Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: icCDwCHZxIDXEazhfkM5JbpdcP4nM/h9e4e0AIlM3O4=
Subject key identifier: D5:44:37:CF:94:87:10:D8:FB:42:40:87:03:9B:42:95:06:C2:EF:18
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 019EC2C93547A8F1F5B45393848BD1A8B252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 15E8
Signing time: Sat 13 Jun 2026 21:00:26 +0000
Manifest this update: Sat 13 Jun 2026 21:00:26 +0000
Manifest next update: Sun 14 Jun 2026 21:00:26 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: AK/Dz/m/4Wx9i89g9qwLp992+afrEDkdqkBqSE0LX0w=)
2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:35:47:a8:f1:f5:b4:53:93:84:8b:d1:a8:b2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Jun 13 21:00:26 2026 GMT
Not After : Jun 14 21:00:26 2026 GMT
Subject: CN=d54437cf948710d8fb424087039b429506c2ef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:3e:39:e2:e1:c8:d2:c2:32:f0:c4:91:e2:
3b:68:6d:79:7a:7a:44:05:ce:b3:17:fe:47:ed:d7:
94:26:03:25:37:05:27:10:22:45:60:2a:53:24:ee:
06:d5:1d:2e:2a:e2:d8:ac:e2:47:43:c8:23:b4:6f:
00:9f:2a:2e:5d:08:35:f8:1a:71:49:63:04:ae:cf:
fa:60:37:3e:fc:0a:2a:76:55:46:f5:88:89:f0:de:
ae:3b:7a:96:b8:0c:86:fe:1a:6e:0c:5f:6f:f1:83:
21:fa:82:15:9a:9c:5d:83:94:f1:a1:b5:30:de:bf:
e2:52:d4:0e:fe:c7:51:9a:f6:78:3b:18:41:33:fc:
b9:ae:3e:45:ba:10:b0:8d:5a:75:4b:e3:4c:b5:81:
ca:35:cc:1b:0b:6d:f5:18:29:d0:9e:94:3c:5b:6d:
85:b0:e6:7f:8e:84:68:ce:df:a2:1e:b9:19:fe:4b:
40:aa:fb:6c:19:37:f2:d5:ac:c1:11:3a:b3:91:2c:
b4:49:57:2f:f4:d3:5a:37:9f:be:68:31:15:9f:7c:
cf:ea:45:85:12:b5:d6:4f:7b:b8:12:fb:d4:0b:ef:
2a:b1:7c:4c:c8:ee:ce:ea:2c:b0:cd:83:da:82:18:
13:1e:f6:9e:70:fe:14:70:27:d0:81:f5:43:e3:f6:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:44:37:CF:94:87:10:D8:FB:42:40:87:03:9B:42:95:06:C2:EF:18
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:97:0b:b6:d9:60:68:9e:0b:cb:95:fc:92:35:71:3a:46:49:
7f:f0:a6:e7:85:d2:d2:1a:8b:c5:4e:fa:08:f4:ab:62:6c:01:
df:6a:9b:d5:fc:2a:05:85:76:0b:2c:71:38:48:ca:59:19:ed:
f5:a5:7a:39:64:85:91:36:11:ef:92:ba:58:fa:ce:69:e3:8b:
f4:c9:67:f9:a7:cf:ba:c6:fb:bc:1e:19:97:4c:bd:8e:b7:40:
2b:cd:11:19:aa:3e:9c:b0:da:9b:d6:62:99:3f:0d:00:ed:df:
97:a4:93:ab:96:70:b4:9f:d7:ca:fb:32:eb:7c:73:a5:88:00:
2c:d4:d6:7d:4a:7c:b3:e6:be:4f:b1:c3:93:f8:33:e0:96:36:
7f:76:06:72:8e:c8:73:91:a7:2a:24:41:a3:f8:b4:c8:d0:3a:
13:cf:b3:fc:b3:43:be:d2:37:cb:03:b9:66:06:b9:e2:22:3d:
6f:fc:e3:b8:a5:4e:65:3b:e4:5f:dc:8e:f1:14:fb:d8:c1:51:
7d:3b:43:bd:69:e3:33:25:d5:66:64:1e:b9:52:1c:7f:6e:6d:
f0:69:7c:fd:b2:32:ff:c4:23:bd:78:f0:54:4a:e9:18:ec:13:
60:25:e5:27:da:e1:51:27:6b:19:cb:ac:d4:dc:f5:83:3c:f5:
7a:f1:af:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:58:12 2026 by rpki-client