Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: 3IveFHbFEQ1Lp1CNdFg8DF4nZhYHXmNhkfqLfgdnkOs=
Subject key identifier: 43:EE:55:7B:ED:05:C6:1D:00:CC:31:DB:DD:12:46:51:4A:98:60:B6
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019EC3A520BD6F8A70A5204FDF981188FAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 091C
Signing time: Sun 14 Jun 2026 01:00:39 +0000
Manifest this update: Sun 14 Jun 2026 01:00:39 +0000
Manifest next update: Mon 15 Jun 2026 01:00:39 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: jIMN/FW/ETre9DV0O+wZsOyZKk/ktPBT95IUPHHW2vA=)
2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:20:bd:6f:8a:70:a5:20:4f:df:98:11:88:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Jun 14 01:00:39 2026 GMT
Not After : Jun 15 01:00:39 2026 GMT
Subject: CN=43ee557bed05c61d00cc31dbdd1246514a9860b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bc:5a:31:30:23:bb:b4:9d:74:77:da:e4:5a:
62:d6:12:e8:98:7d:29:8b:df:8b:af:69:1c:bd:43:
73:00:fe:57:b7:9a:86:4a:f2:4b:8c:01:cc:7d:19:
47:fd:c0:bf:5a:e0:b6:30:b6:0b:41:c8:17:b1:d8:
12:75:5a:d2:27:16:cd:e5:52:fc:52:29:93:90:a5:
cd:24:04:f9:cb:2d:fe:34:7d:cc:ef:98:c8:bd:df:
a4:5d:7d:0f:37:2b:6d:c8:4d:86:80:f7:71:1b:1f:
4f:f5:e8:8f:e8:6c:16:38:b0:59:e0:40:b8:d1:c4:
02:24:9c:7a:39:97:ec:19:c6:c2:82:ac:f7:0a:e0:
94:c0:99:7e:8f:ff:2e:a6:20:52:33:64:53:11:1e:
43:30:db:77:e8:3c:7c:ee:54:c7:c6:26:10:ad:7a:
7b:a9:a2:8b:3a:c7:a6:9d:c0:ba:d7:6e:cb:fc:78:
41:7d:63:11:cc:b6:33:a0:93:9f:e2:2c:19:f9:0c:
50:fa:8a:53:8e:84:78:a4:fa:e0:9a:f8:07:2b:40:
3d:53:85:bb:86:5e:eb:2c:dd:66:7c:03:ab:84:f7:
8d:8b:d4:76:9a:54:7c:ad:2c:16:47:7a:c3:f7:81:
8f:28:d0:f4:cb:ee:a9:2b:01:6b:68:1b:c7:50:3f:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EE:55:7B:ED:05:C6:1D:00:CC:31:DB:DD:12:46:51:4A:98:60:B6
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:99:45:ad:13:b9:a4:45:ba:d4:69:f4:23:71:2d:e3:0e:e9:
d8:d7:81:f5:32:14:78:9c:53:80:61:67:ea:52:df:3d:cd:a6:
bd:a4:c0:9a:c8:d8:98:d3:75:29:98:21:f6:58:ae:d7:ad:88:
23:db:88:e8:be:e3:ab:ca:2a:71:58:9e:31:51:df:c8:02:08:
60:9b:61:a6:01:f0:fa:53:91:24:d8:98:5d:56:22:0f:aa:0f:
51:d8:8d:87:a8:71:5e:db:6f:8e:8c:2c:45:9c:c3:0b:21:f3:
8d:27:3a:04:08:bb:d1:ff:31:a6:47:80:b9:77:04:ea:19:42:
29:59:ad:5e:1a:c7:65:42:f6:46:c7:fb:1a:4c:2a:c9:64:d9:
4a:50:12:17:0c:99:e7:ab:cf:6e:94:ef:4b:1e:b2:5d:79:b9:
7f:de:03:c6:5f:aa:cd:a1:8c:be:07:49:7d:98:80:1a:2a:6e:
9c:cb:8f:2c:12:ad:ee:5e:ee:03:50:e8:34:5c:75:59:9c:c9:
1d:0d:da:30:94:73:ce:fd:1c:c8:75:a0:35:60:b0:0f:e2:dd:
fe:4e:47:0c:86:03:f9:f7:42:86:4d:e7:1d:f1:d8:ce:25:a2:
20:42:2e:cc:8d:e4:e3:c7:ca:e0:3c:ec:34:39:e9:bf:59:f2:
4c:84:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:38:49 2026 by rpki-client