Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: K8L9n+LbqqNe/tRMzAu+KaRhwsDjyrQteTiffd8QT5A=
Subject key identifier: E5:99:20:97:EF:57:3F:2E:72:7E:13:E4:5E:38:A0:CB:EA:82:8F:78
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019F93C94A3F4B4C6B0C443873E0722AEA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 069C
Signing time: Fri 24 Jul 2026 11:01:10 +0000
Manifest this update: Fri 24 Jul 2026 11:01:10 +0000
Manifest next update: Sat 25 Jul 2026 11:01:10 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: QVmCcLrJcPP60ZYsv6Jpm1zeOm4ofx1bOuWuE0Z5bDI=)
2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=)
3: lYHYX5psOxKD68wkCQ91Mu2FzMM.roa (hash: sDNPjItrBcFZ5sKyPbAqc1GCxh1mlgDVqyaKhMPK/Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:4a:3f:4b:4c:6b:0c:44:38:73:e0:72:2a:ea:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Jul 24 11:01:10 2026 GMT
Not After : Jul 25 11:01:10 2026 GMT
Subject: CN=e5992097ef573f2e727e13e45e38a0cbea828f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:9e:ec:9a:c0:b2:c9:cd:c9:c9:73:7e:64:
6b:df:b0:60:a2:66:bb:02:46:3c:e1:dd:ca:a7:ae:
e3:6a:b3:d9:6b:a5:c4:a3:37:91:7e:54:06:7e:b5:
48:e5:6a:b8:af:5d:c9:48:c1:91:c0:c0:de:bf:76:
47:2f:32:40:62:33:14:c3:5d:78:c7:16:77:08:d8:
ed:ee:43:dd:01:5f:e0:ef:51:eb:d0:1d:7e:e9:72:
5a:cb:3b:d5:c6:a1:98:94:39:c5:15:60:03:1a:1b:
04:8a:47:c5:9f:7b:b7:35:1e:25:ee:3e:cf:c8:df:
f5:d2:61:e5:21:66:88:62:f0:6f:25:8e:bd:50:73:
bd:6b:dd:a8:92:2d:3b:e7:72:d3:9f:a9:67:e3:6e:
66:29:fa:71:69:6a:ce:73:4f:67:ef:cb:86:1a:3e:
dd:42:2c:01:79:ae:7d:97:6d:aa:5e:93:6c:27:26:
eb:19:3e:71:96:ee:e3:5f:bf:58:c6:4d:f3:28:46:
b5:33:e0:eb:26:c3:0b:03:2a:6f:e3:e7:83:b2:fe:
79:92:64:09:4f:1b:15:9b:e6:93:e3:8a:63:54:58:
6f:57:3e:ec:8c:66:07:9d:bf:16:4a:e9:b2:28:67:
0d:8b:47:65:dd:1c:a0:88:72:8b:3e:bd:70:1c:0f:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:99:20:97:EF:57:3F:2E:72:7E:13:E4:5E:38:A0:CB:EA:82:8F:78
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2c:12:e4:2e:d7:ed:9e:95:d8:83:a6:12:80:dd:00:e4:43:
ca:86:03:d4:6e:df:5b:60:89:ea:db:a9:dc:c3:42:00:81:16:
2c:f8:a0:fd:6a:07:e3:09:de:8f:88:eb:01:19:dd:65:2f:2a:
43:3b:07:e8:69:22:de:ca:3f:bd:a6:ec:14:20:9f:06:26:8f:
db:a3:55:c4:19:04:13:35:7d:b3:12:06:95:6d:9c:c0:8d:94:
5b:3c:c9:d2:45:16:2a:af:01:db:0c:47:dd:34:d8:09:87:a7:
03:36:e9:df:06:4a:69:e9:90:63:ab:cc:b3:ce:0a:59:14:a4:
98:dc:79:c2:ca:40:ea:72:80:8f:19:19:0b:bf:7b:61:e6:f6:
4c:e5:f4:12:6a:f2:01:09:34:89:0a:c3:83:b4:d2:08:7c:0f:
dc:70:3a:bd:91:a7:4c:61:af:ce:ef:fd:11:58:bd:a4:49:da:
a8:87:0b:12:8d:b0:d7:07:24:40:20:55:26:54:63:2e:da:d6:
73:07:8d:5a:fe:9a:17:1c:ff:03:5d:f9:cb:9c:d7:9c:a8:c6:
93:05:55:d9:f2:95:85:2f:51:ec:67:ce:e7:97:2e:5d:5c:93:
a4:9f:6a:c3:6e:b0:79:3f:80:77:2f:41:f8:d1:d7:5a:72:7a:
e5:43:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:35 2026 by rpki-client