Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: D4oSLQle6C0elSk6DwK6rBd/RjcnyHI0/Tom+6bCOEc=
Subject key identifier: A4:84:B8:DC:9E:22:C1:46:A9:CA:95:22:EC:52:F6:07:F8:58:8D:AA
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 019EC3DC1636BDA2658A70F1A992BE165C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 1649
Signing time: Sun 14 Jun 2026 02:00:41 +0000
Manifest this update: Sun 14 Jun 2026 02:00:41 +0000
Manifest next update: Mon 15 Jun 2026 02:00:41 +0000
Files and hashes: 1: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: pGpvTCVmLnZNtsxtolQBz3dCGRx+J1daF0xpceICdaU=)
2: WAiJPERlMEAh5qrgyMMcndKbs6c.roa (hash: zfIldmOVBvuxzGlnGLqlwDlsMvOVa6R4F1tNInZRtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:16:36:bd:a2:65:8a:70:f1:a9:92:be:16:5c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Jun 14 02:00:41 2026 GMT
Not After : Jun 15 02:00:41 2026 GMT
Subject: CN=a484b8dc9e22c146a9ca9522ec52f607f8588daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:54:82:52:4d:e5:56:0e:59:bb:13:69:25:
d3:f0:0c:bc:17:a8:b6:ff:1f:eb:c7:42:bb:1d:25:
c9:f2:be:a2:0b:02:21:5f:08:e5:6c:9b:f6:9e:98:
c6:a2:e4:c5:b6:20:df:2a:fe:92:47:f8:a9:1c:90:
f2:7d:99:0e:1f:7d:86:4e:76:6f:f7:b4:53:49:48:
72:f6:a3:af:8b:2c:24:0a:04:65:8e:a8:cf:b8:80:
97:88:11:69:30:2d:cb:9e:4f:83:c9:57:bc:c1:96:
42:f7:40:c8:17:a6:d0:cb:b8:9b:d7:37:1f:ef:c1:
20:0b:51:89:20:fc:7f:12:26:c7:8a:b3:77:a6:ca:
7b:68:93:f6:11:1c:28:35:97:4a:f1:26:83:03:45:
0c:87:5e:a8:d9:26:a2:37:67:10:35:aa:ba:9a:94:
8f:14:8f:1d:4a:37:0b:71:29:4b:3a:f5:bb:c6:61:
33:33:46:db:8d:35:10:55:3a:5b:f3:a5:48:b3:1e:
10:94:f4:a6:71:5e:d3:ba:d6:c7:5d:d4:2e:e3:1b:
4e:2c:1d:4a:c2:93:c0:93:b2:5f:71:f6:cb:ac:87:
04:f4:20:cc:9c:ad:3f:d9:6d:c1:bd:7f:7d:16:84:
13:04:5c:78:42:44:14:8a:fa:c0:2c:11:fd:ee:c7:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:84:B8:DC:9E:22:C1:46:A9:CA:95:22:EC:52:F6:07:F8:58:8D:AA
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:61:9f:d7:94:85:29:91:b4:7a:dd:3a:47:02:a0:cf:98:0f:
12:a8:cb:82:c8:a2:c7:38:6b:79:18:13:7d:01:e9:83:51:3b:
ec:32:a8:c3:78:a9:13:8e:3c:88:a7:c1:5e:48:5d:07:8e:a1:
e4:e3:64:83:69:68:64:f3:4c:3c:20:0d:b2:f8:23:45:81:8f:
a3:ec:1b:f1:22:36:e1:f4:be:44:89:1e:14:e8:67:95:92:ea:
e7:50:4d:1f:7c:a6:91:de:0a:11:2e:5e:a0:3a:a2:2f:16:33:
45:75:d4:40:df:63:d7:d3:7d:15:07:18:a5:e4:ce:34:27:dc:
ff:a8:56:4e:16:a4:ab:7f:03:54:07:2e:c6:e4:db:1f:55:ef:
e4:0d:47:e6:37:fa:0d:05:23:83:16:15:5d:9f:cf:08:90:11:
15:e0:88:ef:96:bd:bc:87:91:92:9f:eb:32:c1:f1:27:d5:f1:
47:f4:48:dd:75:94:40:72:0d:61:1e:1d:3a:89:67:18:a3:12:
c4:d8:35:b5:fb:cf:b1:a5:59:f2:ef:2d:cc:67:84:a0:43:18:
22:2b:6b:d3:5d:33:37:61:ce:93:4c:83:e9:4e:bf:e3:f8:87:
4b:ab:9d:5a:a6:95:ce:8b:a8:dd:e1:da:11:f8:ce:7c:d0:d4:
f3:bc:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:49:46 2026 by rpki-client