Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: +dx+um9cEwnyZzO0VEl41x/th5k2YSlnpznkvPkGO/o=
Subject key identifier: E6:99:BB:98:B6:FB:37:64:38:84:BE:1D:81:92:FE:42:8B:78:22:7C
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 019EC0A462CD891D2E3E5D0A6478CD8055DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 09BE
Signing time: Sat 13 Jun 2026 11:00:59 +0000
Manifest this update: Sat 13 Jun 2026 11:00:59 +0000
Manifest next update: Sun 14 Jun 2026 11:00:59 +0000
Files and hashes: 1: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: i/W/Cc8i4/X5MCoera3iej8pNzkWqtTxRBT6ThgUpBE=)
2: ilf77_-o9-q6za7MOsqeG7F-F18.roa (hash: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:62:cd:89:1d:2e:3e:5d:0a:64:78:cd:80:55:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Jun 13 11:00:59 2026 GMT
Not After : Jun 14 11:00:59 2026 GMT
Subject: CN=e699bb98b6fb37643884be1d8192fe428b78227c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:b0:ef:cf:44:9f:5a:31:ca:c5:0d:a6:b0:
83:77:9a:73:30:f7:c2:57:86:9f:b8:58:32:96:b8:
00:5a:31:b3:ef:91:71:b4:02:76:92:3d:26:d4:d5:
8a:3b:6f:5a:a8:3d:15:02:45:6b:e3:2d:98:eb:42:
8b:c5:6f:e3:e8:c7:a1:a2:a9:f9:5a:55:0f:38:28:
f1:51:b2:b6:67:e0:9a:f0:3f:44:55:22:ce:3a:4a:
d2:25:c4:df:70:da:4a:3d:67:5a:58:05:40:44:e3:
4c:8b:67:e7:31:91:ae:d5:df:64:41:7b:4c:cd:56:
44:58:9a:be:57:db:2e:fa:27:7e:69:a8:b9:62:10:
00:b6:c3:ce:55:f1:77:b5:b6:78:46:bd:1b:92:a6:
c2:03:1a:f7:66:b6:1c:0e:1b:83:9d:2d:28:5f:a3:
cd:af:f5:97:04:b2:9d:a1:dc:f4:0d:39:76:17:9d:
9e:04:e7:7e:bc:42:f0:b8:bd:a3:da:b6:2d:d1:05:
bf:95:a6:1a:14:a7:31:6e:5b:e4:dc:20:13:a3:10:
85:4b:40:f2:06:75:1c:eb:d8:66:d4:53:ad:28:09:
64:52:70:7e:fa:3a:2f:6a:b4:96:4b:de:fb:12:e6:
26:5b:3a:e1:50:00:9e:3f:fc:36:28:19:ae:39:0f:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:BB:98:B6:FB:37:64:38:84:BE:1D:81:92:FE:42:8B:78:22:7C
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:06:6f:4f:ae:56:1b:04:7d:da:e1:9d:94:ff:ae:1f:ea:0f:
b5:ea:8f:a7:eb:3d:06:c2:43:00:9d:47:77:64:e5:b2:b8:6f:
8d:33:4e:da:b2:ac:2a:33:55:c3:57:87:9b:4d:3a:63:ca:64:
f9:3a:07:2d:b2:45:00:a8:fb:4b:01:63:d2:42:00:c4:b1:37:
94:be:da:f4:20:09:43:9d:af:72:62:bb:c4:c9:b6:0d:b2:49:
43:88:5c:1f:20:d2:7c:a6:0a:24:04:07:55:27:10:f3:36:f7:
fb:43:c9:74:47:ce:35:3e:63:5c:3e:45:15:34:49:8c:dd:0c:
9c:74:c0:92:cd:3c:89:8e:db:8a:01:a4:76:67:88:e3:80:2c:
54:26:05:86:fa:26:04:98:75:10:cd:86:05:32:0b:84:05:93:
9f:30:86:39:70:b1:c7:7f:29:a3:26:91:48:3e:1c:7b:bc:81:
b6:6a:ec:12:c6:86:f3:f9:dd:30:fc:99:37:a9:18:61:c4:dd:
5e:35:20:5b:27:a5:1f:9a:3b:78:3b:57:21:bd:d1:6d:e4:16:
74:4b:c2:61:03:42:e0:96:46:f2:31:0b:14:ec:ca:07:61:c0:
2d:35:15:aa:15:92:0d:33:f7:ee:54:9b:97:88:23:75:b4:9b:
80:51:dc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:40:26 2026 by rpki-client