Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: x0nMnFG4TvQqS10euCvJkLhwA1kPocNM3rrpoReLd/E=
Subject key identifier: C0:A4:79:21:C1:AD:21:7D:79:9C:B7:8D:8E:B1:FB:3D:28:36:D2:E0
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 01A0C8C61988578ED7892C1DFE667ECDC5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 073C
Signing time: Tue 22 Sep 2026 11:00:20 +0000
Manifest this update: Tue 22 Sep 2026 11:00:20 +0000
Manifest next update: Wed 23 Sep 2026 11:00:20 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: 7jwCVtbXSkY3jldv2JFbMoleQfxrQIhCAWT0rJsTS/U=)
2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=)
3: lYHYX5psOxKD68wkCQ91Mu2FzMM.roa (hash: sDNPjItrBcFZ5sKyPbAqc1GCxh1mlgDVqyaKhMPK/Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:19:88:57:8e:d7:89:2c:1d:fe:66:7e:cd:c5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Sep 22 11:00:20 2026 GMT
Not After : Sep 23 11:00:20 2026 GMT
Subject: CN=c0a47921c1ad217d799cb78d8eb1fb3d2836d2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:54:95:03:f2:a9:f3:ff:c8:02:6b:14:3f:
24:21:d3:a8:28:f5:e5:72:e9:e7:de:b2:b8:0a:5f:
fa:95:25:a1:74:cd:50:56:98:6c:26:e9:72:3f:47:
83:fd:af:2a:6b:60:12:a0:dc:dd:d2:e6:79:d8:4d:
6b:c2:5c:e0:96:da:69:f6:14:3f:60:c8:90:4c:3e:
14:7c:5c:47:8b:18:32:ae:3c:3f:08:e7:9e:55:f4:
81:21:33:ca:54:1f:0b:6c:49:33:fc:c4:83:a4:51:
2c:a7:71:8b:d7:8b:1f:7a:3e:1a:94:da:6e:5b:92:
3b:5f:0f:92:ee:9b:b5:4a:6c:52:ff:dc:94:bd:af:
98:2a:b1:06:23:d5:61:f7:ad:f1:aa:ae:01:89:36:
28:eb:54:db:6a:d0:85:f8:c7:b9:4c:6d:07:18:e5:
ea:9c:77:70:16:16:5d:0e:9b:6b:07:4c:94:29:92:
06:fe:fc:0b:a6:fc:57:4d:bd:3d:f6:ca:18:48:92:
9d:93:31:bd:b0:24:0c:a2:a9:41:74:87:15:96:6b:
d1:69:f1:84:49:15:bd:c7:04:f3:49:9c:c6:1c:1b:
5e:2c:88:e3:bd:86:31:73:51:4c:3c:6d:75:1b:79:
46:68:b1:06:15:e4:ad:9b:7b:85:81:ec:0d:5b:b1:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:79:21:C1:AD:21:7D:79:9C:B7:8D:8E:B1:FB:3D:28:36:D2:E0
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:2b:c1:8b:c8:6c:c0:76:26:be:94:1b:b8:78:ba:c2:44:13:
8d:03:70:2a:2a:89:2c:bb:07:e3:be:fc:fc:07:c6:d3:9a:04:
ff:e7:45:23:c1:b4:29:3e:96:66:5b:dc:1b:a5:41:ce:fe:55:
4b:40:2e:c9:65:83:83:14:8f:f7:55:fe:38:74:37:b5:d7:0c:
9b:c2:d4:8b:44:40:e6:06:ac:25:af:64:f1:f0:67:da:24:16:
cb:29:7f:30:e8:ca:fd:e5:a4:cf:d5:4e:7a:0c:b3:8a:1f:78:
4e:69:1c:ae:9c:c9:b0:e6:69:6d:09:e5:1e:94:98:4c:a0:ce:
96:c4:14:d1:90:bf:31:eb:83:ba:81:c3:cc:5e:0a:a2:bc:60:
0f:3a:b0:41:12:96:ab:91:52:30:d6:e1:dd:ea:d4:9f:47:f9:
9c:6f:78:df:e3:56:c2:c6:93:21:a3:37:98:85:fe:29:36:7d:
94:76:8b:5c:e2:59:7d:1b:1d:b4:b0:97:1c:6b:69:8f:cd:59:
0b:cc:f1:e2:de:7f:ad:09:ea:a9:85:47:58:7b:90:5b:10:81:
cc:14:68:98:05:19:dc:bf:e2:d5:4f:33:2d:bf:17:b0:7b:4f:
27:b4:e4:01:ce:35:07:b1:5c:8a:cf:e7:35:8f:09:ea:e0:bb:
e0:fd:43:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxhmIV47XiSwd/mZ+zcXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjEwNGEyZDMzNTA4MjdjYWQxMWExNjU2OWNhYjU5ZjBm
ODc3NGMwHhcNMjYwOTIyMTEwMDIwWhcNMjYwOTIzMTEwMDIwWjAzMTEwLwYDVQQD
EyhjMGE0NzkyMWMxYWQyMTdkNzk5Y2I3OGQ4ZWIxZmIzZDI4MzZkMmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/pUlQPyqfP/yAJrFD8kIdOoKPXl
cunn3rK4Cl/6lSWhdM1QVphsJulyP0eD/a8qa2ASoNzd0uZ52E1rwlzgltpp9hQ/
YMiQTD4UfFxHixgyrjw/COeeVfSBITPKVB8LbEkz/MSDpFEsp3GL14sfej4alNpu
W5I7Xw+S7pu1SmxS/9yUva+YKrEGI9Vh963xqq4BiTYo61TbatCF+Me5TG0HGOXq
nHdwFhZdDptrB0yUKZIG/vwLpvxXTb099soYSJKdkzG9sCQMoqlBdIcVlmvRafGE
SRW9xwTzSZzGHBteLIjjvYYxc1FMPG11G3lGaLEGFeStm3uFgewNW7EH2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCkeSHBrSF9eZy3jY6x+z0oNtLgMB8GA1UdIwQY
MBaAFBxhBKLTNQgnytEaFlacq1nw+HdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2Ut
MTQ5MDc5NjI3NzEzLzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2UtMTQ5MDc5NjI3NzEz
LzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSvBi8hs
wHYmvpQbuHi6wkQTjQNwKiqJLLsH4778/AfG05oE/+dFI8G0KT6WZlvcG6VBzv5V
S0AuyWWDgxSP91X+OHQ3tdcMm8LUi0RA5gasJa9k8fBn2iQWyyl/MOjK/eWkz9VO
egyzih94TmkcrpzJsOZpbQnlHpSYTKDOlsQU0ZC/MeuDuoHDzF4KorxgDzqwQRKW
q5FSMNbh3erUn0f5nG943+NWwsaTIaM3mIX+KTZ9lHaLXOJZfRsdtLCXHGtpj81Z
C8zx4t5/rQnqqYVHWHuQWxCBzBRomAUZ3L/i1U8zLb8XsHtPJ7TkAc41B7Fcis/n
NY8J6uC74P1Dkg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:18:24 2026 by rpki-client