:93:b2:e6:99:b6:72:48:36:f7:a4:f9:49:
89:4a:60:02:a0:9e:f2:a8:fb:ed:a4:1d:4e:a3:58:
3a:a7:5b:f4:51:bd:2e:d9:6a:58:65:06:ab:bb:63:
aa:17:34:2c:96:fa:b4:d3:90:ed:64:7a:fa:4b:e9:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1E:D0:BD:C8:2A:1D:A3:F0:88:CD:1F:95:19:BB:6D:3F:27:51:37
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0f:d0:ef:33:48:4e:64:02:78:18:dc:d2:02:ab:9f:b4:18:
f7:66:c6:ca:16:7f:0d:68:41:ce:00:0c:1c:f3:39:39:ba:7f:
a2:b9:4b:7d:35:32:c8:90:19:9a:81:c6:4a:69:c1:77:07:92:
2a:e9:d6:1d:dc:b1:b2:00:61:7f:af:61:e9:23:69:0c:02:c7:
c1:82:08:1c:1f:6d:12:19:4e:68:80:43:85:3c:c7:77:fc:d6:
9e:4b:85:aa:55:69:69:f5:05:7f:35:0c:47:3b:cd:0a:28:b3:
3b:4c:a4:83:7a:98:a3:3e:e1:96:4a:7f:03:a1:2a:47:df:d4:
8c:cc:77:4e:e3:89:3b:70:c6:f4:f2:bd:28:23:be:d3:4e:92:
c2:15:3a:66:c9:f3:c2:75:d5:24:14:a5:99:29:df:33:d1:bb:
17:6d:6a:98:fd:89:09:61:dd:b1:c3:9c:d6:90:58:24:eb:0c:
46:45:48:ee:68:11:a4:26:2d:9c:9e:53:b4:0f:4e:7f:4f:5c:
be:3b:20:3d:64:51:78:49:93:15:90:35:b7:3f:3e:b4:f7:46:
cb:fe:b1:45:6f:e8:97:82:4e:9c:45:94:a2:d1:f1:90:70:33:
1b:09:2e:a1:f7:00:c6:a1:3c:d4:14:0e:ab:a6:95:a7:73:7f:
c3:81:a2:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh0MPkgJ+r2Lzdnz24vFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2I3NDJhMDNiYzljODU1MDcyMTdhMjUyMDRkZmZmODJm
Y2NkZjkwHhcNMjYwNzI4MjEwMDE4WhcNMjYwNzI5MjEwMDE4WjAzMTEwLwYDVQQD
Eyg2YzFlZDBiZGM4MmExZGEzZjA4OGNkMWY5NTE5YmI2ZDNmMjc1MTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWKRXshutUfts6aJh4r2e2Yzp7sT
jY9mB+4LBcLa6heB1jjQzcgX4KbdzVqAO4LOpYEh9AS8emF5Tie55nuTeBGPZFMW
vmYammuHFRBw00qUs9tKXwo9GM6mrfdpMKa+IslOH0gWd+L5qnWtL9X2dfaEFJrf
ByknXiNMYzJJ8XpFVfYWY6Z4JA+UzuHmywj1kSymIo+i1LrfqdVPtXthIpp/mM+U
k+HHz3cXBeMM8IS+fdYYkQFzg8VYopKychk23A+o0sGTsuaZtnJINvek+UmJSmAC
oJ7yqPvtpB1Oo1g6p1v0Ub0u2WpYZQaru2OqFzQslvq005DtZHr6S+nJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwe0L3IKh2j8IjNH5UZu20/J1E3MB8GA1UdIwQY
MBaAFIbLdCoDvJyFUHIXolIE3/+C/M35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgt
MDVmMThmYzIxMmE3LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS83NjdhZTUtYjlhMi00OTkzLTgxYTgtMDVmMThmYzIxMmE3
LzEvaHN0MEtnTzhuSVZRY2hlaVVnVGZfNEw4emZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw/Q7zNI
TmQCeBjc0gKrn7QY92bGyhZ/DWhBzgAMHPM5Obp/orlLfTUyyJAZmoHGSmnBdweS
KunWHdyxsgBhf69h6SNpDALHwYIIHB9tEhlOaIBDhTzHd/zWnkuFqlVpafUFfzUM
RzvNCiizO0ykg3qYoz7hlkp/A6EqR9/UjMx3TuOJO3DG9PK9KCO+006SwhU6Zsnz
wnXVJBSlmSnfM9G7F21qmP2JCWHdscOc1pBYJOsMRkVI7mgRpCYtnJ5TtA9Of09c
vjsgPWRReEmTFZA1tz8+tPdGy/6xRW/ol4JOnEWUotHxkHAzGwkuofcAxqE81BQO
q6aVp3N/w4GiPw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:10 2026 by rpki-client