Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: v5dLmL+hGmCq1sHvwjbMWYh4XfTIWVovNUfa5xI9gPg=
Subject key identifier: 3E:E9:78:20:F3:FC:29:38:D9:2D:32:3E:DD:CE:4D:9D:7C:1A:4E:B7
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019F9624D19A34F463FBEA734D4F8E3E5205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 0989
Signing time: Fri 24 Jul 2026 22:00:23 +0000
Manifest this update: Fri 24 Jul 2026 22:00:23 +0000
Manifest next update: Sat 25 Jul 2026 22:00:23 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: 6yuIl7rz6kWRZV/gABG4Ei64JNyLokWXhOQXXB7uMS0=)
2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:d1:9a:34:f4:63:fb:ea:73:4d:4f:8e:3e:52:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Jul 24 22:00:23 2026 GMT
Not After : Jul 25 22:00:23 2026 GMT
Subject: CN=3ee97820f3fc2938d92d323eddce4d9d7c1a4eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:34:a9:02:74:68:11:3c:b9:b3:52:71:38:
8b:c7:84:91:70:ed:f5:a8:27:8a:29:7c:14:51:54:
1a:f7:10:b1:92:24:3a:4d:01:9e:01:8c:61:88:7b:
44:9b:23:4f:f7:5c:27:68:36:97:14:7b:9f:fc:98:
05:4c:5e:db:f8:3f:14:96:7d:59:20:00:09:80:97:
d5:7c:7a:c5:7a:da:8b:ac:00:e1:c6:6a:d3:0d:92:
94:03:59:c3:e0:49:0b:27:dd:61:d9:a6:4f:89:e1:
c5:b7:62:88:53:64:ca:2b:72:19:3f:cf:b8:ce:66:
c1:53:88:9b:ec:84:fe:c6:73:be:f9:45:25:fb:32:
40:59:0f:cd:af:9a:8c:f2:a5:b4:75:28:91:8d:24:
4b:94:93:b6:84:7d:ed:46:c5:b9:30:2c:cf:c9:fb:
26:5c:14:d8:1d:36:a5:70:63:f9:83:36:44:4e:b9:
0e:83:fa:55:cc:2b:27:53:77:26:46:52:3e:93:74:
66:eb:1a:4a:be:d1:95:32:19:65:91:18:f7:3a:29:
ea:8d:a6:95:ef:ed:9c:2f:f3:2e:4d:89:61:fc:c2:
0b:aa:7e:68:c1:af:fe:01:dd:57:b2:34:57:a7:26:
ba:13:89:ce:58:7f:fe:23:41:4a:6d:6f:49:f2:5f:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:78:20:F3:FC:29:38:D9:2D:32:3E:DD:CE:4D:9D:7C:1A:4E:B7
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:fc:44:ae:a1:fc:87:83:0d:43:b9:31:0e:74:24:ae:ce:97:
e4:42:6a:ae:b8:c1:2c:8c:be:a4:38:18:70:71:db:d2:3b:39:
73:65:f3:08:49:e2:fb:de:56:65:c1:1c:6e:af:10:60:a4:9e:
14:0f:f3:62:9c:d5:a7:50:a5:92:d8:a0:50:b8:6a:61:b8:c6:
87:d3:7d:a7:3f:fe:8b:ed:01:ff:84:40:63:f5:d9:5b:33:df:
98:8e:a1:3c:df:ce:ad:95:93:fb:7d:6b:fb:c6:92:c5:dc:08:
63:0c:61:af:86:b9:ac:7a:fc:77:4b:64:9b:69:6c:0a:db:f2:
be:87:20:94:c9:b5:59:28:f9:13:c4:a9:b7:ce:b2:f4:ba:94:
93:c2:e5:8a:d6:12:61:bf:61:4c:86:10:9f:7e:a2:79:75:1f:
3c:fb:8f:b1:05:49:b9:24:2a:74:98:3e:af:73:53:1d:ec:0f:
d7:51:82:92:e7:60:f9:1a:8e:af:fc:5c:79:86:41:f7:48:ba:
77:a4:dd:42:29:1e:74:2b:5b:09:99:c0:76:dc:3e:69:a8:29:
d8:28:c7:a7:9d:d9:a8:68:a8:6a:11:e2:b4:32:04:7b:4b:b1:
8e:a3:df:06:27:81:29:03:58:31:1e:67:70:ee:7b:df:02:25:
53:1d:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:51:56 2026 by rpki-client