
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier: q/J88TjQew5o8dFqq8pOZIJRftMF5V1xtO2s1q17/ak=
Subject key identifier: 94:08:4A:FA:34:FA:EF:59:0B:60:68:4D:83:51:EB:E2:47:16:17:BF
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019EBF5AC273819303B430380C0F37BB7111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number: 03D1
Signing time: Sat 13 Jun 2026 05:00:56 +0000
Manifest this update: Sat 13 Jun 2026 05:00:56 +0000
Manifest next update: Sun 14 Jun 2026 05:00:56 +0000
Files and hashes: 1: G9jujcQZlUdVMOptG1eSDU2YY8I.roa (hash: EJGVSoBSNBmuI6zXcVl26rucMI4v4bwSguQQOZP/asw=)
2: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: 5sIt6E+XjnJs6+BQ7leZkkfaQ0beimKnn2CYe/i+AFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:c2:73:81:93:03:b4:30:38:0c:0f:37:bb:71:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Jun 13 05:00:56 2026 GMT
Not After : Jun 14 05:00:56 2026 GMT
Subject: CN=94084afa34faef590b60684d8351ebe2471617bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:d4:41:02:56:06:f3:08:54:29:4e:bc:ee:
2d:c7:e1:f7:75:17:50:bd:e2:49:53:11:92:ec:1f:
bd:3f:16:6a:bc:a9:bd:42:ca:9d:05:b0:18:c7:21:
cf:21:81:ca:59:73:df:9b:73:1f:76:20:45:00:3b:
e8:43:14:4e:26:22:c7:73:6e:d5:6f:0f:2e:36:5b:
3d:11:34:76:29:78:98:e9:b2:7e:0c:e2:91:bf:ca:
0f:b7:ac:92:bc:aa:2b:d4:d4:37:73:fa:0a:87:78:
0f:60:3e:d2:3d:21:4f:04:a4:79:17:29:91:7f:82:
e6:48:72:cd:b6:3a:5a:ac:ec:5c:6a:ec:dc:65:85:
de:b7:2b:4b:05:23:84:ba:46:6f:ac:fb:a1:df:16:
a3:6e:d6:7d:c5:6c:10:4f:93:eb:94:d0:94:c6:35:
c9:d0:62:4a:bf:33:51:ea:a9:15:42:d4:31:e6:85:
85:6a:64:52:01:c5:f0:1b:58:34:82:fd:73:b9:9e:
1a:9d:c1:e7:d6:84:5b:da:c0:a0:b4:2d:ec:7b:38:
83:4e:3f:2c:cb:47:42:7a:75:6e:1a:fe:a0:6f:98:
5a:ca:a8:49:ac:6f:85:70:4d:e7:ea:90:97:00:44:
72:26:fb:84:07:7a:50:3b:ab:18:e3:35:d8:7d:3a:
23:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:08:4A:FA:34:FA:EF:59:0B:60:68:4D:83:51:EB:E2:47:16:17:BF
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ea:59:f5:11:e5:a3:d2:b3:8b:4d:8a:3f:08:d4:bc:e8:0b:
d8:cf:4b:5f:d4:16:65:92:ed:ca:17:6e:d9:f8:ec:ea:e1:22:
98:ca:0d:b3:2e:ca:2e:d5:1a:7d:18:7d:e8:de:1c:1e:e9:48:
0f:ae:2a:47:ab:3c:1a:d9:c7:af:36:0b:a1:d5:b3:54:62:89:
3d:b6:bc:82:af:8e:bd:02:c5:34:cf:d4:aa:f5:4d:8a:aa:d0:
8f:fb:6e:a3:20:c8:b6:46:6f:eb:d8:0b:af:53:79:69:7d:71:
72:71:84:c7:ce:3f:6f:08:e2:52:c9:d0:7a:c8:e7:f5:f6:dd:
86:06:f0:7c:0e:dd:a0:cb:64:78:77:66:6e:2f:b8:cd:15:59:
76:78:46:56:8f:7c:1c:ea:bf:69:73:40:02:78:5e:a2:05:93:
ba:5a:02:9c:cf:00:44:06:43:72:91:45:62:37:b9:37:2d:b0:
05:5a:15:f4:d8:0b:a4:1c:aa:d7:9c:18:6f:bb:01:4e:20:70:
de:58:e7:ae:24:61:73:c3:98:44:98:ce:28:16:e3:7f:3e:2d:
e6:c4:87:ef:10:ac:c0:58:86:ab:59:1c:1a:88:11:ae:99:73:
cb:bc:80:6a:2f:7d:93:ec:97:05:f2:54:01:7d:c0:16:47:03:
78:ce:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:20 2026 by rpki-client