Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: t8STHzSDz98oQGNhat0xFD2l5kLqqo0yxOhxYFiQifA=
Subject key identifier: FA:04:EC:67:28:20:8B:D3:C8:32:F1:FB:53:D3:39:FA:93:50:A7:D2
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019EBE47A7C462C45D2E1DF54692A286ADDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 0636
Signing time: Sat 13 Jun 2026 00:00:27 +0000
Manifest this update: Sat 13 Jun 2026 00:00:27 +0000
Manifest next update: Sun 14 Jun 2026 00:00:27 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: 5waVcjLdDOWFrNx+YIyodmXltlSGrFVM7d6qZKczoCg=)
2: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
3: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:a7:c4:62:c4:5d:2e:1d:f5:46:92:a2:86:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Jun 13 00:00:27 2026 GMT
Not After : Jun 14 00:00:27 2026 GMT
Subject: CN=fa04ec6728208bd3c832f1fb53d339fa9350a7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:4b:49:74:1a:9d:bb:e4:b6:ec:66:51:6a:
24:8d:56:bc:7b:a1:35:31:c6:54:84:a9:04:ac:80:
f8:c5:10:07:3c:05:d0:d4:85:6f:8f:80:6f:b8:56:
e7:db:a4:e9:f2:55:55:43:42:00:7b:d0:d7:ff:8b:
7c:28:70:28:45:12:e9:29:0f:c4:bc:c1:4e:7c:ac:
8d:d0:a3:34:a3:91:58:af:e7:46:07:82:ee:5d:2e:
bd:ed:b7:c7:28:2d:11:02:02:58:9d:db:1a:4a:e8:
a4:f8:75:76:e2:a0:53:f8:cd:1c:58:04:03:9a:bc:
fa:93:67:e6:ce:42:72:b1:d7:24:7f:13:2b:50:94:
9d:7b:eb:60:a7:ef:7c:de:83:17:70:95:61:cf:45:
d0:61:56:f6:00:27:13:90:ac:ab:06:02:d5:3e:cc:
64:50:4c:9a:4b:e2:a8:d0:30:e5:aa:cc:20:c8:bb:
4c:64:91:b7:9d:76:5f:eb:18:49:ff:40:60:ff:e6:
34:f3:89:9c:46:a9:e1:e0:b0:e0:28:b5:75:8c:6b:
e7:61:9f:35:f7:b6:a7:40:43:8c:18:0c:a0:a2:67:
8b:3b:bd:36:43:b8:a6:ae:8a:23:c3:32:a8:b3:f5:
5e:63:c6:c4:66:7b:7f:51:c5:37:89:b2:86:3c:8c:
81:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:04:EC:67:28:20:8B:D3:C8:32:F1:FB:53:D3:39:FA:93:50:A7:D2
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:88:bb:e2:d4:01:37:c4:19:0b:e5:bc:33:b1:58:ed:e5:b9:
5b:a0:37:18:4e:64:57:c5:4a:21:e7:f1:8d:8e:8d:7a:46:0e:
5f:2e:0d:86:7e:d2:af:ed:4b:59:25:4a:d9:25:5b:c5:9f:44:
d1:bd:bc:57:16:a2:2a:4a:2e:b5:90:f0:23:72:65:23:b4:1c:
63:fa:d3:31:36:29:0b:8f:9d:30:41:90:36:f8:68:f4:c2:6f:
3c:05:f6:05:15:1b:31:b5:b5:d7:64:0c:6e:ac:a2:87:bd:89:
46:40:18:b8:fa:df:dc:24:3b:95:a6:7c:98:bf:1e:bd:64:1c:
d5:1a:b1:8c:f6:83:ce:ce:5c:b6:47:0e:f1:da:09:2b:99:c6:
c2:2b:07:22:10:24:99:d7:f4:a6:00:71:66:08:e4:72:0e:be:
aa:e2:18:4b:3a:d5:0a:6f:39:a5:cf:d9:a0:8d:ed:6c:3b:f7:
59:83:ea:cb:88:71:0d:cc:81:0e:8b:ad:31:46:9a:1d:d6:9f:
5e:e8:cb:60:3d:79:b1:b3:af:32:bf:bf:58:d9:af:1e:9c:d4:
cf:f5:3e:cf:f6:11:04:8e:b1:a5:d4:db:52:14:42:ac:cf:2c:
d1:87:f1:17:4a:3e:87:1f:70:11:e3:e4:93:a8:a7:94:90:55:
6c:b2:72:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:52:47 2026 by rpki-client