Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: 4lKX7MAnrTD5PfCKiSK3V4E9fH9uuFoXSDRouKkksyw=
Subject key identifier: 7B:FD:67:EB:91:3B:BE:AF:11:95:FA:75:E4:37:CF:7A:2D:BB:2B:9E
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 019EC06E4D86A22078B906296B9A25A9D692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 08FE
Signing time: Sat 13 Jun 2026 10:01:54 +0000
Manifest this update: Sat 13 Jun 2026 10:01:54 +0000
Manifest next update: Sun 14 Jun 2026 10:01:54 +0000
Files and hashes: 1: TVMwQ3POqUvlVpd6DIhGjA31OEo.roa (hash: Whcd9L1nk9Dj6hFZTyskGlKlxUc8A3COyWU8lK84zTI=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: Quo/b0nhBpefUbtQcFf1cJaWSKO5P5piRCLGac2ysxo=)
3: rKoSjHhvJImZNOF1L4tvqu9KSjU.roa (hash: ED11ejyoT5xPcyYKinY7Cd+nJxVa+vcQf9GFo/cbaCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:4d:86:a2:20:78:b9:06:29:6b:9a:25:a9:d6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Jun 13 10:01:54 2026 GMT
Not After : Jun 14 10:01:54 2026 GMT
Subject: CN=7bfd67eb913bbeaf1195fa75e437cf7a2dbb2b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:be:b1:68:f6:a3:23:ea:24:d1:4a:e3:cd:
ae:4a:9e:7a:e8:83:16:57:1f:f0:ee:15:18:97:a3:
ed:ea:41:89:16:12:ce:5f:f9:d8:ec:4e:a0:32:39:
01:2f:84:f3:be:df:e5:49:ca:e6:93:3b:33:bf:9e:
0d:0d:fd:16:34:9c:52:6f:9d:b6:da:a0:12:c4:12:
62:c1:99:87:bd:0a:4b:2b:a3:53:ec:74:b4:81:ca:
9c:a1:f6:1a:06:2a:69:dd:93:80:21:b5:99:af:c5:
a2:1d:65:b0:d3:2c:da:a7:c8:d4:11:29:1f:e0:f4:
38:0b:8b:1f:e0:dd:4a:58:36:97:d8:54:99:dc:1c:
52:e7:4b:57:01:7e:7e:d0:90:50:be:80:a6:41:e7:
f4:68:98:df:0c:93:df:d7:b8:0c:08:b0:ff:fe:01:
e3:40:50:07:33:af:0d:45:44:96:a8:85:20:6c:8d:
26:d2:e3:f4:39:0f:62:6e:6b:41:de:2e:ae:9c:65:
ea:92:ea:3b:e8:dd:be:b8:93:cd:f8:b6:43:ad:bb:
58:ac:61:dc:fe:1e:93:48:44:fa:bc:cd:6d:8b:7d:
78:e9:f7:12:e3:51:8e:71:09:54:f3:7e:ee:56:7a:
89:76:90:ef:c3:e1:7c:81:ee:40:03:e3:be:ae:5b:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FD:67:EB:91:3B:BE:AF:11:95:FA:75:E4:37:CF:7A:2D:BB:2B:9E
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f4:88:7c:4b:b8:a1:18:97:11:f7:47:07:16:10:12:40:db:
d4:e2:b4:21:34:3d:a6:2f:82:8c:4a:46:06:3d:45:00:9b:7b:
26:3e:fe:c3:e3:bf:ec:4e:3e:56:64:02:71:c9:4f:3d:e7:87:
1e:15:93:b7:ba:d1:e4:cc:dd:38:eb:7c:d3:59:46:80:c5:2e:
67:f1:27:f1:82:66:31:9b:3f:cb:1c:f8:c8:09:10:38:7c:c9:
fc:98:fd:8a:8b:01:ef:a0:38:a2:5c:b2:4f:7e:0d:45:51:85:
b7:04:32:0d:50:f4:da:cb:0c:f7:97:77:32:98:3e:71:d9:aa:
2f:f1:d2:dc:5f:00:c3:40:45:09:72:96:50:86:cd:19:58:83:
35:3f:b6:df:d0:84:e4:c9:82:86:0a:70:2f:d9:0f:da:5a:f1:
31:9a:aa:ed:81:85:66:c7:89:66:ec:48:4e:97:6e:98:3c:f5:
a2:d7:40:eb:43:30:5a:3d:03:1b:b8:b6:99:a4:d7:18:6a:13:
e6:0f:ab:29:23:73:75:46:06:d9:6c:93:d7:35:9b:8e:d0:7b:
bd:d3:d2:8b:a4:5f:10:6a:ef:be:1b:86:02:70:57:68:50:ac:
c9:32:9d:78:80:84:68:d3:0b:38:08:9d:fd:2d:32:e8:41:e0:
a6:ee:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:12:07 2026 by rpki-client