Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
File: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft (raw, json)
Hash identifier: eA75gjx8ne0HgPGw7ICovV4B1ucHJXe64oV3y2faUXY=
Subject key identifier: 18:32:8B:AC:E8:C4:87:1B:7F:0E:FB:2C:54:18:B6:C1:B1:40:A7:00
Authority key identifier: 85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
Certificate issuer: /CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Certificate serial: 019EBEEC35726C11554E616F6658741A1E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
Manifest number: 17F1
Signing time: Sat 13 Jun 2026 03:00:11 +0000
Manifest this update: Sat 13 Jun 2026 03:00:11 +0000
Manifest next update: Sun 14 Jun 2026 03:00:11 +0000
Files and hashes: 1: 4KbAohA8ssFR1i33E3s1iD_d4NM.roa (hash: hNIZfJq4/MLB3UNEqiTbF6882A38pDgGoQNN1odn41g=)
2: 63y8SGT1xErvBSh2Z_hJttu62lM.roa (hash: JI2NXJcRm68/TBBkycOEqEDZ5p5swkLFyZRc8a9XM30=)
3: hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl (hash: TTdz2fYHYW37VH05y2VARGboi3veadJPeCsBE1h+mMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:35:72:6c:11:55:4e:61:6f:66:58:74:1a:1e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85370cc5d260f3e2aeff5dd8f8f4a415a2345a81
Validity
Not Before: Jun 13 03:00:11 2026 GMT
Not After : Jun 14 03:00:11 2026 GMT
Subject: CN=18328bace8c4871b7f0efb2c5418b6c1b140a700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:eb:39:ed:1c:34:f3:9a:9f:77:f8:1d:d7:
ca:5f:e5:51:86:ca:08:52:2f:ea:44:a8:30:00:f9:
81:30:c7:20:a7:17:5a:10:43:2f:9f:4a:f8:73:de:
9e:d6:cc:a7:e7:8d:24:9b:b5:4f:68:d7:10:cd:c6:
dd:8d:de:01:e3:28:0b:c4:ba:42:9a:b5:e4:2b:a3:
fb:58:2e:bf:22:24:06:84:0f:31:f7:63:c8:0f:ee:
9a:79:ab:0d:b0:10:d4:5e:93:34:0a:0b:d7:78:76:
10:01:e7:b5:da:6a:9c:93:ba:a2:a7:08:8f:24:a1:
fa:6a:fd:e6:c7:f1:f6:c1:2b:e7:3a:63:2b:0c:ab:
7b:45:0b:5e:ac:26:11:7b:00:a3:a6:fb:ea:3d:33:
5f:a3:4a:8a:76:6e:b1:b9:5f:bf:b9:99:33:03:34:
95:08:00:cb:b3:14:4f:f3:35:a2:d6:84:af:58:71:
26:8f:7a:3e:f5:a0:cd:8a:74:5f:ab:da:09:04:a9:
5d:25:2b:dc:ad:61:ff:bd:1c:7d:11:e3:77:86:cf:
51:95:04:98:54:73:38:cd:c2:cd:7f:27:d1:6a:23:
a4:e3:3a:00:2d:90:73:ef:51:a8:6e:5c:a6:66:35:
53:da:4d:7b:fb:23:e2:4b:a0:52:ec:ea:ed:1a:06:
6c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:32:8B:AC:E8:C4:87:1B:7F:0E:FB:2C:54:18:B6:C1:B1:40:A7:00
X509v3 Authority Key Identifier:
keyid:85:37:0C:C5:D2:60:F3:E2:AE:FF:5D:D8:F8:F4:A4:15:A2:34:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4f7246-ce8f-44f8-a831-ae60bea06a9c/1/hTcMxdJg8-Ku_13Y-PSkFaI0WoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:87:1f:0c:e2:fb:00:23:56:60:78:42:f7:53:54:c5:9e:26:
a3:79:d8:b1:34:3c:3f:3c:e4:06:c8:f7:0f:ba:1a:ce:86:e8:
5a:38:d9:37:b2:8d:54:28:cc:7f:24:75:36:dc:4e:a9:bf:98:
7a:b9:86:7a:b0:21:39:85:c3:61:8c:e1:9a:4f:a3:fe:68:a0:
af:20:eb:98:6e:76:15:74:6b:5a:6f:c9:f4:c7:96:29:6a:ea:
37:e2:ba:45:46:5c:3b:5a:7d:57:8a:8e:e9:36:ba:34:49:12:
66:94:32:aa:3d:77:27:ee:f0:f9:1e:54:59:80:b8:5b:08:bc:
cc:79:b2:e6:85:d9:2d:ec:2a:40:89:78:89:54:c9:68:5b:e3:
0f:25:69:9c:f7:c8:bb:21:60:24:b1:de:53:69:a8:5e:57:28:
2c:2a:50:e8:11:92:fc:f7:72:4f:e0:ca:ca:07:44:ed:fc:41:
a6:17:19:aa:a7:af:c8:8d:bc:ef:64:5b:7e:ba:be:4e:25:30:
5c:a5:c4:2f:4e:8e:b9:31:ef:c2:a0:06:ed:09:63:c3:9a:a7:
82:47:9d:94:90:45:2e:c1:23:be:41:a4:94:1f:18:b5:ff:4d:
fa:a0:ff:cf:01:03:0c:90:7b:85:9f:c2:77:d6:94:56:5a:3a:
ae:64:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:09:34 2026 by rpki-client