Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
File: hhgk6bM0tNUOg8Sd-boZziW-gZM.mft (raw, json)
Hash identifier: h78q2+lhulQCW5q8v1f930xSxtFPU5p/MqclLBMpDDQ=
Subject key identifier: 11:8F:1D:95:E5:EE:99:2A:27:9E:59:F4:75:BB:6E:B1:FD:AC:7F:FB
Authority key identifier: 86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
Certificate issuer: /CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Certificate serial: 019ED4D0568AAC694C4F01E7EAF1373E74BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
Manifest number: 013C
Signing time: Wed 17 Jun 2026 09:01:23 +0000
Manifest this update: Wed 17 Jun 2026 09:01:23 +0000
Manifest next update: Thu 18 Jun 2026 09:01:23 +0000
Files and hashes: 1: GtDxiNHeYhaopEz7nkSxj4Uwws0.roa (hash: xLrL13cfFz66vUPjaMWCOfLQuaEtZXy6c6DNYKUuXaU=)
2: dTkGUafttT6-8GpfaFN-_DQscaU.roa (hash: go6kdC6kI78p8haD5O5Bqq/07FTC8kyj7opP+hvQavw=)
3: hhgk6bM0tNUOg8Sd-boZziW-gZM.crl (hash: G/5oVdhZ1IDL1gF1rDpS7ab1qb11MI2+Mu+rTQW4fyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:d0:56:8a:ac:69:4c:4f:01:e7:ea:f1:37:3e:74:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861824e9b334b4d50e83c49df9ba19ce25be8193
Validity
Not Before: Jun 17 09:01:23 2026 GMT
Not After : Jun 18 09:01:23 2026 GMT
Subject: CN=118f1d95e5ee992a279e59f475bb6eb1fdac7ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:59:b8:91:78:91:d2:96:07:90:e3:d6:a1:
d6:12:6e:61:29:2b:83:b5:e9:61:dd:0e:ca:ec:15:
43:4b:fb:09:68:56:4e:e1:ac:dd:0d:e9:17:25:fc:
f2:61:96:b0:6e:bd:87:f0:37:73:d6:c4:bc:03:3d:
0c:d5:67:75:58:61:41:1d:6f:cd:bf:07:fe:e8:d4:
32:e1:c7:4d:03:23:d9:fc:ad:ba:bc:d9:a0:a0:7c:
03:7c:83:3e:4e:4d:62:0c:a1:d6:c5:05:f1:aa:bd:
ed:25:9a:60:4d:14:48:6f:5d:8b:f3:8d:c3:a5:e2:
01:d4:43:d1:73:b1:e4:98:73:62:fd:fd:66:e9:49:
b8:9b:0e:f6:1d:49:07:04:64:5e:f4:2f:0c:c5:6d:
a4:ee:0c:76:d6:8f:38:eb:57:5c:49:3a:84:56:a8:
19:83:ce:ec:db:69:e6:d0:b2:e4:58:88:2a:3d:5e:
f0:a3:c5:81:a5:aa:ad:4d:a2:fd:bf:29:dd:88:57:
a6:6e:1f:40:75:6a:7f:67:9a:08:7a:46:66:f4:4c:
74:00:b7:c8:bc:c0:fd:45:65:e8:98:df:5d:8c:99:
c3:ef:fe:71:a6:ab:e2:dd:d4:07:2e:c4:8f:34:83:
a4:04:62:49:34:a9:d6:be:1b:64:62:f4:26:c6:a2:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8F:1D:95:E5:EE:99:2A:27:9E:59:F4:75:BB:6E:B1:FD:AC:7F:FB
X509v3 Authority Key Identifier:
keyid:86:18:24:E9:B3:34:B4:D5:0E:83:C4:9D:F9:BA:19:CE:25:BE:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhgk6bM0tNUOg8Sd-boZziW-gZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a14754-a7fb-43cb-a3ae-06d360dc70f3/1/hhgk6bM0tNUOg8Sd-boZziW-gZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c5:f6:03:32:f3:03:b2:34:d6:b4:21:d8:ed:98:c7:70:e7:
a3:70:2d:e6:68:ed:b7:04:72:69:08:97:25:a8:6b:c2:c5:f2:
78:0f:56:8c:de:f3:f1:bd:82:36:a5:e5:16:50:14:e2:b4:cb:
88:0a:b1:b9:5e:f6:d3:76:49:af:4f:ad:b1:bb:5f:47:59:0e:
76:83:40:da:ff:7b:17:75:e0:96:13:ed:dc:b6:b2:b3:4e:17:
6e:f5:bd:20:2a:ba:a5:fd:11:14:33:81:0b:fb:0d:7d:63:52:
e0:c9:c0:4d:73:e7:a3:66:69:ba:ff:65:16:34:28:1a:46:9b:
86:d0:94:19:b3:c7:23:3b:ea:a5:1c:b1:8f:2c:8d:53:b0:a4:
0b:be:60:63:ee:0e:a5:10:9d:e6:29:57:a7:5c:1c:84:07:52:
7b:46:2e:c2:2e:ce:e5:33:61:be:98:ed:57:04:80:f6:f4:09:
18:17:2d:0f:7e:4a:e8:6e:2e:a6:29:0b:47:c8:11:13:c1:9a:
9a:16:ca:34:f5:f2:3e:71:45:d1:49:2d:c8:23:ec:52:ab:a7:
39:09:c6:4a:7f:11:0b:c4:8d:12:67:6b:43:b2:44:15:e1:5d:
03:e6:06:22:81:51:2c:64:55:20:24:57:c5:34:31:04:13:29:
cf:1f:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 16:23:28 2026 by rpki-client