Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: xxUAvq7aGZ8BJhlNA+RRfeC2r3Ah2s65eL0WRu1RjXw=
Subject key identifier: DE:3C:AB:0E:80:B5:09:14:5A:5B:AA:68:E0:DB:C8:E4:1D:81:C3:B5
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 019FAC75A4D62DEFE3B9D9B745ABEC045EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 1661
Signing time: Wed 29 Jul 2026 06:00:18 +0000
Manifest this update: Wed 29 Jul 2026 06:00:18 +0000
Manifest next update: Thu 30 Jul 2026 06:00:18 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: nVTb2v5lziJUC4f2UWxZFAq6p0q1wEM1bHMW6KdlXdo=)
2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:a4:d6:2d:ef:e3:b9:d9:b7:45:ab:ec:04:5e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Jul 29 06:00:18 2026 GMT
Not After : Jul 30 06:00:18 2026 GMT
Subject: CN=de3cab0e80b509145a5baa68e0dbc8e41d81c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:98:d3:52:8b:3b:7a:8d:09:fc:e1:e8:7a:ed:
2e:4b:f7:04:16:f6:39:2c:95:5b:86:a0:3a:df:d0:
36:16:20:f8:65:e1:ba:5d:25:13:b7:40:d8:01:1f:
97:00:91:ed:a1:55:3d:b2:4e:b2:3d:fd:25:b8:09:
64:5e:ea:49:27:7b:49:f9:15:b0:e4:42:88:15:93:
78:1b:3e:f2:71:22:a8:bc:9c:c7:ff:53:fd:8b:d9:
2c:7e:e3:bf:5a:16:32:0b:0c:b1:54:bf:fd:71:a9:
41:6e:1d:b0:30:86:50:8e:35:af:5e:fd:b0:b3:92:
5c:bc:0e:c0:d1:ea:92:dc:eb:bd:bc:e6:5a:e9:f8:
ef:6e:bd:b7:54:df:f9:e6:06:85:a9:4f:ec:3f:dc:
73:d6:82:67:f8:1d:0d:dc:78:22:ec:e9:35:36:2c:
48:0a:25:e2:36:b8:f5:c5:f8:c7:b4:64:90:29:8d:
ae:c7:fa:67:95:fe:42:50:37:3b:6f:4f:46:c3:41:
c3:3b:c5:8b:e3:64:19:1c:08:92:a5:0e:ff:58:a6:
fc:83:77:37:4b:a2:f8:71:d0:d9:b5:2b:7b:20:91:
75:a7:be:56:70:76:d1:20:45:f7:88:60:77:e6:b8:
a2:3c:7d:61:35:43:be:c3:d8:4a:02:7c:69:1f:6f:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3C:AB:0E:80:B5:09:14:5A:5B:AA:68:E0:DB:C8:E4:1D:81:C3:B5
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:40:f6:e9:95:ed:c4:8d:8b:7a:ca:1e:a3:95:b9:a4:68:b4:
45:02:8f:7c:5b:ea:ad:40:e7:e8:2b:1b:89:59:1c:55:f8:b2:
72:77:5e:a5:ea:bd:d8:85:21:96:9e:a7:07:12:fc:1e:0c:9b:
d0:de:e8:de:a7:5f:33:24:84:af:57:aa:09:71:6a:2c:de:b4:
0b:5f:e7:84:46:2e:e0:04:99:d2:d5:9e:61:19:ab:3b:4d:c4:
e2:54:7c:0b:ec:68:b7:65:a7:e3:10:92:90:7d:a3:f7:95:4e:
22:9b:da:37:b5:77:c0:c7:be:e3:ac:db:28:19:c3:33:75:9a:
5c:5f:48:7e:33:b1:1f:d9:97:9d:76:48:46:1b:a1:e7:d7:b7:
08:42:f0:cb:a6:58:9e:51:44:a4:83:ce:44:80:df:3a:bc:c7:
b2:f6:15:b2:b6:87:11:17:44:0a:5e:e8:25:57:d0:5b:51:6b:
27:3e:c5:f9:7a:b2:cd:93:bf:cf:43:58:da:fc:b5:8a:c6:88:
d3:15:82:40:73:e0:f6:5b:4d:20:f4:89:4b:0f:ad:1a:c1:d1:
2d:2a:08:8f:74:e0:fc:74:a9:90:98:9e:d9:aa:2a:b6:6c:fd:
b5:db:d7:44:94:12:1b:b9:c9:d4:f4:e3:44:c0:a8:9b:e0:ab:
fd:0e:41:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdaTWLe/judm3RavsBF60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZGM3NjMyN2U5MmYyNWZjNDcxYjM0NWEzN2QyNDNjYzgz
OTM1MDAwHhcNMjYwNzI5MDYwMDE4WhcNMjYwNzMwMDYwMDE4WjAzMTEwLwYDVQQD
EyhkZTNjYWIwZTgwYjUwOTE0NWE1YmFhNjhlMGRiYzhlNDFkODFjM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZjTUos7eo0J/OHoeu0uS/cEFvY5
LJVbhqA639A2FiD4ZeG6XSUTt0DYAR+XAJHtoVU9sk6yPf0luAlkXupJJ3tJ+RWw
5EKIFZN4Gz7ycSKovJzH/1P9i9ksfuO/WhYyCwyxVL/9calBbh2wMIZQjjWvXv2w
s5JcvA7A0eqS3Ou9vOZa6fjvbr23VN/55gaFqU/sP9xz1oJn+B0N3Hgi7Ok1NixI
CiXiNrj1xfjHtGSQKY2ux/pnlf5CUDc7b09Gw0HDO8WL42QZHAiSpQ7/WKb8g3c3
S6L4cdDZtSt7IJF1p75WcHbRIEX3iGB35riiPH1hNUO+w9hKAnxpH290bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN48qw6AtQkUWluqaODbyOQdgcO1MB8GA1UdIwQY
MBaAFBzcdjJ+kvJfxHGzRaN9JDzIOTUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYt
ODA3MzY5NTBhYTk0LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iNzhhMWMtMTMwMC00ZWY4LWFlOTYtODA3MzY5NTBhYTk0
LzEvSE54Mk1uNlM4bF9FY2JORm8zMGtQTWc1TlFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkD26ZXt
xI2Lesoeo5W5pGi0RQKPfFvqrUDn6CsbiVkcVfiycndepeq92IUhlp6nBxL8Hgyb
0N7o3qdfMySEr1eqCXFqLN60C1/nhEYu4ASZ0tWeYRmrO03E4lR8C+xot2Wn4xCS
kH2j95VOIpvaN7V3wMe+46zbKBnDM3WaXF9IfjOxH9mXnXZIRhuh59e3CELwy6ZY
nlFEpIPORIDfOrzHsvYVsraHERdECl7oJVfQW1FrJz7F+XqyzZO/z0NY2vy1isaI
0xWCQHPg9ltNIPSJSw+tGsHRLSoIj3Tg/HSpkJie2aoqtmz9tdvXRJQSG7nJ1PTj
RMCom+Cr/Q5Brw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:29:13 2026 by rpki-client