Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: zKnEgdI7nWheMQv1g5/94JnJTpgnG1fWvCXF///bSzI=
Subject key identifier: B4:0E:E1:E2:32:32:14:38:21:F8:82:EC:02:51:55:98:25:D0:6B:27
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 019EC3DCBD078261BC85C23D4497E3DB1054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 12C9
Signing time: Sun 14 Jun 2026 02:01:23 +0000
Manifest this update: Sun 14 Jun 2026 02:01:23 +0000
Manifest next update: Mon 15 Jun 2026 02:01:23 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: VQOyg8j8dnF1ADP2e+Nh0LQGHcSWkwdNt1eCft2QL2o=)
2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:bd:07:82:61:bc:85:c2:3d:44:97:e3:db:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Jun 14 02:01:23 2026 GMT
Not After : Jun 15 02:01:23 2026 GMT
Subject: CN=b40ee1e23232143821f882ec0251559825d06b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:80:de:d3:3e:cf:1f:30:82:90:32:f5:d1:
29:e0:46:6f:cc:4d:59:c0:95:a8:f0:ab:f0:41:46:
5e:53:cd:01:b6:23:e4:ca:6e:7a:3b:c0:2d:ea:fa:
e8:30:5e:dd:00:4c:67:24:68:3d:dd:be:15:bc:49:
a0:b0:f5:99:2f:61:68:db:e1:2d:80:3e:a3:b4:b5:
e4:28:4a:6e:6e:92:d6:4c:b8:8e:7d:b7:00:90:de:
4b:38:97:62:8c:cb:43:94:62:a1:fa:05:ab:d0:c7:
65:f2:f7:4c:a6:e1:17:64:fc:16:5a:4b:c1:08:e3:
0e:30:8e:42:91:65:39:b4:96:b4:e8:b3:0b:85:ba:
b6:e8:9e:bf:32:fd:48:42:2b:5e:9d:d9:59:80:e3:
14:79:29:0c:fe:c0:68:56:28:f8:4b:73:db:16:a0:
5f:6c:5e:ed:fe:f0:a0:1e:c4:0e:f7:97:df:ff:94:
7f:88:1f:f6:fe:f4:18:2b:29:8a:c8:83:51:46:36:
67:43:6a:9b:de:84:60:24:1b:d3:d8:a9:7f:2f:63:
b3:e6:a4:b1:ce:50:11:f0:03:ea:67:e9:f2:57:e2:
7a:15:e7:bb:3d:c2:22:2b:9f:8b:58:6a:c4:24:85:
fb:4e:f5:41:fa:a8:31:26:13:96:92:08:ef:21:19:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0E:E1:E2:32:32:14:38:21:F8:82:EC:02:51:55:98:25:D0:6B:27
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:69:b1:9c:0d:0b:0b:41:07:ca:cb:ed:a3:85:a6:be:75:22:
6c:89:ab:35:ef:eb:ce:df:ef:b0:13:49:fb:7e:78:0b:80:ca:
02:d8:92:0a:f0:2e:a0:c8:af:47:33:2e:f1:fa:b4:d8:70:09:
e3:30:7f:a5:6f:24:72:00:44:4f:e4:be:b5:16:95:b3:3a:64:
56:39:79:ff:1b:00:0c:e0:f4:d5:49:cb:33:2a:3c:94:6e:d3:
4b:71:d9:51:f4:87:1c:c5:34:f7:71:9e:a2:10:23:a3:72:be:
26:df:b6:c9:58:50:1a:21:92:4e:6b:e0:73:f9:3f:87:6c:74:
ec:13:32:97:8f:22:02:7a:83:85:9f:1f:0e:b7:3f:55:59:01:
cd:ce:c2:da:fb:29:d3:12:e5:ea:53:02:57:e2:ff:ef:15:46:
51:3c:f4:68:58:3f:91:44:06:a0:02:c1:af:a2:47:86:c7:48:
81:12:63:0b:68:08:09:40:17:ce:ea:fb:0c:53:16:61:df:c2:
a7:2d:1b:ad:9a:2f:11:e9:23:f1:90:8e:8d:ce:3a:3f:c7:9a:
35:2c:0a:39:57:68:83:dc:d6:6d:c8:cb:69:68:e8:f2:37:8d:
0a:f0:a1:ff:ff:5c:92:2f:0b:fb:b0:98:90:40:c7:42:87:22:
7e:6e:50:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:19 2026 by rpki-client