Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
File: HH3TyBbYWWCARyBUNICV7SuFUeU.mft (raw, json)
Hash identifier: FPn1UaCFEoQ6mAdjtYPDmPHmSv4L9uBGdkR/ukHrEHA=
Subject key identifier: 14:B7:5F:20:E1:2F:8F:FC:34:5D:03:73:A1:38:25:50:1A:93:C5:8B
Authority key identifier: 1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
Certificate issuer: /CN=1c7dd3c816d8596080472054348095ed2b8551e5
Certificate serial: 019FAABED09434710FE06D5A3A3009076AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
Manifest number: 1747
Signing time: Tue 28 Jul 2026 22:00:59 +0000
Manifest this update: Tue 28 Jul 2026 22:00:59 +0000
Manifest next update: Wed 29 Jul 2026 22:00:59 +0000
Files and hashes: 1: HH3TyBbYWWCARyBUNICV7SuFUeU.crl (hash: vLA0PZ+EmOpmBuhbO+6LlkS3kGNV51ViwVueZDmMuig=)
2: IMhrDeS7pt6POgdqkwhQn8NXjdQ.roa (hash: 8Co4GdnGTbaplfNAIs0VU0evrLpH3iNJkhwVpK6YVsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:d0:94:34:71:0f:e0:6d:5a:3a:30:09:07:6a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7dd3c816d8596080472054348095ed2b8551e5
Validity
Not Before: Jul 28 22:00:59 2026 GMT
Not After : Jul 29 22:00:59 2026 GMT
Subject: CN=14b75f20e12f8ffc345d0373a13825501a93c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:df:18:6f:73:6e:e5:ab:b4:42:30:85:4b:
24:95:6b:07:26:2a:01:0d:2b:30:32:18:65:b9:40:
ae:a9:d9:ce:23:c5:25:1e:a8:13:81:23:e1:fc:98:
27:a7:48:66:13:7f:e2:76:1f:e7:c3:dd:a1:e2:31:
6f:5a:ac:9a:97:85:71:ee:60:f8:cd:ed:0b:d3:99:
82:49:04:da:05:f3:ea:e6:ad:cb:9f:ec:05:65:96:
fc:75:43:ad:e3:29:8d:a3:13:0a:32:36:1a:d2:a9:
a9:e5:79:17:d1:af:90:c1:9a:1c:ae:cf:5d:b0:9e:
6c:d3:42:29:ae:55:e8:8a:98:eb:98:85:1e:5a:fa:
de:ab:8b:c9:4e:25:09:bc:ab:92:fc:ad:68:8e:a2:
dd:65:9e:7b:1e:16:e9:32:63:e6:ea:f3:61:5e:99:
29:a6:8c:b5:9b:07:bd:6e:ee:c8:d1:ed:b9:06:05:
3a:7b:50:5f:b5:58:96:18:58:42:29:0c:25:b0:f6:
0d:73:94:62:a3:21:b0:de:0d:ef:21:69:df:61:32:
a2:5b:99:80:9d:52:5f:44:c6:b4:e4:d4:e3:9b:46:
57:63:02:38:63:b1:b3:75:ff:da:34:9d:21:2d:99:
02:f9:9c:28:71:43:6e:13:c0:ba:eb:00:f3:a2:ba:
6c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:5F:20:E1:2F:8F:FC:34:5D:03:73:A1:38:25:50:1A:93:C5:8B
X509v3 Authority Key Identifier:
keyid:1C:7D:D3:C8:16:D8:59:60:80:47:20:54:34:80:95:ED:2B:85:51:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3TyBbYWWCARyBUNICV7SuFUeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/baab36-8886-4206-9e79-cc2cd7d31a26/1/HH3TyBbYWWCARyBUNICV7SuFUeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:57:3e:f3:b3:81:41:c0:a7:a0:ac:f8:c1:ba:1a:bd:4d:3d:
e5:7d:32:b8:be:b2:2a:cc:fb:f5:52:0a:5e:43:de:17:c7:1f:
16:76:b1:18:43:24:3a:23:e2:af:66:7a:a0:85:cf:29:60:cc:
61:3f:c1:aa:f3:5d:dd:3d:3f:54:be:5c:1a:d0:69:1d:73:a3:
f4:40:18:93:8a:e5:13:14:a7:f0:c9:f7:91:72:1b:4d:37:95:
f5:07:06:07:45:0f:0c:5e:13:15:e4:3a:6a:09:36:bc:a5:55:
5e:4c:06:30:11:6c:1d:6d:05:ac:74:26:a2:90:e0:c4:f6:6c:
dd:01:a9:94:11:78:85:a2:67:7a:d3:29:7c:93:79:14:bc:e9:
b6:b9:9c:2c:12:bf:8e:16:ac:9d:39:36:95:84:af:1b:63:70:
56:38:7f:a9:45:3c:c4:05:85:16:62:b1:5d:96:97:b5:24:db:
75:e9:8d:06:79:2a:10:f4:51:f5:65:f9:ef:dd:11:7d:33:5d:
ba:10:9e:01:d7:92:d4:c6:00:d8:de:b7:d6:d9:69:6c:36:e0:
2e:e3:24:d2:51:ac:64:6f:40:6c:e7:56:92:a9:3c:c4:23:8e:
73:23:c8:46:1c:0a:cb:da:49:4a:23:37:ca:da:b7:44:21:b8:
04:cb:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:38 2026 by rpki-client