Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier: rpY3hrdRyg4Ib7Bnw2tvuZNJfcCOyRxP1zvVZr1WnfM=
Subject key identifier: BB:D9:1C:F9:27:DA:B6:91:4B:78:C2:C6:4D:34:D1:D4:88:12:46:5E
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019EBDDA0F9A552A2ECEDB1472BA64839E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number: 0250
Signing time: Fri 12 Jun 2026 22:00:44 +0000
Manifest this update: Fri 12 Jun 2026 22:00:44 +0000
Manifest next update: Sat 13 Jun 2026 22:00:44 +0000
Files and hashes: 1: 1yp-CyfvXxAtTkk4tSDataHyfwY.roa (hash: SqgokM9PS1NitFY8bOJBDDBU8EreribWl+tjcbzmpfc=)
2: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=)
3: IGonrweKcV3pBiFmxgMN0Hhq74c.roa (hash: YkHvQYVpbz1V6t76f23kYkJHWGSnZkMw7J+Y7FV0iWY=)
4: SVUjKuzZ_ORsIdZ9huGbzPV9buQ.roa (hash: Nvnw35bKd31dDdLFTiIRL9x4aYLcyT04hwpnW9gAJbM=)
5: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: 5uu1P8iQZj0MK7szjk1fB2jiBtppZzioQawafiWosLI=)
6: kQdxt2HDKPdaMlFc6JvcibC2udk.roa (hash: PEWJwV3d6sgp5NXEgr5NQKhkO3j5aEeFoYdtJHfv4hU=)
7: lb_7krkD_79mMTpANXkkm_K7ZTQ.roa (hash: xkUhgkfDHxEVRJZCN3Fz90NoSxJUNyIebRhDkhjmiCM=)
8: q1_uvTwS2odl5ebIbbIhhY5492k.roa (hash: rcptFlj+yIPXEnP3ZQnKAkTZfAlxMM8LHnpHcZGEHWI=)
9: qo3RmaJil-tmg6e3jCPqKh_xFAo.roa (hash: DLtprsoHKdJkHToMaxiYCDgKpyQfT89HL7h3BW0fsgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:0f:9a:55:2a:2e:ce:db:14:72:ba:64:83:9e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Jun 12 22:00:44 2026 GMT
Not After : Jun 13 22:00:44 2026 GMT
Subject: CN=bbd91cf927dab6914b78c2c64d34d1d48812465e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:ce:14:63:6a:8d:98:c2:05:17:37:63:b9:
f6:47:19:d9:ce:20:9f:79:1a:d8:04:e1:09:98:23:
45:89:8b:2b:15:06:fb:7b:47:27:83:ac:c4:2e:5b:
af:ca:8d:8c:e2:b7:56:11:10:0a:cd:82:7c:e9:59:
c7:90:97:ce:cc:87:35:d1:05:6b:08:5f:cb:3b:7f:
11:05:be:6e:b7:a2:c2:ea:b7:66:7b:99:16:d7:0c:
8f:db:ec:96:63:48:b4:40:23:0b:71:fe:6e:f8:cd:
47:01:00:57:89:46:89:da:ce:41:9e:1c:59:5c:65:
40:89:ce:84:c2:03:26:02:35:a1:00:53:ab:91:60:
4b:37:08:4b:b0:86:d9:13:39:bd:d0:e6:5d:04:01:
58:8c:31:b0:05:88:03:d7:97:a3:bf:f8:da:96:8f:
34:2f:45:30:bd:84:03:41:09:6c:51:8d:d5:be:72:
d8:58:4b:e4:e0:bf:1a:b4:55:8e:c1:6a:e5:f6:01:
27:3a:74:fa:e8:15:0c:8d:e3:89:f8:d4:b1:70:b5:
ff:25:37:0d:68:95:02:5d:8c:f6:b7:97:6a:b6:0c:
6b:b8:2c:00:5d:8a:bf:a6:44:e1:ad:4f:27:52:90:
6f:2c:39:65:b8:0b:7a:35:5a:af:48:d5:47:fb:2b:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D9:1C:F9:27:DA:B6:91:4B:78:C2:C6:4D:34:D1:D4:88:12:46:5E
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:35:50:d0:ca:06:f1:4f:c9:07:2b:9b:d6:af:8e:f5:83:b9:
05:f7:f5:6b:3c:ab:34:a2:38:52:e8:e0:52:e3:19:b2:0d:02:
69:1f:f2:3b:70:98:c1:d7:8b:e4:58:47:90:53:09:89:0e:c8:
da:10:37:22:d0:d8:aa:ac:5a:af:80:e0:b9:26:3e:ab:7c:37:
7c:e6:6f:24:37:fe:2d:14:e9:42:f5:90:5f:d7:76:7d:0c:7f:
b8:79:6a:ed:86:d0:b9:12:9b:b1:f6:38:b0:45:72:b5:d1:10:
59:b8:84:7a:54:d4:5d:fb:47:02:57:8d:7e:12:f2:f8:fa:46:
73:43:8c:16:71:8d:c0:fa:44:9c:3d:f6:cb:95:c1:98:9c:05:
e0:a2:c1:09:76:1d:7d:79:a9:33:bd:53:d0:37:95:b4:3d:8f:
8b:1c:36:95:17:2d:72:99:c6:ca:c6:ed:9a:3b:5b:84:9b:06:
21:91:16:c6:fb:ba:2c:73:02:47:c2:27:74:a1:63:b0:52:6e:
99:89:d8:1e:49:6d:b2:c8:40:7d:43:b0:f7:58:8b:10:2f:18:
eb:9e:c4:83:53:d1:fa:0d:a8:f8:65:db:9d:07:d1:9c:3c:86:
00:c5:c3:fc:49:ea:ef:5e:68:91:aa:78:fb:57:3c:c3:d2:c0:
4a:b0:2e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:26 2026 by rpki-client