Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: +zUpjvEkhFz9NunP7UKPcmsFx2crY4ZWOwvjsUNbYtE=
Subject key identifier: 90:CA:D7:79:F7:63:62:76:B9:FA:F4:66:19:94:65:6A:BF:27:24:6E
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 019F946D536E860AD99BD5C4BFBF6871EE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 16B5
Signing time: Fri 24 Jul 2026 14:00:20 +0000
Manifest this update: Fri 24 Jul 2026 14:00:20 +0000
Manifest next update: Sat 25 Jul 2026 14:00:20 +0000
Files and hashes: 1: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: zLmlKu95N00kZkhNwe8hL48jDx1EF7RZSXuE0eSfkfY=)
2: WAiJPERlMEAh5qrgyMMcndKbs6c.roa (hash: zfIldmOVBvuxzGlnGLqlwDlsMvOVa6R4F1tNInZRtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:53:6e:86:0a:d9:9b:d5:c4:bf:bf:68:71:ee:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Jul 24 14:00:20 2026 GMT
Not After : Jul 25 14:00:20 2026 GMT
Subject: CN=90cad779f7636276b9faf4661994656abf27246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:a2:37:28:4f:36:58:1d:a8:68:c5:62:24:
c1:d7:ef:0f:75:29:63:51:bf:23:dd:a7:07:46:10:
f3:d2:8e:53:c8:5c:3a:0d:5f:5b:41:25:1e:5b:39:
51:6c:b9:cb:20:58:23:c2:0a:dd:71:a4:24:1b:6e:
f9:fb:b5:f7:4f:c2:83:4f:f0:27:ae:20:54:41:cd:
19:e3:b4:b0:e7:2d:e1:d7:d2:63:d3:b4:51:a5:2a:
f1:d6:08:22:90:f8:b5:28:06:7e:f5:c9:fd:b8:34:
d1:41:10:9d:db:48:68:dc:76:55:b0:e3:03:3b:3d:
62:cc:fe:28:f4:cb:af:ab:a4:fa:27:70:1f:8c:60:
29:36:90:8c:a1:cf:cc:c4:2b:58:ea:f6:a4:bf:98:
8f:ef:0f:50:07:9a:3c:b8:c5:2e:00:14:ce:92:f6:
5b:bb:a5:c1:a2:23:94:d2:50:c9:6d:3f:80:1f:6f:
9b:17:f6:74:cd:90:8a:c3:9a:ab:a1:6f:97:ab:00:
70:24:1b:af:cb:3b:81:b7:92:12:87:2c:cf:75:ce:
83:bb:db:ca:a9:26:be:27:74:07:6b:4f:dc:65:0d:
f6:dd:71:2d:63:77:ee:a3:8a:4d:01:50:bd:43:ab:
bb:3b:dc:ce:e7:64:04:80:12:e4:46:6e:73:6b:0c:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CA:D7:79:F7:63:62:76:B9:FA:F4:66:19:94:65:6A:BF:27:24:6E
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:da:86:f2:90:81:e3:b1:e9:31:3a:42:a7:8f:9b:8f:e4:f5:
d5:da:56:5c:66:f2:34:25:7e:56:70:69:4d:ed:26:08:cb:90:
54:15:cb:cd:5c:cf:86:84:ac:7c:62:78:4f:b0:ad:95:6e:26:
e1:e1:10:71:93:68:f0:97:54:12:bd:2c:f1:17:3e:37:4f:14:
63:c9:22:46:31:6f:6d:8f:09:ab:df:a8:e8:2e:48:3e:89:6c:
a6:eb:1b:53:1e:e3:e3:ae:c0:d5:0f:18:82:7e:21:4c:fd:a3:
19:fe:9f:12:40:fc:8d:86:ca:e0:57:5a:99:f2:59:cf:2b:eb:
fc:de:4a:10:ea:5b:13:bc:c8:dc:46:fb:9a:86:78:56:7d:56:
8a:31:77:91:0d:d9:82:40:6a:ee:2a:f8:f8:3a:72:9b:ef:2a:
51:ff:6b:0b:a0:e9:22:e1:db:fb:38:17:e4:0c:fb:a1:02:65:
93:98:08:b6:8a:c1:dc:4b:37:c5:fb:0c:07:f4:6f:f5:23:59:
54:60:5b:af:1e:3f:97:c5:16:bb:49:14:de:9e:6d:72:e5:ef:
8b:77:8c:86:f5:ac:d4:59:b7:75:88:c3:90:00:2d:53:12:3d:
9b:ed:a6:49:b4:28:0b:4d:e4:aa:75:1d:2f:d4:c5:50:0f:55:
3d:22:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:27:43 2026 by rpki-client