Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
File: Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft (raw, json)
Hash identifier: 0TxX6IueEvcXnO6GO8I1lSJCwEMB/cc7CLR785w6vgI=
Subject key identifier: C8:87:C2:55:CA:3A:49:68:B4:45:8C:DC:D2:F1:7E:ED:58:F4:F6:80
Authority key identifier: 1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
Certificate issuer: /CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Certificate serial: 019EC25C10809CDC0351099545A5897A6001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
Manifest number: 08AA
Signing time: Sat 13 Jun 2026 19:01:13 +0000
Manifest this update: Sat 13 Jun 2026 19:01:13 +0000
Manifest next update: Sun 14 Jun 2026 19:01:13 +0000
Files and hashes: 1: Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl (hash: dPTfNNpfcHHPOiYGoYJ2kOuMjmukojFzUOrh5MRaUtM=)
2: lx2J9WOsX2M54t8-J-Ipl4_XUM4.roa (hash: jlAohhibW/lQaiHQMqOapsCsgW9kpTO6lOTRSlTXr4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:10:80:9c:dc:03:51:09:95:45:a5:89:7a:60:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1deb3faa8388549b55cb3f3abd4c6c15106cf53b
Validity
Not Before: Jun 13 19:01:13 2026 GMT
Not After : Jun 14 19:01:13 2026 GMT
Subject: CN=c887c255ca3a4968b4458cdcd2f17eed58f4f680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:07:38:28:b0:b8:86:8c:e3:f9:88:85:a3:
44:ef:aa:f3:20:6f:7e:f2:74:8a:a6:58:8c:5d:23:
cc:43:eb:e0:dd:ee:2f:6c:03:41:fe:15:9b:76:95:
92:91:6b:cb:7e:5d:0b:b0:c0:28:14:6f:2a:d0:82:
f2:fd:2b:6f:d0:64:15:3c:c7:4c:5b:87:42:e8:78:
f3:a7:e3:dc:64:3e:e1:25:28:e7:0d:37:08:6b:75:
66:5c:bb:32:7e:78:fb:30:ac:43:39:9c:df:6d:6d:
df:d8:3e:5d:d6:2d:67:92:0a:3b:74:69:fe:cd:8c:
b1:25:2d:48:4c:f1:fe:99:89:c4:ec:39:38:f1:69:
b2:d0:03:08:09:d7:d0:a2:d8:34:a9:b1:cc:33:a6:
fa:46:9f:09:c2:ee:82:6b:0d:af:f3:93:78:b2:76:
dd:25:9d:f3:0b:b5:c8:a4:9a:3f:26:f4:1f:7d:b3:
9d:d6:e2:2a:f9:10:68:00:50:ce:15:2b:af:5d:ac:
2c:bc:38:5c:c3:5b:7a:c7:52:93:36:5e:dc:b5:9c:
ca:35:dd:27:67:86:ee:e8:7e:ae:d2:83:35:e2:2b:
9f:e9:54:86:ff:e5:1d:c1:bd:0e:6c:8c:af:e1:91:
75:64:44:94:92:50:ef:d8:db:16:11:fa:c4:0e:79:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:87:C2:55:CA:3A:49:68:B4:45:8C:DC:D2:F1:7E:ED:58:F4:F6:80
X509v3 Authority Key Identifier:
keyid:1D:EB:3F:AA:83:88:54:9B:55:CB:3F:3A:BD:4C:6C:15:10:6C:F5:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hes_qoOIVJtVyz86vUxsFRBs9Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6c4131-365c-4c14-9e0b-502a957fdaf8/1/Hes_qoOIVJtVyz86vUxsFRBs9Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1d:4a:6b:f7:a8:47:98:28:9f:8f:2a:87:8b:29:08:4c:dd:
34:65:e1:e2:bd:87:93:82:a3:97:67:9f:54:80:cf:ba:1d:35:
e4:b7:15:a8:89:c2:65:7c:6a:98:ca:0e:e8:0b:5c:29:2a:35:
4a:9c:0e:6c:d8:fd:50:10:13:f3:56:4f:22:3a:0e:6a:70:94:
17:ea:c7:bf:44:4f:24:eb:de:18:68:09:37:0b:60:34:80:51:
06:16:80:82:54:5d:fa:fd:db:43:40:57:ee:7c:be:18:1e:92:
c5:fd:4b:3e:b3:9c:c2:a8:c1:08:9f:de:1b:3d:b2:0b:ea:43:
e4:8b:e3:85:7b:65:ec:19:ac:58:fa:5f:91:f2:32:17:4e:17:
3b:d7:ae:d4:bd:26:07:c1:46:c9:ea:74:5e:c5:57:2e:20:ff:
97:06:84:3d:51:3b:cc:10:72:5c:42:4d:38:b4:92:70:ac:eb:
b6:88:36:17:2e:c0:d0:ae:a6:0c:d3:d0:fb:49:d0:2a:78:30:
f6:0e:fd:fe:51:91:ea:e6:2c:c8:13:20:cd:38:0c:c5:31:9d:
27:23:95:38:44:23:8a:03:65:00:26:b4:f5:c6:d9:38:5c:a5:
fa:6a:87:bf:3c:a9:ca:dd:40:b9:b6:ea:4a:6e:4b:ad:23:50:
ac:7b:1d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:18:22 2026 by rpki-client