Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
File: HIomETq5OUUuR1b21T9XcRRQYpA.mft (raw, json)
Hash identifier: eliIk1flWmTWva7wmWhuud/Cpr8I4CZChjG4Tmuo2Zs=
Subject key identifier: 2A:11:64:6D:41:0C:1A:9A:C4:79:32:33:13:B3:D3:CC:FC:FF:AC:85
Authority key identifier: 1C:8A:26:11:3A:B9:39:45:2E:47:56:F6:D5:3F:57:71:14:50:62:90
Certificate issuer: /CN=1c8a26113ab939452e4756f6d53f577114506290
Certificate serial: 019EC2C93A1F2CA56567897DF620D168CFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
Manifest number: 9A
Signing time: Sat 13 Jun 2026 21:00:27 +0000
Manifest this update: Sat 13 Jun 2026 21:00:27 +0000
Manifest next update: Sun 14 Jun 2026 21:00:27 +0000
Files and hashes: 1: HIomETq5OUUuR1b21T9XcRRQYpA.crl (hash: TtvAAdgSk1bCiJFjlr9k0nScvRE4PGOTcNbS+F2f8/s=)
2: kfHOguahwmoMsyRaQw8pUo9cNfU.roa (hash: 9xDfD3+rs0UdeCP8bqBepaOJdTPshbSNDRJXUgbGRxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:3a:1f:2c:a5:65:67:89:7d:f6:20:d1:68:cf:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8a26113ab939452e4756f6d53f577114506290
Validity
Not Before: Jun 13 21:00:27 2026 GMT
Not After : Jun 14 21:00:27 2026 GMT
Subject: CN=2a11646d410c1a9ac479323313b3d3ccfcffac85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:d1:e4:21:70:d0:f8:5f:52:81:c7:49:e9:
27:44:1e:53:ed:35:92:71:69:30:8c:f9:79:97:9d:
0f:ac:3a:e7:fd:74:e4:e1:b8:03:2e:75:45:f1:46:
97:1e:42:24:29:3d:a7:65:73:d1:a2:7a:9a:63:fd:
93:7b:a0:1e:9f:80:71:30:ea:61:51:4f:72:23:7b:
ce:25:ef:8b:82:ef:86:3b:9c:84:88:d6:16:94:61:
d5:c7:14:d8:c3:60:24:0d:64:0e:6e:34:1c:ff:75:
e2:dc:21:a7:7d:e7:28:63:ff:7e:a7:d0:87:5c:76:
b7:b6:df:d1:5f:68:51:73:d4:47:2d:07:1e:ff:4f:
e1:b7:f2:a4:fe:b0:76:23:69:0c:28:7e:cf:a5:eb:
f2:be:f1:21:b3:43:38:5e:52:65:a1:45:96:6c:7e:
9a:dd:d7:09:30:9e:93:e0:29:e6:58:5c:99:79:4f:
e9:2e:1d:b3:df:c0:e9:d6:b3:33:79:97:d9:27:d0:
2b:15:15:29:e2:7d:44:5a:5a:13:86:a3:4f:76:9a:
92:69:55:db:49:5a:5c:89:02:df:fb:52:08:9d:77:
7c:57:7b:ee:81:b0:f4:7a:09:b5:8e:39:78:74:c2:
e2:51:f9:1b:9f:5a:61:d1:bb:3c:6a:3d:22:55:fd:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:11:64:6D:41:0C:1A:9A:C4:79:32:33:13:B3:D3:CC:FC:FF:AC:85
X509v3 Authority Key Identifier:
keyid:1C:8A:26:11:3A:B9:39:45:2E:47:56:F6:D5:3F:57:71:14:50:62:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HIomETq5OUUuR1b21T9XcRRQYpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/542d3b-ce00-47bd-b484-957cb63fe681/1/HIomETq5OUUuR1b21T9XcRRQYpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:83:5f:ea:27:4c:3d:a4:54:66:c5:31:1e:ce:a7:e6:03:96:
2e:ac:7a:5d:ee:97:a4:12:7c:51:33:50:3a:67:6b:ca:6c:0d:
c4:e1:3e:9c:7a:22:de:fb:e9:e8:a2:f9:e7:cb:03:d7:53:b2:
57:83:9d:3b:53:8c:25:5a:cb:64:90:a2:fc:bc:b5:67:14:3c:
fb:8b:8d:06:c0:f6:8b:0f:51:51:7c:13:ad:d7:45:b0:84:7d:
37:cf:9c:cd:5f:fe:26:52:b3:ce:34:d6:e9:da:76:05:02:ec:
7d:61:d3:05:5d:e8:9b:f0:8e:ea:66:18:ee:54:5c:d7:eb:f9:
0d:2e:90:65:36:62:25:fc:32:08:9b:1a:3a:ce:5a:57:85:4e:
73:d3:99:f0:ca:8f:35:73:6c:ff:24:d3:b0:3f:23:79:a3:72:
f3:12:d0:1e:64:c5:af:04:d2:4d:50:97:24:c4:de:60:fb:65:
c7:16:cd:7c:53:9d:7a:41:93:89:83:fc:50:28:de:0a:64:32:
77:23:b9:a2:0f:bd:29:0e:a6:ae:49:50:e4:63:4e:a9:0d:6c:
bb:9a:ac:2b:0a:d4:d1:1e:18:24:d0:79:80:ea:93:3b:39:38:
00:80:f7:32:ab:95:1e:23:ee:8a:73:cb:4f:17:c1:4d:5e:7e:
9a:d8:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:08:17 2026 by rpki-client