Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: b1a6Xipxy6lw8SPU7gPX0k1G0jC17FlwKOqhqIx4E48=
Subject key identifier: 4E:E8:9E:4E:35:BF:CB:49:9C:E8:83:19:42:6A:72:21:14:33:2A:33
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 019FAB9A6C2228618F9C1316905EF6A974EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0E98
Signing time: Wed 29 Jul 2026 02:00:51 +0000
Manifest this update: Wed 29 Jul 2026 02:00:51 +0000
Manifest next update: Thu 30 Jul 2026 02:00:51 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: vyYBILMjDjea+B/r1g4nMiHoDs9ilUWkvYcqnv9G0xI=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:6c:22:28:61:8f:9c:13:16:90:5e:f6:a9:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Jul 29 02:00:51 2026 GMT
Not After : Jul 30 02:00:51 2026 GMT
Subject: CN=4ee89e4e35bfcb499ce88319426a722114332a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1b:c7:8f:bc:22:89:20:ef:09:88:ae:b4:af:
a5:77:9d:d0:8c:dd:95:65:72:2a:d0:9e:bc:b1:8a:
09:4e:98:a2:fb:ad:40:26:5d:64:d7:7b:24:b0:33:
d0:fc:89:09:ab:68:8e:ee:70:97:02:3b:b0:b6:62:
a1:6e:86:47:80:aa:3f:60:a9:3e:35:f4:9a:05:18:
be:47:e2:e4:f5:c4:e9:b7:33:44:c2:74:74:0a:dc:
62:4d:78:b9:7a:4d:03:43:68:2e:49:b5:aa:65:79:
ed:f1:c2:90:4d:f4:a3:95:18:5b:8c:80:00:51:bf:
31:44:cc:ad:81:9e:19:4b:5a:b8:91:62:69:48:27:
74:72:7e:41:4a:fe:a2:84:68:5e:da:42:54:aa:71:
f9:d3:9a:dd:f8:8b:d6:cb:02:6c:bf:17:bf:d4:02:
3f:d9:ec:d3:92:cb:b7:e7:6a:45:8d:df:b3:62:b5:
f9:dd:c6:55:f4:f7:46:89:2d:96:b8:4a:16:64:97:
6d:12:70:26:1a:fb:a2:f7:83:1f:69:11:50:49:70:
41:45:c7:54:69:11:cb:b2:ea:fc:be:3b:2d:69:0c:
a5:bc:9b:e1:45:7e:77:8f:fe:22:2b:6d:71:cc:40:
10:ba:e1:cc:bd:25:3d:1a:ce:26:0f:de:1c:28:43:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E8:9E:4E:35:BF:CB:49:9C:E8:83:19:42:6A:72:21:14:33:2A:33
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:be:cf:d4:a5:78:59:e4:77:5a:c5:ab:bf:bf:62:3a:24:46:
5b:c7:42:a0:68:40:6e:45:96:8f:a8:6c:9f:f2:87:0d:38:3f:
1f:a6:03:fe:7e:d9:f4:22:b1:b4:72:2c:69:d2:bb:c0:65:bb:
a2:a6:27:dc:20:17:6c:f7:86:1a:14:c2:ca:74:f1:6f:dd:a7:
aa:5f:90:dd:56:02:cb:79:12:b5:48:c7:50:68:d1:70:99:c3:
1b:df:ad:4d:67:53:0f:4d:5a:ea:d2:6d:02:14:5f:97:d1:75:
9d:18:5b:23:64:ed:49:ba:20:52:42:32:1a:54:e2:74:67:32:
c0:4a:03:a9:f7:db:84:82:78:77:00:d0:dd:2b:0b:ae:71:c5:
60:d2:3d:43:5c:30:ab:cc:d9:ae:07:29:d9:cb:9a:5b:37:1b:
f1:77:da:95:33:94:5f:ca:42:73:aa:69:b5:9a:ef:1d:07:43:
10:d9:83:18:4d:d8:6c:59:b5:5c:34:57:ff:4a:3a:99:44:e3:
b0:37:7f:cb:95:bc:4f:38:3e:1b:da:1e:41:70:8e:a1:19:4d:
10:3a:5b:90:b7:6a:c3:b5:f2:db:e2:f3:a8:1a:b6:d4:de:3b:
51:ed:8a:33:88:26:1b:80:93:4f:8f:b4:dd:c8:0c:18:ef:6b:
17:87:b5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:56 2026 by rpki-client