Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: sucJ9SGy1Kzdmu98mTpkUuE0/vUynlU4ul0nv32+RP0=
Subject key identifier: 05:76:E9:04:D5:B1:F9:3D:FC:87:77:81:A3:7B:9B:2D:AB:D2:1C:21
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 019EC1EDD1E4CCC04C192945965E7340B8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 15E1
Signing time: Sat 13 Jun 2026 17:00:48 +0000
Manifest this update: Sat 13 Jun 2026 17:00:48 +0000
Manifest next update: Sun 14 Jun 2026 17:00:48 +0000
Files and hashes: 1: 4BSkcYmhr5NVj087jPH0UVEqIOM.roa (hash: K3WcOTsUriKcpWXE1oQcG3kJpx5GuCFTz9zkPDyBd4I=)
2: CpYXrnLvjR2OacRHrAwyXhQn-54.roa (hash: QEMefUV+U9Y/lW0Jd6Vawm/+aN0QKHnAj1lMOhtlgXc=)
3: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: Vpp3Hj70a5wttU/oabsuOKIMl9eentAHiIepJfFBdjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:d1:e4:cc:c0:4c:19:29:45:96:5e:73:40:b8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Jun 13 17:00:48 2026 GMT
Not After : Jun 14 17:00:48 2026 GMT
Subject: CN=0576e904d5b1f93dfc877781a37b9b2dabd21c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:92:c0:a9:b5:af:71:6b:42:cc:83:23:a1:
54:30:8d:84:16:2e:a7:45:59:dd:8b:85:a9:df:d0:
a9:68:aa:b3:9b:d1:d8:1c:cb:6c:49:d6:12:a1:8a:
93:7b:6d:0c:29:bd:25:83:ab:3f:f9:6f:d7:30:96:
c2:79:56:0b:6b:c3:76:13:51:81:0c:4e:7e:67:df:
27:9a:16:f7:81:c8:91:c0:b0:fc:ab:58:42:f9:86:
69:4f:63:2e:c3:91:0b:50:a3:f0:ea:c5:ae:97:08:
b6:33:b2:fb:43:ab:51:27:28:18:23:58:fe:54:6f:
be:30:bf:4b:58:e5:e9:aa:48:a2:eb:43:d5:75:cd:
1b:3e:2b:2d:10:7a:8d:f6:39:3e:a1:55:32:49:ef:
56:65:34:97:95:7d:70:9d:73:b8:38:96:f1:98:64:
e9:62:06:1f:48:fc:97:6c:98:59:7a:db:e4:b8:01:
38:91:ff:aa:4f:52:8d:95:b7:d1:05:c4:4f:b5:af:
3b:a5:ad:f3:99:1f:96:d3:b8:7c:db:b3:b0:d2:be:
3a:aa:a9:c7:96:3a:ba:f8:6d:89:9a:0e:ae:77:43:
91:9c:7d:17:36:b7:39:98:9e:a2:64:a2:37:95:9d:
3c:79:2a:87:9a:92:00:1f:54:6e:f7:05:4c:3f:f0:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:76:E9:04:D5:B1:F9:3D:FC:87:77:81:A3:7B:9B:2D:AB:D2:1C:21
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:96:e8:0c:f5:8c:39:05:c6:5d:0c:be:c7:c8:1e:22:d5:44:
f6:f1:b6:e6:d6:05:7e:29:40:c4:6e:34:74:20:25:15:4a:cf:
0f:55:a9:86:7e:7e:4d:74:ff:37:31:31:fe:bb:ff:ad:2b:a2:
a9:58:83:5d:03:8e:b5:f9:3e:65:32:69:39:85:1d:b6:83:f7:
61:4a:80:67:5a:5d:81:66:74:8f:cf:0b:53:51:7e:6f:c1:94:
a5:06:02:96:3e:83:70:fb:a8:3e:bb:d7:8e:06:0f:db:ea:70:
6e:a9:f8:40:8f:83:8d:7f:e5:2b:69:2b:1e:7e:d9:68:ce:66:
1f:11:0a:e8:02:42:d9:7b:aa:be:33:45:9c:5c:58:b1:ed:f3:
cc:14:8c:1a:6b:44:7d:36:dc:46:50:8c:7b:30:74:83:ed:2c:
14:48:94:ea:94:0b:ef:81:5b:47:bb:dc:02:0d:c1:2b:a3:8d:
d9:a0:4b:52:09:a0:d1:c6:21:e2:45:d0:b4:86:a6:f8:3d:d5:
1b:39:f5:6d:a3:71:3a:21:c8:6a:8c:fd:df:37:7b:37:78:d8:
c1:24:61:29:79:a7:15:85:c1:31:63:a0:2d:12:5f:0b:b7:24:
9a:3e:d6:9a:4b:86:47:0e:6c:ef:61:97:93:0c:3f:08:af:30:
76:51:da:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7B7dHkzMBMGSlFll5zQLiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNGMzMjA4NmUxZTk4NDUwNTY5MWIwMWY1OTg1ZGY3YTM2
YjI0YWUwHhcNMjYwNjEzMTcwMDQ4WhcNMjYwNjE0MTcwMDQ4WjAzMTEwLwYDVQQD
EygwNTc2ZTkwNGQ1YjFmOTNkZmM4Nzc3ODFhMzdiOWIyZGFiZDIxYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKiSwKm1r3FrQsyDI6FUMI2EFi6n
RVndi4Wp39CpaKqzm9HYHMtsSdYSoYqTe20MKb0lg6s/+W/XMJbCeVYLa8N2E1GB
DE5+Z98nmhb3gciRwLD8q1hC+YZpT2Muw5ELUKPw6sWulwi2M7L7Q6tRJygYI1j+
VG++ML9LWOXpqkii60PVdc0bPistEHqN9jk+oVUySe9WZTSXlX1wnXO4OJbxmGTp
YgYfSPyXbJhZetvkuAE4kf+qT1KNlbfRBcRPta87pa3zmR+W07h827Ow0r46qqnH
ljq6+G2Jmg6ud0ORnH0XNrc5mJ6iZKI3lZ08eSqHmpIAH1Ru9wVMP/De3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV26QTVsfk9/Id3gaN7my2r0hwhMB8GA1UdIwQY
MBaAFB5MMghuHphFBWkbAfWYXfejaySuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYt
OThjZTE0NmYxODI0LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9kNDgwOTAtMmRiZi00Yjg0LTg1OTYtOThjZTE0NmYxODI0
LzEvSGt3eUNHNGVtRVVGYVJzQjlaaGQ5Nk5ySks0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx5boDPWM
OQXGXQy+x8geItVE9vG25tYFfilAxG40dCAlFUrPD1Wphn5+TXT/NzEx/rv/rSui
qViDXQOOtfk+ZTJpOYUdtoP3YUqAZ1pdgWZ0j88LU1F+b8GUpQYClj6DcPuoPrvX
jgYP2+pwbqn4QI+DjX/lK2krHn7ZaM5mHxEK6AJC2XuqvjNFnFxYse3zzBSMGmtE
fTbcRlCMezB0g+0sFEiU6pQL74FbR7vcAg3BK6ON2aBLUgmg0cYh4kXQtIam+D3V
Gzn1baNxOiHIaoz93zd7N3jYwSRhKXmnFYXBMWOgLRJfC7ckmj7WmkuGRw5s72GX
kww/CK8wdlHa9g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:48:28 2026 by rpki-client