Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: yGomRxJpPeC07nTG6G1Wi2mGYaFHSle0cHwbUKKAkV4=
Subject key identifier: 42:CF:0C:69:E5:CB:47:30:21:C3:E5:71:42:8B:F2:9A:17:21:89:6A
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 019EC06E5BCD7331C67712A535601440C3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 167E
Signing time: Sat 13 Jun 2026 10:01:58 +0000
Manifest this update: Sat 13 Jun 2026 10:01:58 +0000
Manifest next update: Sun 14 Jun 2026 10:01:58 +0000
Files and hashes: 1: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: SEra+lKfBSrdGb6Qad0lxwVZzF1VXi2ZJKwiRSEy+XQ=)
2: jYlsueQe6bTuxJo3Pao6U7_lbjM.roa (hash: xljjWi7Hj8DkN9QHcryj+ylFV/KQmtfdUgA8aZcK8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:5b:cd:73:31:c6:77:12:a5:35:60:14:40:c3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Jun 13 10:01:58 2026 GMT
Not After : Jun 14 10:01:58 2026 GMT
Subject: CN=42cf0c69e5cb473021c3e571428bf29a1721896a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:d9:66:b6:4d:3b:23:ee:ea:68:fa:4f:44:
27:e8:8d:58:c8:d4:c9:90:61:2f:af:ca:21:6f:20:
4a:9b:9a:34:0b:af:0c:8f:a7:db:fb:98:d9:1e:6d:
06:37:60:eb:c2:a3:e9:5f:b5:7a:b1:43:d3:e3:d5:
c2:d1:30:1b:84:e4:88:0d:ee:08:c6:79:10:cc:9c:
04:16:d3:bf:25:8d:4a:1e:f9:b6:f3:99:b9:c6:e7:
81:6d:68:f4:09:66:a8:01:f6:b8:8a:cc:00:63:bc:
7e:15:5e:6f:64:f1:2e:04:9e:83:52:7f:92:9b:51:
73:2a:cf:e2:0d:9f:74:43:66:c0:d5:44:ee:84:9e:
59:3b:1c:0d:0f:dc:2f:9d:a6:55:c3:8d:c5:11:c4:
3c:c0:12:6d:45:07:24:54:1b:5d:9a:2a:07:2f:27:
1d:cd:01:05:ea:e3:1a:c5:d5:f7:96:9c:26:b4:3b:
7d:6b:09:c5:f6:e2:88:dc:4c:3f:0f:bb:11:0f:b5:
10:f8:9f:37:05:08:81:c1:68:6b:b3:f1:e2:6d:62:
41:2c:2f:b8:9e:d5:a9:b0:fc:e1:0c:c5:39:4c:4a:
15:99:59:58:a7:18:9f:7d:0a:60:24:35:41:d8:a4:
15:af:01:36:b8:40:79:3c:f8:72:48:95:ed:df:e9:
97:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CF:0C:69:E5:CB:47:30:21:C3:E5:71:42:8B:F2:9A:17:21:89:6A
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b0:6c:1f:32:c7:42:6c:b0:e6:65:9d:00:5a:bc:f1:f2:09:
21:a1:d5:75:c3:30:2f:b5:be:89:6d:a7:da:98:e6:94:cb:23:
95:6a:0d:e8:c0:78:98:33:a3:bf:8a:3e:45:d5:6f:ba:55:33:
ca:c3:e3:e6:fc:cc:2a:71:fa:dc:1b:7f:04:61:b7:67:38:87:
a1:5c:f0:36:bc:f6:f5:a6:e6:7a:4e:e7:6c:9a:31:4d:1d:7a:
67:6f:1b:1d:59:67:e0:b8:c1:fc:5d:d8:c1:d3:bc:62:01:38:
39:fc:7f:37:22:aa:4d:12:d6:ed:e0:89:b4:f9:98:0c:1b:35:
b9:13:af:cf:70:42:0e:9b:31:bf:d6:1c:26:e7:ec:ef:d3:88:
f1:1f:de:48:01:02:bc:94:74:91:0e:ba:c1:33:b1:3d:3c:29:
76:6c:ad:fc:b0:7f:57:6f:f2:39:a1:26:74:6e:7f:57:8d:ba:
e7:2f:fa:c5:2e:72:e2:e7:c5:a9:09:db:f0:48:ad:0a:56:91:
53:c3:70:2e:af:36:18:1e:e3:26:39:8a:7d:4b:87:f2:7e:5f:
92:3b:9d:18:2e:df:1e:46:0d:f9:4d:fa:2a:4d:ee:e9:79:43:
48:65:da:af:b0:45:80:5f:c7:9d:b2:1b:a3:0c:83:b0:7d:8c:
34:4a:77:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AblvNczHGdxKlNWAUQMPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGFjZWVhMTdmNTNkZTcwOGY5YTczYWJjMGM4NzE2NGQy
MDdkMDgwHhcNMjYwNjEzMTAwMTU4WhcNMjYwNjE0MTAwMTU4WjAzMTEwLwYDVQQD
Eyg0MmNmMGM2OWU1Y2I0NzMwMjFjM2U1NzE0MjhiZjI5YTE3MjE4OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMjZZrZNOyPu6mj6T0Qn6I1YyNTJ
kGEvr8ohbyBKm5o0C68Mj6fb+5jZHm0GN2DrwqPpX7V6sUPT49XC0TAbhOSIDe4I
xnkQzJwEFtO/JY1KHvm285m5xueBbWj0CWaoAfa4iswAY7x+FV5vZPEuBJ6DUn+S
m1FzKs/iDZ90Q2bA1UTuhJ5ZOxwND9wvnaZVw43FEcQ8wBJtRQckVBtdmioHLycd
zQEF6uMaxdX3lpwmtDt9awnF9uKI3Ew/D7sRD7UQ+J83BQiBwWhrs/HibWJBLC+4
ntWpsPzhDMU5TEoVmVlYpxiffQpgJDVB2KQVrwE2uEB5PPhySJXt3+mXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELPDGnly0cwIcPlcUKL8poXIYlqMB8GA1UdIwQY
MBaAFB0KzuoX9T3nCPmnOrwMhxZNIH0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEt
YzZiY2NhNzIxNDcxLzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEtYzZiY2NhNzIxNDcx
LzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrBsHzLH
Qmyw5mWdAFq88fIJIaHVdcMwL7W+iW2n2pjmlMsjlWoN6MB4mDOjv4o+RdVvulUz
ysPj5vzMKnH63Bt/BGG3ZziHoVzwNrz29abmek7nbJoxTR16Z28bHVln4LjB/F3Y
wdO8YgE4Ofx/NyKqTRLW7eCJtPmYDBs1uROvz3BCDpsxv9YcJufs79OI8R/eSAEC
vJR0kQ66wTOxPTwpdmyt/LB/V2/yOaEmdG5/V4265y/6xS5y4ufFqQnb8EitClaR
U8NwLq82GB7jJjmKfUuH8n5fkjudGC7fHkYN+U36Kk3u6XlDSGXar7BFgF/HnbIb
owyDsH2MNEp3EA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:09:17 2026 by rpki-client