Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: boVxYsUG7I8mcYIIS8iVbP3kDyqzkGllI0OMmWMFDU8=
Subject key identifier: 6E:10:23:37:15:9A:0A:73:8F:1F:55:29:9F:99:06:0A:7C:1E:6A:22
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019EC14900D57262E9BC89ED85C4B0F9812C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 062F
Signing time: Sat 13 Jun 2026 14:00:47 +0000
Manifest this update: Sat 13 Jun 2026 14:00:47 +0000
Manifest next update: Sun 14 Jun 2026 14:00:47 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: NaIWzitiHa0vQoSCEdezgiJwZk7tj+1RKBAwtcPg94c=)
2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=)
3: lYHYX5psOxKD68wkCQ91Mu2FzMM.roa (hash: sDNPjItrBcFZ5sKyPbAqc1GCxh1mlgDVqyaKhMPK/Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:00:d5:72:62:e9:bc:89:ed:85:c4:b0:f9:81:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Jun 13 14:00:47 2026 GMT
Not After : Jun 14 14:00:47 2026 GMT
Subject: CN=6e102337159a0a738f1f55299f99060a7c1e6a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:fc:4e:89:7b:d9:71:db:0a:e5:70:08:f2:
d1:96:9b:c4:52:04:b5:bc:b1:78:cf:2a:74:86:71:
08:89:c3:54:2a:fb:9a:3d:02:06:36:ca:73:8f:1e:
b3:1b:cf:3b:37:7c:ba:d5:5b:be:f2:92:54:03:47:
2a:1f:bb:75:f7:8d:4f:7b:af:07:75:36:0b:28:95:
7d:96:5e:45:7c:9e:0b:8d:24:03:f7:a7:b2:9b:5a:
ce:72:a3:56:06:87:ba:f3:07:3e:55:e7:78:83:21:
f4:6b:02:aa:1b:7b:6a:21:83:7f:10:b2:4c:73:c4:
41:08:6e:33:22:21:34:e5:5e:48:1e:fe:94:3d:89:
bb:e3:1b:86:2c:e3:8d:83:80:41:15:8d:02:ec:b0:
19:b2:e7:63:ee:e3:24:46:3d:68:89:8d:39:fb:44:
10:2e:f5:3d:ad:ae:85:a3:86:f2:d2:f6:05:17:bd:
0c:80:42:a8:ea:24:e1:66:65:4f:f3:a1:c2:29:1e:
80:07:f5:00:7f:25:59:73:7f:a6:c6:77:b8:eb:2c:
9d:6d:57:0a:0f:4a:24:30:dd:1e:d7:01:32:0b:c8:
09:8a:e6:55:0f:88:45:7f:f4:5f:7f:1b:bb:8a:09:
e6:7b:30:ce:ad:31:e3:34:87:80:f4:8d:21:81:df:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:10:23:37:15:9A:0A:73:8F:1F:55:29:9F:99:06:0A:7C:1E:6A:22
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ed:64:05:8c:c5:06:7b:4b:04:18:b7:d1:50:4a:38:f3:1e:
d2:94:90:fd:ee:ce:78:67:8c:24:3a:a6:4d:6d:05:04:5e:46:
d2:f8:fb:a7:7d:db:87:f6:56:3e:b8:22:16:bb:28:42:c1:9a:
8f:0e:03:29:e8:e5:ce:ab:19:bc:69:94:fa:07:7f:d2:15:d2:
b0:4f:c8:a5:61:a6:43:6c:27:87:60:57:37:ab:92:95:0c:41:
e0:83:80:e8:e3:eb:85:9e:55:03:f2:42:93:ad:d5:4d:b9:6a:
0f:2b:f2:4d:42:e6:0d:0c:0c:9d:34:b3:1f:16:d0:79:7b:c7:
9b:22:b9:e9:fd:23:c1:0f:5a:6c:c7:81:3b:c6:74:45:fd:ed:
90:ae:30:6d:1d:26:82:27:12:65:9a:99:13:6a:7d:6a:15:1b:
9c:37:09:f4:96:4e:b8:87:a7:60:43:e9:91:9a:12:b7:13:0b:
63:3a:bb:70:79:bd:68:8c:eb:34:17:60:18:a3:fc:d9:ca:47:
e3:04:8a:40:74:0a:47:c6:33:2e:6d:01:f0:3b:bd:59:da:93:
f5:30:50:98:6f:1a:68:9c:79:26:2e:b2:8d:34:c9:51:e3:e0:
8d:03:6b:99:d2:0a:fa:a8:83:60:51:01:08:0b:3e:1f:69:e5:
90:11:85:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:02 2026 by rpki-client