Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: /T/OLvKsjEsQlwmTLkH2vZ6zsjq6JIX+ikBkSsjnnow=
Subject key identifier: C3:27:8F:F6:84:6E:70:EF:40:D5:D8:BD:87:09:BF:3F:94:06:16:65
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 019FAB63B5D637A57C43A136D45683FCF2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 01:01:06 +0000
Manifest this update: Wed 29 Jul 2026 01:01:06 +0000
Manifest next update: Thu 30 Jul 2026 01:01:06 +0000
Files and hashes: 1: DB-kubcDSriQvnabeDogJ7LkMfM.roa (hash: XGoLRb9s7HKmX6rpBYGsBJA5idHvV3yS22+b7xVn/rY=)
2: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: E+rqC/OruFTZaaZ0buXY0QjxF7IbgZolPiQQUxv0HJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:b5:d6:37:a5:7c:43:a1:36:d4:56:83:fc:f2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Jul 29 01:01:06 2026 GMT
Not After : Jul 30 01:01:06 2026 GMT
Subject: CN=c3278ff6846e70ef40d5d8bd8709bf3f94061665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:78:92:78:4e:b1:5c:92:f0:46:87:1a:c4:11:
0c:a9:d6:26:7d:85:22:27:64:db:f6:f8:28:1e:e5:
4a:1a:b4:64:0f:bf:a7:15:b6:3f:8c:5d:d1:ab:3e:
17:04:25:71:02:c2:b1:26:21:6d:0d:7e:d0:41:89:
cb:d1:8d:a3:7e:e7:1f:8c:00:68:a9:3d:53:36:1f:
4e:51:c1:57:f7:bf:58:c2:34:b6:20:69:28:ee:55:
6b:2f:1b:6a:50:58:03:38:0e:7a:ea:c9:b1:a6:c0:
54:f6:0b:67:78:6b:ab:21:86:f5:5a:3f:62:20:6d:
82:19:91:69:71:92:64:13:6c:65:f7:f2:62:1f:a0:
b6:9c:c4:5f:70:ab:b0:e7:a6:87:bc:03:36:b8:b1:
03:14:a5:c0:8a:7d:a7:41:0b:65:15:46:89:88:e6:
8b:52:e9:a5:5f:39:f7:34:98:9f:3d:9a:70:9e:5b:
2f:5c:6d:99:03:e3:2e:c9:08:77:28:02:ab:60:48:
07:4c:d4:8a:72:83:8c:2a:df:0b:3d:ff:55:62:f4:
c9:20:34:94:5f:7a:58:46:49:34:f2:24:e1:12:53:
13:42:c0:07:f8:73:3b:e6:f8:f8:69:bd:cb:04:06:
fb:76:74:b4:bd:2e:20:ec:f2:2e:3f:88:c3:f7:cf:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:27:8F:F6:84:6E:70:EF:40:D5:D8:BD:87:09:BF:3F:94:06:16:65
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:82:3e:db:27:d3:bf:c6:36:28:14:0d:57:75:49:0f:1d:2b:
d9:2f:d6:46:98:c2:76:1d:a2:ce:17:cc:83:57:37:35:70:c1:
86:4b:0b:a3:62:3b:f4:b0:d5:4e:f2:92:b9:f4:90:4b:a6:37:
8b:4d:bc:64:c5:b2:d0:42:37:6e:a4:b8:f8:9a:51:c8:19:68:
7e:20:5f:17:06:24:88:29:36:f8:5e:e8:85:d5:47:d7:8a:67:
5f:5c:6b:06:aa:c8:26:cb:69:ca:be:30:d0:55:d1:ee:ca:b2:
66:f1:65:75:b4:97:64:7c:23:d4:98:5b:67:fd:2c:dd:96:ef:
7c:8d:bc:d3:24:6a:b4:30:d4:b2:a1:83:29:cc:a3:0e:09:4d:
ee:f4:a4:7f:19:64:71:97:f9:b7:49:59:77:9f:08:bd:98:9e:
27:af:5e:79:14:8e:47:d6:c8:4e:bf:a5:b7:f1:9a:0c:18:55:
76:01:dc:06:1e:53:44:35:17:1d:42:4b:eb:8a:cc:ac:e3:4a:
3b:d2:dd:8d:66:38:cc:bf:40:79:36:09:4d:85:15:90:b9:ff:
59:83:8e:d8:9a:e4:4a:24:76:0f:2e:f0:41:38:53:9d:e5:6d:
17:c8:f0:cc:b1:2e:30:97:28:4e:70:a1:be:17:b4:17:19:c1:
51:a0:2a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY7XWN6V8Q6E21FaD/PK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGMwZGIwMDY1ODQ0ZDk1OTRkZmU4ZGQ4ZWZkNzdlZDFl
NDkzZjgwHhcNMjYwNzI5MDEwMTA2WhcNMjYwNzMwMDEwMTA2WjAzMTEwLwYDVQQD
EyhjMzI3OGZmNjg0NmU3MGVmNDBkNWQ4YmQ4NzA5YmYzZjk0MDYxNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XiSeE6xXJLwRocaxBEMqdYmfYUi
J2Tb9vgoHuVKGrRkD7+nFbY/jF3Rqz4XBCVxAsKxJiFtDX7QQYnL0Y2jfucfjABo
qT1TNh9OUcFX979YwjS2IGko7lVrLxtqUFgDOA566smxpsBU9gtneGurIYb1Wj9i
IG2CGZFpcZJkE2xl9/JiH6C2nMRfcKuw56aHvAM2uLEDFKXAin2nQQtlFUaJiOaL
UumlXzn3NJifPZpwnlsvXG2ZA+MuyQh3KAKrYEgHTNSKcoOMKt8LPf9VYvTJIDSU
X3pYRkk08iThElMTQsAH+HM75vj4ab3LBAb7dnS0vS4g7PIuP4jD98+e3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMnj/aEbnDvQNXYvYcJvz+UBhZlMB8GA1UdIwQY
MBaAFIVMDbAGWETZWU3+jdjv137R5JP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQt
NjBiOTM1OTViYWM5LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9lYzY3ZGItYzdhMS00OGE2LWFiOTQtNjBiOTM1OTViYWM5
LzEvaFV3TnNBWllSTmxaVGY2TjJPX1hmdEhra19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4I+2yfT
v8Y2KBQNV3VJDx0r2S/WRpjCdh2izhfMg1c3NXDBhksLo2I79LDVTvKSufSQS6Y3
i028ZMWy0EI3bqS4+JpRyBlofiBfFwYkiCk2+F7ohdVH14pnX1xrBqrIJstpyr4w
0FXR7sqyZvFldbSXZHwj1JhbZ/0s3ZbvfI280yRqtDDUsqGDKcyjDglN7vSkfxlk
cZf5t0lZd58IvZieJ69eeRSOR9bITr+lt/GaDBhVdgHcBh5TRDUXHUJL64rMrONK
O9LdjWY4zL9AeTYJTYUVkLn/WYOO2JrkSiR2Dy7wQThTneVtF8jwzLEuMJcoTnCh
vhe0FxnBUaAqJw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:36 2026 by rpki-client