Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.mft
File: HBLu8UKQTMYn3vhpfwgJ-SD4fK8.mft (raw, json)
Hash identifier: lHc/wRGVSuDMnPWV4EFO7eQyK27EsFcDgr0/vlyy/Cs=
Subject key identifier: 7F:E9:3A:F2:68:6C:33:D4:75:01:1F:B6:39:3A:EF:0A:88:6C:41:E2
Authority key identifier: 1C:12:EE:F1:42:90:4C:C6:27:DE:F8:69:7F:08:09:F9:20:F8:7C:AF
Certificate issuer: /CN=1c12eef142904cc627def8697f0809f920f87caf
Certificate serial: 019F935C22DDFA8320FB67878BCE0056D9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:56 +0000
Manifest this update: Fri 24 Jul 2026 09:01:56 +0000
Manifest next update: Sat 25 Jul 2026 09:01:56 +0000
Files and hashes: 1: H8PUqURRSX7Ko7yZjSMsmWRZP3Q.roa (hash: HFsd/3BZ4kIENJQs4l9bz42cWMnzn7tWXz7RhsMqBaE=)
2: HBLu8UKQTMYn3vhpfwgJ-SD4fK8.crl (hash: OMyi7l3hMNXaiGmOMtgg49EPANQMTEUFHN0dP0EwZAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:22:dd:fa:83:20:fb:67:87:8b:ce:00:56:d9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c12eef142904cc627def8697f0809f920f87caf
Validity
Not Before: Jul 24 09:01:56 2026 GMT
Not After : Jul 25 09:01:56 2026 GMT
Subject: CN=7fe93af2686c33d475011fb6393aef0a886c41e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:54:2c:49:2a:1c:29:4e:fa:f5:0f:25:8e:1d:
a5:21:55:9b:68:9b:b4:1e:c9:31:2f:b4:28:5d:e7:
7a:47:c8:a2:09:8f:b9:5c:28:51:4b:53:4a:4c:6b:
a7:79:0b:c9:1d:12:18:5c:49:ee:79:00:cc:17:52:
33:47:2e:cc:da:5c:7a:b3:61:4a:d3:02:ff:79:70:
31:9c:12:58:8c:3f:ff:24:4d:eb:ea:df:8a:ab:37:
40:85:26:65:75:51:9f:aa:27:b6:78:85:e9:8c:fc:
ee:da:2b:fd:71:cb:ee:cf:2c:73:53:69:a9:d8:43:
7c:69:f3:f6:60:cb:13:f2:f0:4e:05:e9:10:93:21:
89:48:6b:6b:b4:f6:96:88:84:79:75:70:6b:a3:7b:
7b:b0:bb:4c:62:18:cb:33:64:82:73:21:c1:89:02:
c8:e7:1f:86:fd:7f:29:be:66:90:a4:cf:9c:dd:06:
bc:9f:ff:8b:7a:35:05:4b:cf:ee:b5:5d:89:6f:ad:
aa:b0:f8:38:37:8f:fc:bf:d7:59:f4:c8:90:2b:8b:
2c:96:a7:01:7d:be:7e:0f:99:2a:be:40:66:f7:b9:
70:fc:bf:9a:a5:47:d0:b6:dc:bc:d1:ce:87:16:68:
c4:b7:d1:3b:a5:fa:ef:41:da:80:23:b9:fc:f9:7f:
bb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E9:3A:F2:68:6C:33:D4:75:01:1F:B6:39:3A:EF:0A:88:6C:41:E2
X509v3 Authority Key Identifier:
keyid:1C:12:EE:F1:42:90:4C:C6:27:DE:F8:69:7F:08:09:F9:20:F8:7C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6c4064-8503-4d16-9354-74d4e5b01c35/1/HBLu8UKQTMYn3vhpfwgJ-SD4fK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7e:92:3c:88:7a:65:ea:b6:25:8d:38:b6:b1:b9:90:a4:0e:
01:72:88:7b:43:5a:66:f6:01:80:de:86:85:ef:22:7d:26:a5:
a2:aa:b6:16:97:04:05:b9:41:b6:8f:86:74:23:95:3d:49:c4:
a7:13:2f:61:30:ab:f0:78:b4:84:61:08:bb:ef:30:51:6f:a9:
52:dc:b2:0f:0c:ba:c0:35:22:42:ae:e6:82:17:ab:5d:4c:42:
dd:7f:15:89:87:d1:43:47:72:87:7f:31:3b:f6:46:36:bd:55:
0a:5a:9a:c9:fb:90:31:88:5d:d7:02:e2:29:61:db:28:98:bb:
21:4f:4c:ca:1a:96:76:68:fd:cf:80:c4:ba:29:49:5a:5b:0e:
10:94:1e:42:2e:7c:06:39:1f:22:3a:65:0d:1e:1f:60:ed:bd:
b4:1c:0c:07:43:42:f0:21:31:ea:d1:59:1d:de:81:20:da:0d:
18:9b:a5:15:ab:37:7e:b4:2c:4a:b1:d8:cc:b1:4e:d8:7f:fc:
ed:3b:e5:d0:71:ff:58:0d:87:c4:f7:3a:6e:77:61:64:f0:43:
21:31:1f:9b:ab:75:51:b7:a1:cf:84:f1:1c:d7:50:74:77:b2:
72:1f:49:b4:f4:70:85:30:c6:55:de:8f:68:66:ac:e1:0d:f5:
15:3f:a8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:32 2026 by rpki-client