
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
File: cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft (raw, json)
Hash identifier: I+z9e49xIwFd2hkXylQ709j7nN+RjXt2G8Acvm/Hc6I=
Subject key identifier: 83:FF:A4:50:C1:55:A7:F8:5D:32:95:49:90:25:55:A6:72:C3:E4:77
Authority key identifier: 70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
Certificate issuer: /CN=7072134a2255580a91f06936cf82fb0023f06c42
Certificate serial: 019EC17FD5BD1D05301DBB968D327D495EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
Manifest number: 60
Signing time: Sat 13 Jun 2026 15:00:40 +0000
Manifest this update: Sat 13 Jun 2026 15:00:40 +0000
Manifest next update: Sun 14 Jun 2026 15:00:40 +0000
Files and hashes: 1: Mj54dL67avXK-rqdlIUztKEbhS8.asa (hash: 49Y5BI2hUItsEcq12WL4wX/NF/Z32P1oLAcnmVykc0s=)
2: cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl (hash: UW3mlsWOMuOFJedKMwinATZsoHqAQYJIkdJ1BalmEYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:d5:bd:1d:05:30:1d:bb:96:8d:32:7d:49:5e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7072134a2255580a91f06936cf82fb0023f06c42
Validity
Not Before: Jun 13 15:00:40 2026 GMT
Not After : Jun 14 15:00:40 2026 GMT
Subject: CN=83ffa450c155a7f85d329549902555a672c3e477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:92:44:2b:db:63:18:40:2d:1d:7d:c4:7d:57:
56:f4:26:b3:a4:07:64:92:b9:c2:db:4b:3c:84:8a:
6e:fc:85:b4:da:39:8f:ef:74:9b:73:00:9b:91:86:
37:2b:f9:cf:57:9f:ac:b6:14:12:b7:c1:ba:0b:ab:
6a:a9:04:ac:17:03:b9:3d:76:0e:e5:71:58:10:2f:
70:f5:7c:07:66:ed:2f:8f:dd:1a:a8:55:c5:67:41:
f3:9b:cf:f2:cd:68:fa:bb:5c:ae:82:1e:4e:dc:b8:
7e:cf:49:98:7d:53:02:6d:98:95:89:d0:8c:16:de:
61:fa:15:b1:ad:fb:70:56:db:17:30:1d:ea:f9:31:
4f:16:02:94:94:e2:4c:ee:6f:e9:2a:95:df:06:49:
31:a1:2c:7d:32:74:08:02:43:cf:e1:25:9c:3e:28:
8c:48:dc:bf:24:2b:3b:ed:19:89:f9:fa:32:94:07:
22:2a:08:e7:92:10:01:80:68:3c:ac:fb:0d:52:92:
f5:4e:74:d6:a6:1a:8f:f4:ec:6d:13:15:ff:48:87:
57:b1:94:b4:b2:af:4f:57:34:94:4e:22:24:2d:9a:
3b:9a:ea:3e:6f:ab:8e:24:34:e8:ce:3d:53:88:3c:
47:db:30:7a:2f:f7:c0:ab:33:8b:e9:e1:a4:00:51:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FF:A4:50:C1:55:A7:F8:5D:32:95:49:90:25:55:A6:72:C3:E4:77
X509v3 Authority Key Identifier:
keyid:70:72:13:4A:22:55:58:0A:91:F0:69:36:CF:82:FB:00:23:F0:6C:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHITSiJVWAqR8Gk2z4L7ACPwbEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f3170b-c924-4dfa-b26b-67996a743f26/1/cHITSiJVWAqR8Gk2z4L7ACPwbEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:45:03:2e:f1:f5:0b:7e:96:bc:c7:8d:78:fd:fb:c2:b3:a5:
c7:e0:ec:17:2e:9f:df:2b:4b:33:19:4f:b5:80:32:aa:22:a7:
9f:15:5e:23:04:ba:81:c9:90:1a:e5:9e:85:0d:bb:d0:e6:6a:
00:2a:b5:e0:1d:d8:3e:07:90:76:92:67:67:3f:92:ab:a8:d1:
a5:d1:9e:d8:3b:cc:f9:e3:ad:b9:33:58:c3:63:5b:b1:ee:34:
4c:8b:9e:ba:ad:36:f4:12:35:7e:0d:68:31:fd:d7:68:aa:12:
f5:e5:f3:dd:e2:18:71:b7:4b:bd:b6:1d:0f:a1:17:ae:41:59:
09:0e:fd:87:f3:4e:5b:2f:c6:8b:51:6a:de:28:9e:57:35:1c:
b0:5d:44:be:85:09:a5:4b:e9:3e:f4:a7:8e:99:0a:5b:49:8d:
b9:97:55:b7:b9:3a:af:6c:18:5b:6f:99:9b:01:6b:10:01:16:
63:4e:31:cc:a3:33:52:bb:1f:f2:10:57:54:39:5e:0e:07:7d:
64:57:c7:1e:04:83:04:cf:fc:1d:68:55:f5:cf:bf:23:1c:1d:
e8:ee:c7:6a:14:c6:b9:84:cb:99:7f:1c:36:76:3a:5b:ba:eb:
f0:6d:ba:bd:61:2c:3e:7e:cd:05:69:ca:1d:d2:76:42:28:bb:
0e:27:00:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:22:42 2026 by rpki-client