Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: hLNhY96pmyh0Mmm+SixtENUlSwW6Fsi+ly74G7W2OGo=
Subject key identifier: 69:C1:78:05:7A:D6:3F:B2:27:70:15:52:CC:58:CE:85:73:99:69:33
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 019F946D639FD75275E41093D76188508A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 1071
Signing time: Fri 24 Jul 2026 14:00:24 +0000
Manifest this update: Fri 24 Jul 2026 14:00:24 +0000
Manifest next update: Sat 25 Jul 2026 14:00:24 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: YepTvRhDRsOCUemmW/A1kvqs7Wg+nRJPzPupMqkT7r8=)
2: LvE1FOOjXHAB_ZBIESGtUGStN-w.roa (hash: uFYfE2aGUIZRnV1OPNvCDoBelhKF2bgbMXml4HQyyPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:63:9f:d7:52:75:e4:10:93:d7:61:88:50:8a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Jul 24 14:00:24 2026 GMT
Not After : Jul 25 14:00:24 2026 GMT
Subject: CN=69c178057ad63fb227701552cc58ce8573996933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:af:33:0e:42:e8:ee:c0:e4:c7:35:f3:23:
5d:68:7f:2c:56:31:2b:15:62:94:b2:43:7e:cc:2a:
d5:73:ca:a6:fd:8e:6d:87:5a:c5:a6:fe:d4:2d:81:
8a:3e:63:5d:4f:59:c5:10:64:07:ba:96:cb:72:a7:
13:f4:66:2e:79:27:89:90:9f:1f:f8:cd:2e:cb:0e:
29:f8:42:ca:fb:4e:b5:b1:fa:63:c0:bb:58:b9:19:
ae:89:a5:f5:8d:1f:e5:69:39:37:01:97:15:5b:39:
43:82:0d:83:b0:e6:06:9c:a3:63:f1:d3:46:91:94:
5b:eb:3a:27:10:b9:e4:79:05:44:38:8d:33:09:93:
2d:d5:15:20:c7:1d:7a:dc:da:b7:c9:7e:60:25:51:
5e:b1:42:fe:a6:7f:7c:b3:6a:49:9e:f7:cc:63:a9:
f5:d7:e8:dc:23:b0:42:97:75:ae:41:b9:38:77:95:
bd:a3:61:e3:46:ba:b0:15:2a:2a:3f:2b:b3:0e:77:
35:82:7a:5f:39:ed:dc:d7:f7:5f:91:25:46:ea:fc:
59:e7:53:84:df:56:67:7b:aa:eb:a3:cc:e9:95:86:
e1:c3:52:90:f5:64:c0:f7:54:b2:f3:a2:17:65:d4:
35:92:22:5f:3b:05:71:2b:51:6b:e7:5f:2a:4b:b2:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C1:78:05:7A:D6:3F:B2:27:70:15:52:CC:58:CE:85:73:99:69:33
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8d:57:1e:37:20:ef:59:ad:24:1b:55:df:b5:91:c1:37:4a:
39:c5:5d:12:fd:5a:3b:fc:55:b2:1b:6b:c3:cd:41:4a:df:a6:
97:7f:aa:ad:f4:b4:c6:71:9e:f5:f5:aa:4f:c9:66:4b:b4:1a:
11:99:bd:20:c9:79:e3:78:1e:78:68:e2:6d:6c:81:8d:31:20:
dd:46:88:81:8c:f3:af:39:6c:10:9e:26:24:97:28:48:95:49:
1a:01:97:8a:a2:0b:e3:f1:36:d6:17:97:1d:73:85:b9:fb:74:
c1:3b:f2:e4:6c:2d:1d:78:e5:45:8f:9c:79:17:70:ba:34:07:
61:97:14:eb:b7:43:e0:82:1f:16:3c:4c:8a:1e:5e:b8:1e:d4:
8b:08:ee:eb:ec:72:dc:cd:f3:5a:b1:9a:11:55:33:5d:ab:ae:
b0:f2:5c:db:b8:09:b2:2c:0b:d6:44:be:60:25:85:be:4d:20:
98:d0:ca:76:b5:80:57:da:fd:0e:7f:cb:31:05:03:2b:5e:b9:
aa:20:71:c1:1f:a0:b0:cf:c2:b0:b9:6c:d4:c6:3f:b9:64:c5:
cc:47:ba:bf:cb:a1:0e:ad:43:2d:c2:b2:8f:49:db:7b:cd:eb:
59:e2:da:11:f4:71:12:34:28:a1:8f:4d:8e:28:3b:2a:ce:2b:
2d:1a:bd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:19 2026 by rpki-client