Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
File: HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft (raw, json)
Hash identifier: UdAWlRx01DM3D/r5c6i7oplIVQTu+sbe2mRRvww51dQ=
Subject key identifier: 30:E3:4E:B3:55:C1:6F:DC:C8:AD:39:59:5A:CF:83:11:CB:DC:E8:95
Authority key identifier: 1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
Certificate issuer: /CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
Certificate serial: 019EC1EDC52964B6D0606A9552B0ACFD4563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 17:00:45 +0000
Manifest this update: Sat 13 Jun 2026 17:00:45 +0000
Manifest next update: Sun 14 Jun 2026 17:00:45 +0000
Files and hashes: 1: HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl (hash: zCx2LEnA/RwEho+WcsZE7MTO/KUh1fs1BMoH67psBwA=)
2: M47RLklTWoiaz5LdB-5M5t1gKaY.roa (hash: 25KJVzwCwngs0tYI3cpOotv7hpRnhMTU3mQPWaCA0lw=)
3: eQNIWynZW9H_qCeB8qolsHaPfjw.roa (hash: O4+sT4oKTnI0KGCx4zdCXIP/OZGHX6I3BYLvLb9KuB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:c5:29:64:b6:d0:60:6a:95:52:b0:ac:fd:45:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc5d3bcc91e4a31a208361af0a93a62f62d8270
Validity
Not Before: Jun 13 17:00:45 2026 GMT
Not After : Jun 14 17:00:45 2026 GMT
Subject: CN=30e34eb355c16fdcc8ad39595acf8311cbdce895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:e8:fe:39:a7:08:79:c8:51:a7:0d:09:dd:
36:0a:cc:95:1d:18:7d:e3:2e:ed:77:e5:95:62:d8:
dc:2d:1b:f3:7b:26:6e:57:74:b4:65:23:7b:f0:b9:
84:d8:46:bf:13:bd:c3:2d:2b:77:05:0a:85:b4:96:
8c:4e:ea:75:46:72:25:e3:52:35:af:ad:e2:dc:ec:
84:e1:54:62:4c:90:df:c2:f2:37:bb:24:9e:bd:dd:
7a:13:30:7d:37:d9:07:b9:6b:e7:02:99:f1:05:cb:
97:f6:a5:d9:24:c0:c6:3a:13:94:72:35:5a:8b:2c:
05:7c:2d:fe:2c:78:ea:81:ac:68:c0:24:2e:f0:51:
f6:4e:6f:75:ba:46:82:06:14:4d:92:94:30:d3:7d:
84:7a:25:5b:bd:66:ae:ea:1c:24:93:c7:53:ea:80:
b3:fd:55:44:9c:6e:d6:a2:2b:db:0c:2a:55:4b:b6:
fa:00:30:98:c2:63:50:a7:b5:b9:01:cd:25:fa:72:
c3:04:d0:5f:8e:20:21:a6:b0:68:1b:85:a9:15:4f:
08:5b:25:e7:69:fd:cc:16:bd:2d:b3:2b:ec:8a:ff:
89:c7:2e:3c:53:b8:ce:5f:eb:cf:1b:fa:06:31:9c:
d4:17:55:1b:2b:7c:31:34:79:45:8c:e7:8c:92:10:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E3:4E:B3:55:C1:6F:DC:C8:AD:39:59:5A:CF:83:11:CB:DC:E8:95
X509v3 Authority Key Identifier:
keyid:1D:C5:D3:BC:C9:1E:4A:31:A2:08:36:1A:F0:A9:3A:62:F6:2D:82:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/494bc5-1aeb-4565-aad7-f69b7e266233/1/HcXTvMkeSjGiCDYa8Kk6YvYtgnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:86:00:29:c7:7a:b1:bd:48:9d:79:78:b1:bb:cf:df:a1:16:
4c:61:fe:d4:79:66:70:e7:94:52:1c:16:39:a8:8e:2d:8f:42:
54:44:3d:ce:2c:0a:b3:4e:a8:ac:d8:9f:b5:22:67:d2:5f:75:
4e:42:90:2a:64:5f:4a:7e:a2:b7:38:c8:40:75:0e:48:67:9a:
69:78:ca:cf:a2:72:cb:fa:87:4a:ec:86:95:68:a5:aa:30:49:
f7:4c:63:fd:1c:13:f6:33:d3:35:b3:1f:49:c8:5f:c7:e0:2b:
9f:65:2a:b4:0a:47:f6:40:a6:3e:18:d6:a0:59:86:2c:65:cc:
37:40:95:9c:b0:b2:4c:a7:ba:7a:c0:50:e4:8a:43:1d:8b:1a:
05:be:c3:f3:3a:7e:b0:fb:48:e7:a5:5d:5c:b5:1d:3e:86:38:
dc:bd:3b:49:ef:6c:91:87:e8:e7:b0:1e:69:82:ae:9b:43:27:
1d:75:e1:9c:b8:95:0b:e3:e3:d5:01:32:9d:f2:dc:c9:6e:cc:
5b:a9:c5:2e:1f:00:95:28:7a:c8:ad:3a:7f:bc:4c:90:04:d9:
fa:b0:06:fc:cd:3c:24:c7:ed:af:37:c0:80:c9:68:30:13:ea:
91:c7:98:d1:7e:a9:e6:e2:8e:2c:86:0a:ed:56:d4:43:4d:49:
a7:79:de:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:24 2026 by rpki-client