Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: YIZww6exKWThjBMjs0C7ZKGcfIkf1tu1pZ2Ho5C/kdw=
Subject key identifier: E8:6D:49:CB:5E:66:04:53:8B:0F:79:FF:A6:6B:13:65:D0:69:C3:E8
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 019F8FB565A8D9543EC7E74CB731769457D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 1941
Signing time: Thu 23 Jul 2026 16:00:57 +0000
Manifest this update: Thu 23 Jul 2026 16:00:57 +0000
Manifest next update: Fri 24 Jul 2026 16:00:57 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: /diWzh4II4x0S8kemZ/sE9W/jI0NGWAopc/tydmEXC4=)
2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=)
3: cmpuXpIT4rvzqBUAC8x_2HfS7ko.asa (hash: oUrQJpTPJIb/YuIVBdY/6NRHdTxNTlQPuGs1oAK8Nmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:65:a8:d9:54:3e:c7:e7:4c:b7:31:76:94:57:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Jul 23 16:00:57 2026 GMT
Not After : Jul 24 16:00:57 2026 GMT
Subject: CN=e86d49cb5e6604538b0f79ffa66b1365d069c3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:62:78:11:18:f2:c3:d4:af:58:bf:4e:d8:
89:28:bc:0c:2a:08:2a:cf:e1:a2:e9:8b:42:1f:48:
c9:6c:27:92:d2:b5:9d:78:e1:67:b5:e1:10:cd:59:
af:1f:95:10:0c:26:d4:03:0a:7e:50:e3:8b:18:44:
dd:db:f4:2f:ad:0a:02:35:7c:01:4a:1f:aa:9e:fc:
92:66:da:b0:1c:8e:00:a3:08:f9:c2:66:6c:27:82:
93:50:b7:45:8b:1b:a0:b7:ab:f6:7a:6e:27:55:2f:
fb:82:1b:6a:4f:b5:34:61:56:83:ce:1f:eb:8b:c5:
20:e5:18:92:02:bc:8e:4a:48:b8:8e:aa:bb:a4:dc:
9f:bb:53:59:d9:28:8e:ce:55:f0:96:99:f8:1a:21:
49:2c:8e:26:ea:7e:a6:79:00:60:60:4f:80:43:aa:
78:a9:26:f5:9b:c3:28:3a:5a:43:47:d3:20:cc:12:
67:72:64:0d:3b:8f:48:26:f2:76:23:54:34:d8:b3:
13:9d:ba:dd:8c:71:c6:9e:f5:67:80:cb:96:d8:08:
cd:42:4a:ab:85:d2:b4:d8:3b:04:69:52:a9:a6:e2:
6a:99:c3:1f:07:d3:ac:2d:63:32:d7:dc:22:7c:7d:
45:2e:e2:e2:95:51:9b:a8:9d:cf:b9:97:7f:c5:cf:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:49:CB:5E:66:04:53:8B:0F:79:FF:A6:6B:13:65:D0:69:C3:E8
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f0:0d:70:bc:20:dd:5c:64:90:b9:da:61:c3:aa:15:0b:6f:
4a:4c:94:68:9e:0d:4d:58:85:ab:d0:f6:f5:aa:64:0b:25:f0:
6e:04:1c:5a:07:87:07:6c:da:82:2b:30:0b:b9:3a:71:fc:2e:
17:55:8e:44:1c:66:c7:82:ca:78:86:b4:9d:8b:6b:55:14:76:
9a:29:59:46:00:0e:95:3d:8f:64:3a:c2:df:ee:e3:dd:b8:2c:
60:f3:47:5f:6a:bb:2a:cc:2b:4a:81:5b:fd:46:c0:46:9b:3b:
92:62:78:84:c0:81:d2:ca:71:32:45:5b:e8:fb:78:7d:6c:b5:
a4:a1:48:1b:08:8f:21:b7:c4:ae:a7:ce:3b:50:34:c5:36:00:
0f:40:a0:a1:cc:91:c6:47:6e:a9:50:f8:f6:11:11:06:54:87:
9a:cd:bc:43:c6:6c:0e:48:36:bb:ba:e3:d3:e6:17:f5:e9:7d:
ec:be:ea:76:57:ad:29:1b:8a:8f:dd:4b:49:0f:17:32:a6:af:
be:1e:9a:fc:6e:94:0b:46:38:90:a7:4a:22:22:ef:e7:15:e9:
51:0c:22:44:12:bc:a5:89:43:60:e5:6d:d9:42:e5:e7:be:18:
99:c7:0a:8c:2f:3e:3d:56:4d:bc:07:c2:2b:b4:61:fe:74:7a:
9f:da:ab:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:47 2026 by rpki-client