Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: 6sPTd5KY1uYO4WgiCuYCYoGuYMtEijYVu7Z5jy4o08M=
Subject key identifier: 4D:F1:97:C8:D1:87:42:EC:9D:10:06:A1:16:3D:07:50:DA:AC:AD:F7
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 019ED42BC3158C4480CDCD3DAA27D3529A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0AF2
Signing time: Wed 17 Jun 2026 06:01:38 +0000
Manifest this update: Wed 17 Jun 2026 06:01:38 +0000
Manifest next update: Thu 18 Jun 2026 06:01:38 +0000
Files and hashes: 1: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: yAy9Gj9vY4zcPFJLusyqwihpoojrPV4SpPS0S3nifag=)
2: vRy4dtwuzcoaMObZOrhsdgekFn8.roa (hash: EEHH4lnEcaLiLMDse86Umm3P044hYY8hcdkDDqvn/M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:c3:15:8c:44:80:cd:cd:3d:aa:27:d3:52:9a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Jun 17 06:01:38 2026 GMT
Not After : Jun 18 06:01:38 2026 GMT
Subject: CN=4df197c8d18742ec9d1006a1163d0750daacadf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:d3:a5:2f:b4:24:8a:66:b5:af:3e:41:90:
96:09:2d:2e:ca:b9:e4:a2:14:1b:df:45:1e:3c:97:
05:e0:50:5c:95:be:92:42:b6:17:4c:97:32:a8:f8:
ce:89:4a:be:80:8c:8a:8b:41:3a:45:3e:82:6f:ea:
38:7d:fe:ad:e8:e8:08:c4:73:74:ed:4e:f7:57:8a:
91:fd:c7:fb:a6:59:a9:96:ae:00:bb:ae:5d:2c:32:
d6:9b:ea:53:68:f6:c9:bc:ae:cb:09:39:42:cb:0f:
95:93:a6:ee:e0:9e:25:47:bb:66:3f:ff:a5:3c:43:
ec:25:b2:3f:f5:90:36:da:e5:03:ad:f7:a9:a2:0c:
c6:08:cf:00:91:03:76:17:80:38:51:97:0b:14:43:
72:21:d3:0b:3f:36:3c:ef:d6:8c:c9:0d:70:16:0c:
cd:b6:3b:57:50:c0:40:68:ec:87:a4:a5:8f:5d:08:
41:6a:2d:94:38:42:0a:bc:03:f6:9f:2a:c8:60:e8:
16:bf:c6:f6:66:75:25:e4:ea:fb:d2:37:5b:45:88:
15:fe:c7:6f:3d:de:e4:f8:66:74:c7:1e:4e:00:9e:
34:5c:99:30:cb:f9:84:c7:b6:3b:e6:bb:07:13:a5:
be:fb:4b:95:27:dc:fb:df:98:25:73:52:ee:b9:7c:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F1:97:C8:D1:87:42:EC:9D:10:06:A1:16:3D:07:50:DA:AC:AD:F7
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e4:62:8f:f2:47:c8:10:33:93:14:9d:15:2d:31:1b:16:58:
0f:3e:0c:2f:f1:3e:fe:aa:47:10:ee:cf:50:f0:f9:0b:b6:44:
ac:68:c2:4e:0c:25:65:a3:af:07:38:66:da:32:6b:e5:4c:c0:
35:3a:ff:cc:5f:8f:0d:3d:62:31:9e:fe:13:f4:7f:02:b6:27:
55:d3:84:a3:56:2c:6e:95:dc:cd:6d:c2:17:d4:67:67:02:62:
f4:4d:bb:a7:0c:1c:81:94:e1:7f:ee:c2:09:5e:82:ec:89:2a:
03:11:f7:06:69:89:94:ac:7d:71:1b:2c:1e:b9:da:a3:ca:0e:
82:51:40:46:fc:ab:88:25:98:8b:62:fb:04:42:55:97:c7:dc:
db:9b:c0:72:74:d5:30:c8:da:e7:0c:77:52:79:b3:67:7e:2b:
af:ac:88:05:88:1c:38:8d:59:ae:80:b1:7b:5b:12:e6:7d:a8:
10:b8:d1:80:6e:58:95:6f:5f:4b:27:aa:45:a8:c4:4d:c0:52:
ae:6e:d6:f1:32:0b:45:37:df:39:1c:3b:5d:c4:ce:67:fc:b1:
06:f8:1e:0d:1f:39:89:79:c5:3f:16:fa:9d:1b:ec:01:3c:4e:
37:9a:af:51:95:27:35:9a:b2:eb:8a:e7:f4:50:f4:0a:bf:92:
eb:af:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:02:46 2026 by rpki-client