Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: d9S+/aoSQ71DTh3EKQDER7PIIogA4T5NQfSOlXddzb8=
Subject key identifier: 38:8E:16:50:78:26:C7:72:E6:E3:11:64:92:69:77:77:0F:E2:7C:3A
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019ED2E14351D31AF270BD17AF5033B30D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 066B
Signing time: Wed 17 Jun 2026 00:00:38 +0000
Manifest this update: Wed 17 Jun 2026 00:00:38 +0000
Manifest next update: Thu 18 Jun 2026 00:00:38 +0000
Files and hashes: 1: EXFjqp1pXGSV5jmx4tb-VicHFJo.roa (hash: SAiHY7qAn6jJFUL6Y4lo8wfyaergjigidCjHrKuL8KM=)
2: TcfDrpaktt6ck5dfzSZX1rUU-3o.roa (hash: IMmbj46lmVM3D8aBLL2Qo1JPLTBEevvdt670OHWqbPA=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: sydU4wCBze0kPFx+Ba3OkuASnfEBH5GfY/0MrcIzP9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:e1:43:51:d3:1a:f2:70:bd:17:af:50:33:b3:0d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Jun 17 00:00:38 2026 GMT
Not After : Jun 18 00:00:38 2026 GMT
Subject: CN=388e16507826c772e6e31164926977770fe27c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:4d:5a:ef:15:11:73:ed:92:f6:76:e7:c5:
9c:da:4d:f0:7c:12:ba:3a:57:10:e8:93:60:e3:cb:
aa:27:7c:d1:e4:36:f4:e3:bd:12:b5:d8:76:6e:09:
0a:71:e8:c9:ef:4f:03:e6:32:b2:f1:f7:f2:6d:99:
56:a1:09:a6:a4:09:c5:93:a0:6f:df:b1:67:90:04:
30:5a:6b:b0:27:fd:ed:0f:f7:a2:51:5d:7e:43:69:
f5:bf:d7:6f:ca:8c:1f:a1:41:3a:21:c3:79:4c:da:
fe:c4:16:a3:bb:88:dc:d7:c8:c6:a2:bd:13:3b:65:
9b:80:7d:8c:96:b6:7d:71:43:4d:61:5b:6e:e4:1b:
01:47:78:71:51:c0:27:27:a2:74:0b:a4:df:5f:1c:
9c:19:8f:44:98:71:6c:83:ed:17:36:42:42:0e:53:
94:11:ad:48:dd:65:46:f6:29:e1:ad:10:f3:9d:9a:
cf:18:41:35:02:e9:b6:2e:63:e3:43:e4:d5:5f:f0:
11:c9:f2:64:64:15:0d:e4:23:ce:df:d4:f0:a3:00:
89:26:7a:d7:bd:14:a6:a5:9b:d1:a9:48:31:99:5f:
cd:5d:69:d4:fc:85:8d:d6:fd:ba:fa:f1:70:24:ab:
47:fa:a0:a7:5b:af:d9:09:9c:8f:8a:80:86:16:43:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8E:16:50:78:26:C7:72:E6:E3:11:64:92:69:77:77:0F:E2:7C:3A
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:52:ec:b5:7e:6f:78:c4:30:70:13:2f:8c:0c:88:f2:0c:34:
89:15:6a:f6:7d:b4:c3:f0:de:c7:30:27:b0:cb:d2:9a:4f:d9:
03:ac:f1:5e:f1:16:6e:7e:16:81:f9:7d:86:e7:09:b6:30:47:
8d:64:59:02:de:06:7f:17:0d:28:d0:eb:b0:bb:1b:b2:75:ad:
b4:03:34:06:dc:97:24:5e:dc:b5:ce:24:3b:a1:d5:b2:59:24:
31:b5:48:e4:71:3d:89:b8:15:e1:28:dc:72:56:db:ba:85:21:
33:20:60:be:12:29:26:7a:de:a3:25:83:43:eb:e0:87:2d:1d:
29:cc:71:5e:e3:70:30:7a:b1:1c:12:30:df:e4:2c:d6:ec:80:
b3:c7:6f:57:bb:94:37:22:39:8c:17:97:62:b3:b4:bd:7e:5b:
a7:3d:0c:0b:f5:ac:4f:e6:8c:67:d7:7d:5c:0a:7d:7e:a3:d9:
e8:cc:4b:d3:0f:9d:e9:34:e1:c9:56:bc:46:42:b1:32:52:8c:
fe:a8:fc:ce:a8:3b:7a:63:13:b3:34:9b:36:67:d7:d9:bd:87:
40:93:fc:22:98:ea:6d:24:75:53:69:c0:61:a4:bb:69:22:63:
90:67:45:33:43:e8:8a:4d:d6:f1:58:df:5f:b9:8a:16:e7:56:
d0:a7:8a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:13:57 2026 by rpki-client