Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
File: hT8dWhiK5rK18qoTjbj5mqWq16E.mft (raw, json)
Hash identifier: +WeHcd5eWWn4xyEqCwEEkjAR8oguH3YzEMTO5V4WBQ8=
Subject key identifier: 85:66:84:9D:06:39:C5:6D:E2:98:F3:67:43:48:5E:48:3F:EE:FB:0E
Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Certificate serial: 019EC480E3F161C86913DA72E65C8D08BFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
Manifest number: 0297
Signing time: Sun 14 Jun 2026 05:00:41 +0000
Manifest this update: Sun 14 Jun 2026 05:00:41 +0000
Manifest next update: Mon 15 Jun 2026 05:00:41 +0000
Files and hashes: 1: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (hash: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg=)
2: hT8dWhiK5rK18qoTjbj5mqWq16E.crl (hash: kVu3o21FxOTB26jyJVKw16K00gJO3Y9CU9Owm24u3as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:80:e3:f1:61:c8:69:13:da:72:e6:5c:8d:08:bf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1
Validity
Not Before: Jun 14 05:00:41 2026 GMT
Not After : Jun 15 05:00:41 2026 GMT
Subject: CN=8566849d0639c56de298f36743485e483feefb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6f:87:e2:00:b0:8d:36:32:80:fe:57:51:cc:
82:f8:fd:0e:38:a9:5f:ec:03:cf:8a:ae:28:f9:5e:
2b:9b:6b:e8:80:5e:44:b0:d4:78:65:8e:08:53:35:
56:00:24:bf:6c:95:47:a7:c1:62:06:e6:ef:3e:5c:
f7:f4:25:2a:66:00:a1:de:a5:d6:12:d2:5d:b2:ec:
08:82:c5:62:57:63:1d:dd:82:08:a6:ca:d3:2a:bc:
63:e3:36:fe:dc:49:02:f9:7f:05:1c:a8:33:5c:04:
53:17:1c:ef:5b:99:f4:9b:3c:89:b8:e2:e7:e6:f6:
55:84:4f:6f:b4:00:30:30:21:1a:b3:dc:63:c0:37:
aa:e7:6d:71:b5:68:1a:91:7f:ac:07:d7:5e:cb:85:
35:d5:8e:77:39:7c:3a:63:17:2a:a2:74:78:9e:2d:
35:ef:fc:9b:6d:99:90:09:33:32:0a:d4:a2:69:ca:
0b:ce:a0:f0:4f:dc:24:e8:e7:c5:0d:13:12:bf:86:
e2:cd:42:62:21:62:33:ab:51:07:84:0e:c4:a3:6a:
53:11:d5:33:1e:f7:f5:d9:5c:64:63:40:ab:69:34:
54:ab:84:75:d6:d2:75:f2:80:9f:f9:72:32:75:de:
01:5c:22:9a:bb:0a:04:82:a3:f7:a1:cd:6b:54:00:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:66:84:9D:06:39:C5:6D:E2:98:F3:67:43:48:5E:48:3F:EE:FB:0E
X509v3 Authority Key Identifier:
keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:33:83:d7:1f:d4:18:d3:1c:78:30:a4:29:61:56:c7:6d:44:
b4:e0:9b:82:80:8e:8c:b8:67:e0:4d:db:c4:64:85:2e:9b:6f:
ad:8a:f9:67:e4:7a:4f:80:7c:f3:9f:e6:af:47:db:2e:c3:13:
b5:30:48:fd:95:24:bd:b3:51:c4:0a:a6:37:30:52:5c:6b:0f:
8e:d3:87:80:97:f3:46:6c:2e:b3:cf:d9:5c:22:a3:47:ee:31:
7e:d0:24:e1:f2:48:4d:93:2c:24:df:60:a5:58:63:58:b0:16:
fd:00:a4:38:25:9b:0f:ed:af:8c:8e:54:e8:63:21:2a:64:3d:
a0:bf:5a:e4:e5:ca:5e:42:7d:d8:d5:e0:c6:1d:59:6f:15:88:
cc:bf:b7:a6:0c:33:f7:f5:57:72:a2:2f:23:13:ad:e2:6a:84:
04:72:80:6b:79:4f:ad:51:2f:39:ee:15:1f:77:a5:cc:18:fb:
bf:02:66:06:4b:4e:2f:29:ca:9b:20:31:26:09:a0:2f:35:6c:
92:89:4f:9d:19:58:67:46:2f:51:02:90:a1:f7:e5:56:81:75:
96:c3:74:97:26:3d:02:4d:1b:a3:09:f9:83:5f:ec:8d:88:7c:
71:54:a9:a0:3b:57:2e:8f:e1:2a:3c:cb:a3:ad:c8:b2:11:2a:
ae:80:b4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:07 2026 by rpki-client