Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: Iu0C2NnXMj4zQPjsRiH9O/haGSBdnIgPkbaUotIVaRU=
Subject key identifier: DF:84:7F:90:80:B4:11:99:6B:AB:87:94:0E:6D:85:82:4C:E5:A7:E4
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 019EC148B0180B415FFAFD1059CBEC2C5960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 14AC
Signing time: Sat 13 Jun 2026 14:00:26 +0000
Manifest this update: Sat 13 Jun 2026 14:00:26 +0000
Manifest next update: Sun 14 Jun 2026 14:00:26 +0000
Files and hashes: 1: WJgbjZB87tJLoahMumVDjucLblI.roa (hash: YviU04V4NEhTzYiRRcQuelFb9gp3nZ2OardyM6DZLlI=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: fVmsY2fFDBSwBC9tC48o/+cDGqrbuKoNFwArLnJfUlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:b0:18:0b:41:5f:fa:fd:10:59:cb:ec:2c:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Jun 13 14:00:26 2026 GMT
Not After : Jun 14 14:00:26 2026 GMT
Subject: CN=df847f9080b411996bab87940e6d85824ce5a7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:81:ce:28:07:82:94:e3:a7:ac:f5:4f:7d:
fb:eb:71:3a:68:2b:47:7f:03:c7:91:5c:0f:61:44:
ed:fc:c5:91:1c:94:74:9b:6d:b5:b9:5e:63:7a:5d:
c2:43:74:2b:e9:2d:ce:be:e5:5a:33:1b:bd:0e:6b:
2b:19:b0:55:9f:3b:ba:b2:75:18:b7:67:02:12:2e:
52:67:d2:67:d4:7a:19:89:95:2a:04:b4:d5:66:2a:
05:b4:63:8e:6a:a4:8d:33:9d:a7:e6:13:5d:f1:8e:
c9:d6:21:73:92:9c:20:bc:d3:23:c1:ab:8e:87:67:
a8:ec:d6:cb:21:7b:b7:c1:2d:5e:45:e0:a7:34:42:
c0:2d:1d:b9:9f:f8:b9:a8:ef:e1:21:b3:ef:65:11:
85:77:bb:aa:a8:9c:4f:4c:88:cd:c7:5d:9e:00:62:
94:f2:d9:c6:a3:de:37:b2:cf:35:f1:92:e0:83:08:
0d:54:f1:e7:2b:9a:ec:1f:82:55:22:97:e6:31:f6:
02:bf:ae:b8:1a:71:f7:f9:a1:b5:ea:1f:8e:81:a5:
21:02:2e:1e:4b:34:0d:45:8e:38:ff:42:56:40:19:
1a:50:9b:04:6a:ca:ed:25:8b:90:7d:94:28:c7:68:
33:53:27:0b:aa:29:ba:e7:39:ae:2a:d3:88:0d:e2:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:84:7F:90:80:B4:11:99:6B:AB:87:94:0E:6D:85:82:4C:E5:A7:E4
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:67:1b:aa:ed:6d:23:84:42:20:c2:79:df:b5:8e:52:f4:d3:
de:44:d2:fa:93:e5:56:d2:6a:eb:7f:b9:40:c4:cd:e0:40:dc:
a3:3b:73:e1:88:28:c5:37:cc:af:ff:64:4a:f0:8a:bc:9c:bf:
aa:47:9d:48:4f:f2:a8:2a:a6:e6:91:8f:3c:1b:4d:8a:29:03:
a9:10:c0:d1:b3:43:01:90:62:29:aa:e4:cc:68:cf:48:f1:78:
5a:10:21:38:b3:d0:8b:11:7e:8c:cb:4d:e4:03:af:82:98:1d:
5d:28:90:b3:f3:71:fc:d4:3e:88:df:81:be:ba:6f:3e:87:e5:
65:ee:b5:76:b6:42:1f:eb:a8:7c:90:e3:9a:2a:03:53:79:b6:
85:6c:19:26:ae:f7:43:ab:7a:cd:16:dd:fa:12:35:b5:df:d7:
ed:eb:89:c8:8c:2f:a9:a5:1f:74:48:32:01:25:33:02:95:fb:
82:9b:05:a8:73:93:b2:5e:81:1a:90:7b:86:e3:77:ce:c7:6a:
66:3b:ef:db:d8:df:8e:b2:85:30:0a:37:d4:65:a5:bf:9c:92:
d1:2a:2f:42:0b:ac:3e:35:7c:64:2a:49:ea:40:9c:b1:5e:4c:
ef:d3:e1:dc:53:72:85:2e:2f:2c:59:c6:54:75:ab:a5:9f:ad:
27:2e:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:07 2026 by rpki-client