Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: Dx+HhQQk0by0Ava2yvy8Sj+iBK4RwlXXLVBIB2Hliuw=
Subject key identifier: BD:D3:FA:25:2C:13:9F:8C:F4:A6:3B:A9:64:AF:AE:F1:59:1B:E4:F6
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019ED507BAC000D0769A7F555BF3B8A04836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 1272
Signing time: Wed 17 Jun 2026 10:01:53 +0000
Manifest this update: Wed 17 Jun 2026 10:01:53 +0000
Manifest next update: Thu 18 Jun 2026 10:01:53 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: VIU4eIvpHA4w+x3mhg25eYXicynr5cKVLcbG16VAuns=)
2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:ba:c0:00:d0:76:9a:7f:55:5b:f3:b8:a0:48:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Jun 17 10:01:53 2026 GMT
Not After : Jun 18 10:01:53 2026 GMT
Subject: CN=bdd3fa252c139f8cf4a63ba964afaef1591be4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:37:40:c1:92:a3:c1:49:a9:32:5a:8a:ee:
83:3f:f1:a3:40:cd:b4:fa:76:a3:38:cd:6c:ee:22:
34:cb:2f:d7:5d:2d:cf:76:ba:7c:56:37:a1:54:35:
78:3c:14:b1:7c:13:ce:c9:e6:b7:bb:ab:35:36:49:
36:be:2c:2d:c9:8f:01:38:90:ca:e3:11:48:b1:9e:
c4:2c:73:1b:6c:c2:89:54:05:2e:c1:2b:e7:7c:47:
d2:e8:5f:17:e4:61:37:8d:e8:16:89:e7:48:bb:8b:
79:7c:fa:20:4f:06:81:bc:ae:c3:b4:c0:45:5a:6c:
8e:e6:1c:be:1d:ab:5d:f4:45:d5:cd:8f:85:a8:71:
ac:25:62:17:65:09:9f:4c:41:b0:e2:60:d5:67:1c:
4c:84:1b:45:b1:22:a1:80:8b:35:12:de:a3:62:e6:
d7:90:80:69:a5:8f:f9:44:25:c4:e5:d4:ea:5b:4b:
d8:24:53:00:b5:67:5b:b4:e1:ca:f0:6e:0e:d4:da:
bc:a8:ba:2b:66:0f:2a:dc:0e:fe:de:67:3d:fc:b4:
6f:42:96:1f:20:d0:6a:b7:4a:02:5a:4d:04:72:e4:
7c:30:83:0f:38:e2:fa:db:f4:76:b8:e3:28:75:37:
c2:0b:f0:d8:1d:22:0a:6a:c5:29:c6:04:17:63:ba:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D3:FA:25:2C:13:9F:8C:F4:A6:3B:A9:64:AF:AE:F1:59:1B:E4:F6
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:21:51:6f:ab:9c:f8:36:04:3a:48:37:47:50:61:e0:2f:23:
e9:a8:1b:82:fe:f9:31:b4:62:ca:35:1e:16:b8:a6:12:a1:33:
0f:a8:58:46:da:7d:96:4a:e0:db:e0:ce:09:15:30:f6:12:a5:
90:e2:38:44:95:d6:4f:83:6c:75:7e:67:b7:ba:15:68:e2:75:
c4:42:c0:a5:39:0c:d8:fb:77:22:4d:11:aa:73:a3:33:0d:cd:
e9:bf:00:e6:20:1e:fd:34:f4:c3:f6:00:8d:fb:cb:09:ff:18:
90:40:23:11:79:d9:1c:3a:cf:bc:2b:20:6a:21:d2:a8:50:69:
3d:7a:31:4a:99:c9:89:8d:82:bf:5f:b4:6e:c0:6d:48:e1:69:
e5:de:56:7e:25:fc:79:ad:06:6f:07:60:ba:5c:19:c9:0f:fe:
fb:82:e0:e6:98:00:41:a2:58:64:89:5d:c2:98:90:6f:e8:9f:
7a:b1:db:4a:36:c7:de:41:a0:5d:09:41:74:3c:46:10:27:7e:
c9:da:eb:5e:96:76:2c:23:7a:ab:12:78:c3:59:17:9a:b9:b6:
e7:d6:dd:06:4f:d3:49:b6:a7:6d:49:6d:7e:59:45:b3:db:65:
9d:c4:20:c9:6a:6f:15:62:5e:8f:50:ac:36:73:35:9c:ad:b6:
9c:4b:0f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7VB7rAANB2mn9VW/O4oEg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzUxMDY3NzFjNDI5NWUzZDNlY2ZhMDRjYjk3ZjYzMTYy
M2U1YmYwHhcNMjYwNjE3MTAwMTUzWhcNMjYwNjE4MTAwMTUzWjAzMTEwLwYDVQQD
EyhiZGQzZmEyNTJjMTM5ZjhjZjRhNjNiYTk2NGFmYWVmMTU5MWJlNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj03QMGSo8FJqTJaiu6DP/GjQM20
+najOM1s7iI0yy/XXS3Pdrp8VjehVDV4PBSxfBPOyea3u6s1Nkk2viwtyY8BOJDK
4xFIsZ7ELHMbbMKJVAUuwSvnfEfS6F8X5GE3jegWiedIu4t5fPogTwaBvK7DtMBF
WmyO5hy+Hatd9EXVzY+FqHGsJWIXZQmfTEGw4mDVZxxMhBtFsSKhgIs1Et6jYubX
kIBppY/5RCXE5dTqW0vYJFMAtWdbtOHK8G4O1Nq8qLorZg8q3A7+3mc9/LRvQpYf
INBqt0oCWk0EcuR8MIMPOOL62/R2uOModTfCC/DYHSIKasUpxgQXY7r4qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3T+iUsE5+M9KY7qWSvrvFZG+T2MB8GA1UdIwQY
MBaAFB51EGdxxClePT7PoEy5f2MWI+W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTct
YTJmZGI5MzhjYTJkLzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTctYTJmZGI5MzhjYTJk
LzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyFRb6uc
+DYEOkg3R1Bh4C8j6agbgv75MbRiyjUeFrimEqEzD6hYRtp9lkrg2+DOCRUw9hKl
kOI4RJXWT4NsdX5nt7oVaOJ1xELApTkM2Pt3Ik0RqnOjMw3N6b8A5iAe/TT0w/YA
jfvLCf8YkEAjEXnZHDrPvCsgaiHSqFBpPXoxSpnJiY2Cv1+0bsBtSOFp5d5WfiX8
ea0GbwdgulwZyQ/++4Lg5pgAQaJYZIldwpiQb+iferHbSjbH3kGgXQlBdDxGECd+
ydrrXpZ2LCN6qxJ4w1kXmrm259bdBk/TSbanbUltfllFs9tlncQgyWpvFWJej1Cs
NnM1nK22nEsPAw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:08:17 2026 by rpki-client