Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: 2I2XrEjTFCUTEVcsgCroy9TrasxhVapiRZB8WX1mWz4=
Subject key identifier: DD:7B:E7:91:81:DE:3B:F6:E7:36:23:C5:EE:C6:D0:AA:79:AF:43:64
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 019E20919DB38FAED2E600D85B697ED673DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 1594
Signing time: Wed 13 May 2026 09:01:14 +0000
Manifest this update: Wed 13 May 2026 09:01:14 +0000
Manifest next update: Thu 14 May 2026 09:01:14 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: E3l+CN112/yB4b51aZnhceusebpukIiYqTrSOSmtvuo=)
2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:9d:b3:8f:ae:d2:e6:00:d8:5b:69:7e:d6:73:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: May 13 09:01:14 2026 GMT
Not After : May 14 09:01:14 2026 GMT
Subject: CN=dd7be79181de3bf6e73623c5eec6d0aa79af4364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:df:48:26:8a:2e:ff:52:71:a0:77:18:97:
dd:e1:04:21:51:59:bc:27:52:86:d3:72:c0:d3:6d:
66:d7:c7:9b:66:6d:50:51:75:35:e8:e6:60:f1:c2:
cb:04:88:53:d7:14:a5:4d:96:3b:15:15:24:42:40:
05:87:89:84:db:78:e7:b2:f0:3e:d9:c1:2c:e7:f1:
51:5c:b5:fb:07:24:33:15:b3:bc:bf:28:18:3d:f4:
c7:4f:96:4f:b0:ce:19:3f:b2:bd:fc:c3:9b:f6:5f:
db:90:1e:c0:4e:fc:10:98:db:b5:a7:65:13:23:43:
38:c1:fc:21:f2:06:9d:4b:35:57:dd:de:d9:e4:ad:
77:ba:ce:1c:c1:9c:cb:43:39:f9:b4:7d:04:84:a5:
50:49:9e:ea:07:f0:e7:36:46:69:d4:47:15:df:c8:
7b:bd:63:62:9e:40:59:3f:07:e8:0a:33:5f:33:6a:
be:6d:6f:b0:be:33:20:90:5f:71:c3:3f:ec:96:06:
00:2e:24:25:f1:ef:77:b0:c6:b7:b1:16:2e:85:9b:
45:89:a0:fb:10:9e:5d:38:d7:36:52:b0:14:7d:73:
60:a4:90:33:a8:49:e7:3d:b8:77:d5:32:30:a1:9b:
e7:a5:3f:f1:1e:55:14:50:36:cb:1d:e2:5b:99:21:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7B:E7:91:81:DE:3B:F6:E7:36:23:C5:EE:C6:D0:AA:79:AF:43:64
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:25:41:8c:3b:73:2e:bb:4e:d6:c3:5c:69:e0:e8:d7:2e:e5:
99:dd:f9:a7:37:34:5b:ab:01:c7:37:08:21:5f:a3:c6:74:99:
a8:6b:c6:bf:4b:21:c1:82:16:3d:1b:07:fc:54:0b:a9:74:e8:
11:41:f6:07:5d:85:a1:34:e9:d7:a8:bc:9d:aa:9a:1f:c2:3d:
5c:a9:42:50:ac:1a:d8:71:80:18:fc:97:d8:ac:2c:f1:fa:0e:
63:55:9e:e2:f1:b4:6c:41:62:11:0b:5f:3d:a8:28:a6:54:46:
0e:60:97:b4:12:36:7d:d0:8e:b3:fd:aa:62:36:2f:82:b2:cc:
bc:7a:3d:ed:2f:ae:f7:20:2e:52:7f:7d:ae:bb:ac:98:11:cf:
7a:06:4e:15:15:d0:94:28:57:64:a0:08:3e:ab:97:dd:a7:b2:
6a:0e:d7:8c:3f:cc:6e:fc:7c:f0:d7:72:a3:bc:d3:ee:93:a5:
c2:41:91:9d:a4:cb:ba:18:d0:48:2a:d2:9b:b4:9c:48:c5:5d:
09:70:27:5e:85:ea:c7:36:e6:cf:a0:c8:a4:66:8f:4c:b8:25:
29:a6:bb:a8:f1:ee:22:78:82:af:4e:c6:bf:ed:dc:d8:0c:08:
75:ff:3d:aa:d2:c5:62:88:19:3c:7d:5f:11:f7:22:c9:1d:22:
b6:ea:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:22 2026 by rpki-client