Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: MqWJg/w2j966bdPQ5i37TvYLX8EUGkgV1QXdkzb3pW8=
Subject key identifier: 61:96:B9:2E:42:B4:83:9F:10:D6:4E:6B:D7:DF:7E:1D:3B:64:7F:0F
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019FAAF5BEA02E8F21E1DC08BE4E30A98363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 06A8
Signing time: Tue 28 Jul 2026 23:00:59 +0000
Manifest this update: Tue 28 Jul 2026 23:00:59 +0000
Manifest next update: Wed 29 Jul 2026 23:00:59 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: RxyLabSzTDnYutqhlEYKl9SG4DQgJU519MLlX9pFycM=)
2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=)
3: lYHYX5psOxKD68wkCQ91Mu2FzMM.roa (hash: sDNPjItrBcFZ5sKyPbAqc1GCxh1mlgDVqyaKhMPK/Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:be:a0:2e:8f:21:e1:dc:08:be:4e:30:a9:83:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Jul 28 23:00:59 2026 GMT
Not After : Jul 29 23:00:59 2026 GMT
Subject: CN=6196b92e42b4839f10d64e6bd7df7e1d3b647f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:d0:9b:bc:6b:fb:5c:d9:28:7c:e6:2c:9c:
18:72:71:3e:ff:ce:56:b3:61:12:39:54:f7:7f:b9:
4d:0b:f5:54:12:f7:8f:b0:79:0c:2e:0c:7a:56:76:
bf:1f:51:a4:27:d7:68:ea:3f:bd:ea:72:34:d2:f3:
ba:f0:7c:13:72:aa:64:ac:ae:80:c3:d6:53:58:73:
94:d0:f0:8f:23:67:f4:a7:b1:ab:cc:9d:a4:37:fc:
11:b7:34:77:be:2d:c9:5a:86:ce:6f:bb:4d:12:e4:
02:48:85:59:c1:8a:6b:b0:dd:48:8e:f7:a4:08:2b:
d6:1b:ad:b7:9d:fc:31:5c:16:76:76:85:0c:cf:0a:
2a:69:0e:74:4d:77:9c:14:7b:1b:44:8f:04:32:46:
1f:a3:1c:dd:34:c3:61:d3:43:af:2c:a8:db:d0:c6:
be:b7:9d:f0:33:f8:96:dc:39:c1:e4:84:dc:7c:eb:
f7:b8:ee:83:06:be:b6:d8:68:2e:d5:7a:be:9b:39:
78:a6:b7:0f:8a:55:42:c9:2e:e9:6b:90:50:04:c4:
bd:41:a0:22:58:d5:5b:c8:fa:95:72:79:d9:99:6e:
f0:5b:bd:95:39:de:a9:cc:c3:99:91:71:82:3e:e1:
7a:9d:77:fc:4f:30:0c:ef:f1:6d:2d:a0:df:d1:1e:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:96:B9:2E:42:B4:83:9F:10:D6:4E:6B:D7:DF:7E:1D:3B:64:7F:0F
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a3:39:79:4f:2d:ec:22:e9:e0:f2:da:fd:83:9c:7b:bc:ca:
d4:a1:4c:cc:78:ec:84:4f:af:66:d5:5d:da:27:fa:b2:d1:0d:
f8:ee:bb:be:ad:9c:af:52:50:48:3b:b1:d2:17:05:f6:a3:6a:
b9:df:d9:52:77:e4:3a:c3:72:28:3d:0d:b4:77:75:2f:03:64:
2d:1d:bf:76:07:2e:f9:78:01:d9:8f:3f:ce:f1:4c:1d:8d:ed:
9d:7b:01:46:05:89:d9:ef:6b:54:a5:70:7c:ab:57:42:de:8d:
91:85:59:fe:42:de:dd:77:86:88:5c:2f:e2:7a:85:b3:be:ec:
c6:11:b7:da:02:7f:61:a8:38:cc:dd:f3:e6:c2:db:7e:6a:c9:
6f:92:23:14:83:14:38:8c:b1:db:10:b3:6e:89:2e:f9:8f:cd:
f0:0c:2a:54:c2:b2:3e:32:b8:f6:bd:6a:f6:6f:8d:76:3d:fd:
9b:c1:0b:1a:74:64:50:c3:91:c6:42:2f:38:16:d5:a5:4d:e7:
b7:2a:90:30:8b:dc:fe:98:4f:ae:dd:a9:ae:20:51:72:a5:ea:
73:86:fc:64:cc:e2:60:0c:0e:d6:a3:4c:69:20:50:79:b8:25:
f5:bb:08:25:17:51:20:e2:30:66:36:3f:f4:71:96:44:56:cb:
f8:9c:33:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:47 2026 by rpki-client