Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: GqUy/pcjVzWAXb4g3YWQPCJmrmQFLqnZ0QsqblEm00s=
Subject key identifier: F2:25:47:57:15:68:9C:D7:D4:9F:EF:AD:9E:64:26:C4:DA:68:9E:D0
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 019FAB9AE3996879C2351340E34D495B0941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1668
Signing time: Wed 29 Jul 2026 02:01:22 +0000
Manifest this update: Wed 29 Jul 2026 02:01:22 +0000
Manifest next update: Thu 30 Jul 2026 02:01:22 +0000
Files and hashes: 1: aBOBuL_H29H0y-_-QBP0Ehj1DT0.roa (hash: O7ZWbL6IufsmlkGlAPRYtWsGACsMquG9gC8M6gOxrwY=)
2: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: qvjq/1L5AKruQ+ceIF9/M9pFRah3GwM4woiYhFvxZz4=)
3: y0DK2UjH_DKReYw5NUdmHs1btyA.roa (hash: VfLGmY9ACuSYXNETyrRKCoYE5Ubu9KeR/Haw0EJrQro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:e3:99:68:79:c2:35:13:40:e3:4d:49:5b:09:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Jul 29 02:01:22 2026 GMT
Not After : Jul 30 02:01:22 2026 GMT
Subject: CN=f225475715689cd7d49fefad9e6426c4da689ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:7c:65:77:c8:9d:8a:54:d7:f9:06:83:ef:
56:6f:d8:a5:cc:f5:93:fa:80:f1:2b:33:76:d4:86:
8c:28:a8:73:1c:71:51:89:d5:63:ca:66:dd:1d:4c:
f7:e4:d8:92:c3:08:42:ca:b7:c8:65:0b:51:86:4f:
e9:e4:d2:ad:8a:83:46:62:4c:9d:9f:11:08:5e:9b:
3b:5f:0e:83:52:f1:10:da:c8:80:23:53:3d:23:ef:
2c:3e:61:ae:2e:1b:96:47:82:d7:9f:b8:a0:c3:33:
bf:be:90:a6:bc:b1:10:f2:71:3f:12:17:3b:09:26:
e0:15:e4:92:18:82:b5:23:cc:dc:0c:fe:55:03:fd:
17:4a:7b:81:63:15:21:b8:11:d2:41:cd:3a:c8:bd:
ae:44:67:31:79:28:bf:e4:72:d1:8c:06:e5:53:b4:
f7:d8:f8:cd:a5:3c:43:f6:74:55:41:3b:02:0d:4b:
fc:b4:08:b7:4f:17:13:27:5f:48:73:00:8e:44:65:
52:e6:25:69:98:0b:b4:d8:74:ac:c2:a2:8d:46:b3:
2f:b9:28:40:ba:37:24:7c:ea:98:81:26:f9:6c:f8:
46:8c:e5:b0:c6:b9:12:38:9c:1c:4e:3e:b5:cd:41:
41:03:12:c8:68:2b:d6:82:ae:7b:0f:1a:e8:d5:04:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:47:57:15:68:9C:D7:D4:9F:EF:AD:9E:64:26:C4:DA:68:9E:D0
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7e:34:2b:fb:cc:37:65:37:ea:47:08:64:60:be:2e:27:0d:
38:d0:e5:af:ec:34:44:05:8c:6f:f0:23:bd:8e:38:ff:21:71:
cd:d7:a4:6a:43:07:8e:96:4f:a4:f7:4f:87:35:93:cf:b7:89:
27:e8:e6:6c:af:3f:75:46:c3:d4:4a:6a:08:83:0b:f9:e7:2b:
f7:f1:49:38:28:71:4f:8f:04:fb:79:ae:eb:2e:06:a6:35:4a:
62:97:c9:d4:d2:58:e3:e9:00:1b:0e:73:e1:3b:e3:05:84:3d:
e6:21:41:9d:34:8a:56:36:62:b0:f2:c5:0c:51:a9:dc:6c:05:
4b:1b:8d:17:eb:b1:85:8e:8f:ed:0e:8e:78:cc:4b:47:a2:c9:
f2:21:ef:11:e1:ae:0a:e8:9f:ba:ce:9c:2e:0f:d7:22:88:20:
c3:7e:40:ef:cb:cd:ad:f9:09:fb:1a:53:7c:92:9c:17:05:62:
6c:26:ae:68:bc:27:6d:59:2e:8e:d7:fa:a9:01:2d:e1:a3:af:
c6:63:29:c4:38:13:1d:3d:3e:0d:30:b5:de:23:ec:c1:b6:9d:
fa:42:2f:61:25:f9:43:0d:84:f0:d0:a6:ab:58:6a:ee:91:07:
60:61:c6:af:9d:10:58:b0:54:b0:e8:91:23:6c:f3:34:2a:5a:
c4:8f:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:43:43 2026 by rpki-client