Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: HYcNRXLmTLuJdwVUlpDCKtW7ewOjl2JLE/tUWCMc+Ic=
Subject key identifier: 09:69:66:99:99:52:EF:CC:F2:0E:6C:83:CA:54:F1:A7:E9:8D:EA:6E
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019FAD517EF548D955158DFED92B9BC1063B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 0995
Signing time: Wed 29 Jul 2026 10:00:27 +0000
Manifest this update: Wed 29 Jul 2026 10:00:27 +0000
Manifest next update: Thu 30 Jul 2026 10:00:27 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: DWID+4brDPXPUetrpQApqqLS3vMQ8Z/37A+G9h108KA=)
2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:7e:f5:48:d9:55:15:8d:fe:d9:2b:9b:c1:06:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Jul 29 10:00:27 2026 GMT
Not After : Jul 30 10:00:27 2026 GMT
Subject: CN=096966999952efccf20e6c83ca54f1a7e98dea6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:24:cc:e8:4f:83:2b:3d:f3:88:f3:75:5f:e1:
80:1b:d9:76:99:85:4f:52:34:5a:c6:32:fa:86:ac:
24:3f:17:75:cb:7c:a4:3d:9d:01:29:ca:af:8b:98:
b3:71:97:1c:2b:9d:35:03:50:6e:4c:3d:c3:6b:d8:
2d:4e:11:b0:db:a2:45:4d:7f:53:01:88:46:88:dd:
fe:5d:1d:31:24:95:35:7a:a5:ef:22:d4:76:65:91:
bc:65:16:6d:9e:73:64:8f:23:f3:7b:b7:bf:1c:72:
d0:c0:f1:58:58:c7:23:e8:50:00:f3:fc:a4:22:40:
5e:9f:56:b9:cd:aa:e2:6d:9b:65:05:34:2e:a8:af:
09:71:62:67:65:c4:50:1b:71:92:a9:c5:16:ab:ff:
d8:88:7d:25:17:e1:79:a0:b2:24:54:11:00:bd:b7:
57:ff:c4:51:fc:99:d6:98:eb:d2:b0:cb:27:6d:64:
bf:6e:e4:d7:37:5a:d3:05:02:ac:bb:84:dd:7e:fc:
e3:cd:4e:8a:f2:45:dc:f3:0e:9b:2e:59:52:76:82:
6e:74:db:bb:0b:19:02:d9:29:be:ee:32:8e:a6:15:
00:a1:35:ca:bc:52:20:f7:d6:bc:37:95:e6:34:43:
26:12:84:b5:a5:00:30:48:09:51:1f:48:a0:96:68:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:69:66:99:99:52:EF:CC:F2:0E:6C:83:CA:54:F1:A7:E9:8D:EA:6E
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:65:5a:99:39:b4:c2:71:09:9b:e2:2a:09:2b:18:80:40:db:
20:7b:43:97:b9:08:fb:f9:8f:79:8e:4e:4e:16:d5:70:85:b0:
ba:2b:29:64:71:eb:1e:d1:54:92:71:06:72:bf:78:07:ec:ec:
86:4c:7c:b1:c1:85:f5:2f:d5:77:8e:8d:36:67:dd:a5:fe:b6:
15:fc:cf:2a:7e:27:b5:9d:24:86:f6:c0:14:eb:e3:5f:52:df:
af:81:2d:b3:02:8d:fd:9f:b6:9c:e4:06:c5:86:6a:87:32:05:
52:82:e1:da:a8:78:e6:d1:99:23:01:e2:c8:36:ac:74:94:57:
ff:21:0c:73:0a:03:91:f1:9c:31:35:52:60:d5:15:08:40:01:
f7:05:6a:9f:59:50:87:df:0b:72:2b:13:a9:4b:60:01:9e:f4:
5e:71:10:d8:e9:53:c4:c3:70:6d:36:cf:2a:92:d9:23:82:1c:
e5:d0:58:30:01:96:47:4d:ad:87:2b:e2:ed:c2:2e:4b:8a:5b:
a8:5b:52:08:90:50:a0:da:81:67:5b:51:61:10:bf:94:ab:0c:
25:76:dd:5f:a3:9a:62:7c:3e:ec:6f:88:b3:37:29:69:c3:cf:
11:8d:24:64:59:5e:c9:3f:1f:40:59:4e:5d:d2:cf:06:d3:5b:
fc:e9:69:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUX71SNlVFY3+2SubwQY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNzI1NjZhZDYyODkzNWM2ZWM3NWQwZWRkZDMxN2M3YjBh
NzY2OTMwHhcNMjYwNzI5MTAwMDI3WhcNMjYwNzMwMTAwMDI3WjAzMTEwLwYDVQQD
EygwOTY5NjY5OTk5NTJlZmNjZjIwZTZjODNjYTU0ZjFhN2U5OGRlYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiTM6E+DKz3ziPN1X+GAG9l2mYVP
UjRaxjL6hqwkPxd1y3ykPZ0BKcqvi5izcZccK501A1BuTD3Da9gtThGw26JFTX9T
AYhGiN3+XR0xJJU1eqXvItR2ZZG8ZRZtnnNkjyPze7e/HHLQwPFYWMcj6FAA8/yk
IkBen1a5zaribZtlBTQuqK8JcWJnZcRQG3GSqcUWq//YiH0lF+F5oLIkVBEAvbdX
/8RR/JnWmOvSsMsnbWS/buTXN1rTBQKsu4TdfvzjzU6K8kXc8w6bLllSdoJudNu7
CxkC2Sm+7jKOphUAoTXKvFIg99a8N5XmNEMmEoS1pQAwSAlRH0iglmgX4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlpZpmZUu/M8g5sg8pU8afpjepuMB8GA1UdIwQY
MBaAFBxyVmrWKJNcbsddDt3TF8ewp2aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMt
ZmM3NTIxYTI1YmJhLzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84ZWQ3YzktMGI0NS00ZDIxLWEyMDMtZmM3NTIxYTI1YmJh
LzEvSEhKV2F0WW9rMXh1eDEwTzNkTVh4N0NuWnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2VamTm0
wnEJm+IqCSsYgEDbIHtDl7kI+/mPeY5OThbVcIWwuispZHHrHtFUknEGcr94B+zs
hkx8scGF9S/Vd46NNmfdpf62FfzPKn4ntZ0khvbAFOvjX1Lfr4EtswKN/Z+2nOQG
xYZqhzIFUoLh2qh45tGZIwHiyDasdJRX/yEMcwoDkfGcMTVSYNUVCEAB9wVqn1lQ
h98LcisTqUtgAZ70XnEQ2OlTxMNwbTbPKpLZI4Ic5dBYMAGWR02thyvi7cIuS4pb
qFtSCJBQoNqBZ1tRYRC/lKsMJXbdX6OaYnw+7G+IszcpacPPEY0kZFleyT8fQFlO
XdLPBtNb/OlpTw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:48:42 2026 by rpki-client