Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: 5mi1erZwT2lWYOv1GO2D1jUrBXqOmcu6ZZPUESv9Ykk=
Subject key identifier: 7E:F8:A3:3F:85:A0:D2:F4:9C:53:93:D7:A0:D3:0C:56:3F:E8:D5:15
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019D98F46FEDA67BCC8FE3873BD535F27EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 0595
Signing time: Fri 17 Apr 2026 01:00:49 +0000
Manifest this update: Fri 17 Apr 2026 01:00:49 +0000
Manifest next update: Sat 18 Apr 2026 01:00:49 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: TKkM0NwWMZOH9RIPSnlosWwkUC4Jo1aXh1LLEZWO1IA=)
2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6f:ed:a6:7b:cc:8f:e3:87:3b:d5:35:f2:7e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Apr 17 01:00:49 2026 GMT
Not After : Apr 18 01:00:49 2026 GMT
Subject: CN=7ef8a33f85a0d2f49c5393d7a0d30c563fe8d515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:04:fd:d5:76:0e:cf:33:5a:61:71:64:41:
74:a9:4f:0d:ac:84:39:6d:2e:ef:f5:26:77:58:ae:
8c:c8:5b:b9:41:54:42:e1:ba:09:52:77:39:1e:eb:
7d:74:b2:b5:b9:ad:20:c8:1d:f6:6e:d2:d3:02:77:
f5:eb:fb:9a:cf:c4:53:b4:8c:49:44:aa:9a:5e:a7:
a2:81:7c:9b:f4:b9:99:fd:79:ef:8e:cc:36:e1:a2:
b4:4f:67:67:99:66:65:c7:e7:ae:ff:8a:38:0a:2f:
49:34:ff:8d:95:31:85:18:56:a7:04:56:4f:4c:1f:
e4:de:d9:d0:69:cf:0f:36:fd:eb:40:32:55:6e:62:
78:ae:6e:58:1a:4c:77:2f:7c:88:9d:80:bf:8d:3a:
f8:1a:2c:bf:bf:62:4e:f0:d4:c3:bc:c0:2f:17:de:
27:12:c9:72:3d:e1:d8:ad:a0:b2:f6:5f:17:e0:05:
35:b7:7f:64:b2:4a:3e:10:77:b0:77:8f:22:4d:32:
6e:04:27:39:fc:6e:de:d5:39:74:7b:50:26:38:5b:
b1:70:5c:e4:9a:0d:32:4f:fe:0d:b4:b0:e5:ee:4c:
60:96:84:06:31:2b:fe:a5:46:69:ce:28:2f:26:2a:
96:58:83:9b:85:38:46:fd:97:9c:8c:c1:e2:dc:c4:
b9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F8:A3:3F:85:A0:D2:F4:9C:53:93:D7:A0:D3:0C:56:3F:E8:D5:15
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:18:9d:bb:62:e3:b8:66:c1:00:4c:21:46:f9:f4:0e:5a:9d:
07:04:b3:5c:75:4e:17:4f:13:f1:88:3c:1f:98:91:91:82:b1:
6c:c2:d8:4d:c6:a2:b1:6a:ed:32:57:22:7b:97:aa:7c:ce:be:
8f:77:f6:a6:2a:51:fb:da:b1:14:7f:0a:65:be:be:c9:f7:82:
a2:bf:1d:e9:53:fd:73:57:e2:00:90:f2:8b:f2:59:b2:10:b6:
87:80:e3:7f:5d:b7:14:9c:17:5d:b1:47:58:01:bc:55:92:6d:
44:20:0c:01:4a:62:e1:cb:43:ee:8c:69:a1:fb:09:75:db:df:
63:d2:52:ee:5c:9d:a3:d9:1b:e3:78:29:74:9e:1a:4d:42:fb:
70:97:dc:e6:54:9e:a3:f9:01:4b:f3:6b:76:63:4f:04:e3:97:
3a:24:e6:c0:06:c9:13:7a:e3:bb:00:1f:1e:78:06:5e:e9:af:
a8:62:25:ac:6b:61:e3:3b:f7:06:95:5e:8d:a3:ad:f1:93:37:
7d:3a:6b:75:16:ac:24:bf:a9:39:b2:a1:78:09:85:55:0e:ef:
20:9e:6c:65:75:e2:6b:10:18:3d:a9:1b:76:b4:74:9b:a4:27:
9e:ae:ce:28:eb:5b:3b:6a:d1:33:8e:99:09:54:b0:46:3b:8f:
b5:8e:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:36 2026 by rpki-client