Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: q7WjXmcJ3uLTqjTKF17x7V25Y33FyyFEM9DaiECiCAg=
Subject key identifier: 90:04:64:F1:40:8E:74:44:19:44:59:DD:EE:48:2B:85:9F:CB:74:88
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 019EC1EDB0B1A515695D463A49E6160073A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 1648
Signing time: Sat 13 Jun 2026 17:00:40 +0000
Manifest this update: Sat 13 Jun 2026 17:00:40 +0000
Manifest next update: Sun 14 Jun 2026 17:00:40 +0000
Files and hashes: 1: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: lYjaq85a9oPJdtwongxM5jZ/4GFHW74vWYVLvZeN0XE=)
2: WAiJPERlMEAh5qrgyMMcndKbs6c.roa (hash: zfIldmOVBvuxzGlnGLqlwDlsMvOVa6R4F1tNInZRtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:b0:b1:a5:15:69:5d:46:3a:49:e6:16:00:73:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Jun 13 17:00:40 2026 GMT
Not After : Jun 14 17:00:40 2026 GMT
Subject: CN=900464f1408e7444194459ddee482b859fcb7488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cb:a5:d7:c8:3c:86:6b:6f:67:6f:e1:9a:6c:
91:76:c6:c5:18:f6:42:cc:78:57:e9:fb:17:db:f3:
fb:02:17:f1:93:a4:a9:8f:c2:84:b0:7d:6b:c2:bb:
b4:a4:64:59:19:fb:1b:3a:5b:b7:2b:c3:b1:00:5d:
84:a1:04:76:d9:9d:31:64:de:8f:39:33:67:11:11:
7d:ba:11:6f:1a:6b:50:59:42:47:6f:a7:82:4e:33:
dc:a6:b8:0f:6c:6c:54:02:e3:ce:64:ac:87:29:53:
d5:fc:a6:0d:e4:c0:0a:f8:27:32:b3:4f:ca:c1:0b:
af:13:8c:22:39:91:1b:b2:e1:4a:47:9c:95:43:3b:
43:88:11:0a:2f:10:d6:cd:b3:79:71:3e:1a:26:18:
40:99:ae:6c:8a:ae:c5:9c:c1:aa:a3:28:a3:01:6d:
d1:d7:3f:02:84:2f:eb:f7:40:4d:1d:0a:37:b5:b4:
72:ad:44:1a:dc:1e:fb:01:f8:f1:81:2b:1e:ce:08:
f5:4b:16:c7:07:78:57:f7:93:cb:87:f7:cc:76:c2:
1c:3c:0c:b5:f0:a9:4c:f5:01:c8:ef:69:af:f2:61:
40:20:43:42:f5:fc:38:0c:92:2e:a5:45:a2:11:95:
d8:b9:c4:53:a8:ef:6e:b4:95:34:0c:a6:73:5b:03:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:04:64:F1:40:8E:74:44:19:44:59:DD:EE:48:2B:85:9F:CB:74:88
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:38:dd:0e:52:46:69:77:0a:78:1f:fa:26:1a:3e:7e:04:0f:
b3:f0:26:59:80:4b:03:67:6c:56:29:2c:e4:51:bd:73:66:55:
23:72:0c:8a:f9:13:af:a3:a7:ba:dc:a2:70:8d:64:1f:5c:f6:
7f:c1:9f:1e:c2:3b:ae:db:16:0e:2d:c0:77:9b:87:02:54:ee:
ed:96:00:9c:a6:03:50:2e:69:72:0f:ee:a4:19:80:ce:e1:73:
3b:7a:ac:5c:62:01:57:8a:2c:cd:96:92:e0:20:9e:a1:c0:15:
95:89:fc:e1:34:79:45:93:5e:84:8f:45:63:62:0d:66:35:dc:
6e:19:87:f7:91:11:c8:8b:84:56:72:19:0c:7f:56:8a:82:1d:
fd:af:c1:90:f0:83:1e:ca:0b:57:77:1c:5c:3e:2b:02:98:49:
a5:b0:8c:0d:29:82:07:96:cb:0a:d0:af:0f:3a:7d:a0:3a:ee:
17:84:58:32:cc:d6:ef:42:68:31:cd:85:92:b7:ad:1d:55:8e:
dc:76:8b:98:8d:f9:71:9c:70:af:6b:ed:5e:13:b0:2a:e4:79:
aa:9c:73:67:64:2c:c1:f6:24:c7:e9:62:18:c4:18:c1:65:e3:
ba:0a:ea:ec:fa:8f:89:39:54:f6:fa:83:45:8a:65:02:91:65:
2f:7d:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:54:36 2026 by rpki-client