Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: e8+ELI7zDFjDVWxNPmjet3FVtjujIAGcJEq6u6QOW6I=
Subject key identifier: 4A:AD:D5:75:AA:EA:FF:60:A1:1E:DE:E5:6E:87:9C:21:3B:07:F2:A0
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 019F946DB6BEE66CD096FA8BD76E07AADB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 14:00:45 +0000
Manifest this update: Fri 24 Jul 2026 14:00:45 +0000
Manifest next update: Sat 25 Jul 2026 14:00:45 +0000
Files and hashes: 1: 2JoxROCbPOHF6KtlD6vldAqTqX8.roa (hash: MYXtE2R+wBxrZPPj12Dpe+/LA+TCHl7zhSDFEOIzwnQ=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: 6UC6zYsBKjcDM2h38VfsRUruZVp+UI2LCnfpWYwVP7U=)
3: hx_-Nlwhp-rhcQWTiZp-K3bvoic.roa (hash: +6qNvM+Po303423yisqL4uil5GDRIr4RzBGe2Izpxbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:b6:be:e6:6c:d0:96:fa:8b:d7:6e:07:aa:db:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Jul 24 14:00:45 2026 GMT
Not After : Jul 25 14:00:45 2026 GMT
Subject: CN=4aadd575aaeaff60a11edee56e879c213b07f2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:d8:1d:03:bf:e9:68:1c:20:4d:da:bd:cf:
72:42:33:d2:0b:f9:31:2f:be:2c:29:62:a4:d6:97:
3a:d1:d3:9b:c1:4f:1a:85:07:56:0b:7e:2d:45:c7:
5f:8f:c0:b7:b1:7e:b0:16:c0:32:b3:11:af:ba:05:
77:47:f3:af:d1:bf:8c:f0:2a:ed:98:fd:57:d3:c8:
da:dd:af:d4:54:e7:24:d8:ee:cb:87:3b:8a:d8:66:
5d:89:73:f7:3f:d4:87:62:8f:8e:bc:6c:80:46:54:
f9:eb:9c:77:27:39:b9:46:ca:ae:06:11:65:53:d4:
b0:f2:24:18:1c:f0:29:f5:92:23:42:fa:1b:8d:6d:
20:e7:92:ad:6e:d3:cd:be:a4:8c:32:be:d8:c3:ca:
ae:66:f9:3d:ef:8b:76:62:3b:48:57:a3:3c:ed:2d:
78:37:02:a3:e7:db:df:cb:a0:cf:a9:d7:44:73:a8:
79:6c:2a:46:ff:e5:30:52:d7:5e:7c:a1:b6:fb:7c:
e0:f2:1b:20:4f:f9:17:85:01:18:03:99:56:15:ad:
71:67:1d:85:2b:8d:e7:18:86:96:83:c0:5e:9f:fb:
0a:a8:dd:a7:1b:37:54:e7:79:37:27:37:74:0d:2a:
3e:2e:e8:e5:d8:de:07:26:cd:b0:f2:5b:71:19:43:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:D5:75:AA:EA:FF:60:A1:1E:DE:E5:6E:87:9C:21:3B:07:F2:A0
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e4:86:6a:96:1d:25:b6:f4:bf:dd:ec:dc:f4:2b:6a:d5:00:
11:b1:6a:de:64:0e:eb:58:d7:68:a0:ac:01:e7:f5:9d:89:37:
9b:43:e2:76:cc:93:b7:1e:38:1d:37:37:f2:b6:ac:f2:e9:38:
78:d5:42:d5:92:03:9a:9c:60:77:05:22:e5:25:19:e9:af:ff:
15:5a:8d:4a:80:dd:88:53:6f:4c:04:a0:ee:80:3f:d0:c1:ea:
45:66:3e:f2:3b:78:58:a5:ba:2c:df:96:1f:53:cd:34:13:cd:
ec:ee:2d:ce:6a:ce:e2:f2:31:66:6a:42:4f:1e:88:dc:c2:70:
be:a2:0e:60:eb:db:f4:e2:f5:25:d7:3e:c8:0b:28:a5:01:45:
12:f1:aa:dc:bf:19:7c:03:f8:98:4f:14:80:49:53:e2:2c:dd:
9b:ce:e3:35:91:d8:fd:74:bd:41:eb:fe:39:51:6b:3b:65:68:
a2:d5:90:c8:36:1e:92:4c:53:9d:03:72:0c:15:9d:ff:58:c3:
f6:f3:3d:45:b9:d1:d9:90:3d:d5:58:64:c9:f1:35:e1:dc:8d:
a3:92:4e:a8:b7:ab:01:a7:0a:42:42:56:cb:52:53:ef:65:f9:
c4:9d:46:61:ef:f4:92:da:65:58:5c:bc:bc:97:86:8a:60:93:
b2:cc:47:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:17:29 2026 by rpki-client