Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: hMM/P4rdO6Ovv+bE4pyN42f2TYm8z62E6tA5lI+Y2+s=
Subject key identifier: EF:77:ED:A8:D4:F6:BE:D8:2C:9A:D0:5A:76:53:E2:C0:2B:35:C2:FF
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 019EC44A0BCFA506F83C82DC227647373A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 04:00:47 +0000
Manifest this update: Sun 14 Jun 2026 04:00:47 +0000
Manifest next update: Mon 15 Jun 2026 04:00:47 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: Euuhfj5Awa/4/JeTmOxsVHicZIUwnpqB+PNwX87bK/c=)
2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:4a:0b:cf:a5:06:f8:3c:82:dc:22:76:47:37:3a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Jun 14 04:00:47 2026 GMT
Not After : Jun 15 04:00:47 2026 GMT
Subject: CN=ef77eda8d4f6bed82c9ad05a7653e2c02b35c2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:98:85:ea:70:e2:d8:57:19:97:11:bc:89:
d4:73:e3:a3:52:a0:0c:e8:a3:02:ec:ed:c0:0e:ef:
98:dd:73:ba:db:3f:15:6b:55:33:92:34:f3:a8:f0:
69:cb:5d:33:73:16:89:26:9b:dc:94:9a:3e:ed:33:
e9:7e:d5:42:5b:ea:47:25:1b:4e:84:71:65:89:47:
4e:05:8a:6f:69:f8:a2:31:77:15:49:0a:54:82:51:
09:23:a2:a6:76:5d:04:c3:07:26:2f:9c:9a:38:c3:
46:0b:e6:0e:46:a0:72:42:e4:67:34:3b:0d:87:35:
bc:cf:e7:1e:25:bb:a7:ea:77:83:72:0b:9a:10:06:
4a:21:52:58:4c:1f:34:2a:3a:c6:c8:6f:cd:b3:b3:
a1:7d:c3:35:8d:39:ac:f8:96:88:7c:01:d6:80:fc:
4f:7c:36:55:06:b6:38:e8:a0:1d:d2:33:04:3e:20:
90:ca:1c:1a:e7:0a:84:78:ab:61:5d:39:3e:de:26:
df:32:ff:14:c7:39:6a:76:dc:c6:61:40:e4:28:b4:
3c:c1:6a:0a:4a:5b:09:66:60:d6:20:2d:31:35:6d:
51:3a:7d:c0:87:db:4b:be:86:2a:0c:23:94:af:56:
c5:97:d5:6d:3a:2b:5f:4b:91:59:70:66:86:81:3a:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:ED:A8:D4:F6:BE:D8:2C:9A:D0:5A:76:53:E2:C0:2B:35:C2:FF
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e2:1b:20:90:d6:8d:5e:ce:41:b5:4b:05:ef:02:9a:3c:c9:
a3:31:62:a7:74:a0:39:b1:63:c6:35:76:f5:41:4b:32:34:14:
5f:b0:54:db:8c:00:90:cf:c4:1e:26:2f:0d:f5:47:c9:8d:1a:
e2:66:5c:a1:f9:80:c4:2c:44:28:af:99:0a:85:db:a9:89:25:
c8:22:38:df:a7:73:5e:73:77:9e:88:46:df:44:20:2b:12:34:
75:51:91:21:b9:ce:c3:2d:93:e9:0b:3a:f6:5f:2b:2e:f0:8d:
fd:ea:f6:d3:38:63:13:2b:cb:55:2f:ce:b2:8c:27:f9:83:e7:
b9:be:c2:b8:3f:17:cb:49:af:3e:08:ed:2e:f5:80:93:1b:ae:
cd:d3:6f:41:d3:52:f1:1a:a9:4c:32:dd:a3:99:c0:bb:ad:b6:
20:98:09:bd:87:95:89:f2:2e:1b:b7:7c:60:38:87:c0:d2:5c:
29:79:73:7c:cd:a4:eb:f7:0e:3d:30:00:1d:4c:42:63:e3:7f:
a0:f9:c7:b1:b9:f3:be:30:bd:48:bd:73:a7:bb:0f:38:fd:1e:
80:6e:a1:1d:7f:fc:4f:46:47:c9:83:29:39:4f:7a:d3:6a:aa:
a6:40:41:5c:e2:18:f3:52:24:60:a7:b8:27:37:11:5f:e2:69:
9f:80:f2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:25 2026 by rpki-client