Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: cRptgNhN4cjdnuEDw51va1Jnhsa4ZwZYAfI4lXuVN4c=
Subject key identifier: A1:C6:ED:16:21:B4:4D:1C:7E:F7:92:A6:58:B6:8E:DF:76:F1:E9:C8
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019E1F7EC68E22B10D4E477B5E0FE8E9EFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 1214
Signing time: Wed 13 May 2026 04:01:02 +0000
Manifest this update: Wed 13 May 2026 04:01:02 +0000
Manifest next update: Thu 14 May 2026 04:01:02 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: lQuim3EsjO12bI4udWXWWHrD2qtljfLAMOexusEpA08=)
2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:c6:8e:22:b1:0d:4e:47:7b:5e:0f:e8:e9:ef:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: May 13 04:01:02 2026 GMT
Not After : May 14 04:01:02 2026 GMT
Subject: CN=a1c6ed1621b44d1c7ef792a658b68edf76f1e9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:05:e0:89:93:40:06:50:11:a8:b6:e6:e5:
54:62:9b:f1:3c:f9:05:6b:98:f2:b0:94:19:61:59:
46:0a:90:f3:cf:2b:55:ea:95:ce:db:cf:ba:34:38:
76:39:f9:a4:7f:63:29:50:18:25:ed:4d:63:0f:66:
e5:e5:5a:1e:76:2f:9e:76:27:1a:67:60:85:9d:63:
1e:4e:cc:7f:8e:55:5c:0a:ec:67:e5:86:20:dd:ca:
f1:51:87:1c:b4:57:07:24:96:6d:cc:c8:e3:32:3c:
7f:f0:d6:c0:fa:61:19:2e:71:97:43:32:29:69:c0:
21:9c:96:05:0b:61:ff:b0:5e:f7:41:66:f1:70:3c:
88:2d:8e:f2:80:99:25:c6:4a:f3:b9:52:f4:22:af:
d2:b4:98:a8:72:3a:be:34:3f:82:9c:3f:e5:fc:ad:
62:89:ab:3b:aa:88:dd:1c:2a:7a:c2:99:49:17:e0:
bc:21:93:4f:69:7b:98:dd:51:70:2c:2f:f2:ea:ac:
da:0e:54:dd:d3:81:f2:ca:67:f5:82:2f:05:05:6a:
bc:3c:34:af:c4:de:41:4d:61:c2:36:22:3a:1f:25:
aa:bc:8d:93:7e:16:0a:c9:35:aa:c9:13:59:52:47:
a1:db:3e:04:92:b1:df:50:b9:38:da:75:e2:6c:e6:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:ED:16:21:B4:4D:1C:7E:F7:92:A6:58:B6:8E:DF:76:F1:E9:C8
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7b:df:5c:cf:a9:3d:d2:21:fe:7e:80:80:a3:24:08:b9:db:
76:3a:55:df:50:48:ae:08:5e:8e:43:78:14:40:76:ce:2d:4a:
f8:5a:e5:df:b9:ef:22:ea:c6:5e:e9:62:51:35:ce:c6:ce:1f:
8c:1d:88:6a:d6:23:1b:58:9b:bd:fe:4c:8c:34:30:46:cd:ed:
6e:c0:c9:42:43:9b:60:9d:41:7c:af:3f:a7:91:db:95:a5:03:
08:6c:b7:6b:6f:7d:6f:8c:90:c5:de:fd:8e:c4:be:68:46:62:
82:b9:57:34:80:cc:c1:16:7d:83:4f:91:93:f4:21:6d:72:a5:
2b:27:20:45:63:e4:d2:26:5d:e9:68:ee:47:5b:99:1b:a5:b9:
7a:2f:04:e9:b6:44:cb:5a:5c:f0:7b:97:5b:0d:4d:15:35:4e:
93:dc:36:bc:2f:20:ca:2e:44:ea:71:56:4b:3e:24:83:02:d5:
44:3b:07:ca:c8:cb:7d:66:80:fd:7b:77:d2:4f:00:63:ad:5b:
d6:1a:d7:db:47:27:7c:ad:b3:41:0a:49:13:49:a9:84:0b:81:
26:63:fe:30:9b:d6:ff:9b:79:02:dc:46:a0:ae:bc:ce:da:76:
c4:ae:c1:33:6a:30:df:da:38:c6:a5:4b:39:16:4b:36:d8:a0:
27:58:57:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffsaOIrENTkd7Xg/o6e/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNzUxMDY3NzFjNDI5NWUzZDNlY2ZhMDRjYjk3ZjYzMTYy
M2U1YmYwHhcNMjYwNTEzMDQwMTAyWhcNMjYwNTE0MDQwMTAyWjAzMTEwLwYDVQQD
EyhhMWM2ZWQxNjIxYjQ0ZDFjN2VmNzkyYTY1OGI2OGVkZjc2ZjFlOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKQF4ImTQAZQEai25uVUYpvxPPkF
a5jysJQZYVlGCpDzzytV6pXO28+6NDh2Ofmkf2MpUBgl7U1jD2bl5Voedi+edica
Z2CFnWMeTsx/jlVcCuxn5YYg3crxUYcctFcHJJZtzMjjMjx/8NbA+mEZLnGXQzIp
acAhnJYFC2H/sF73QWbxcDyILY7ygJklxkrzuVL0Iq/StJiocjq+ND+CnD/l/K1i
ias7qojdHCp6wplJF+C8IZNPaXuY3VFwLC/y6qzaDlTd04Hyymf1gi8FBWq8PDSv
xN5BTWHCNiI6HyWqvI2TfhYKyTWqyRNZUkeh2z4EkrHfULk42nXibObJfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHG7RYhtE0cfveSpli2jt928enIMB8GA1UdIwQY
MBaAFB51EGdxxClePT7PoEy5f2MWI+W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTct
YTJmZGI5MzhjYTJkLzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGEwZjItYzgwNi00YjU1LWJiZTctYTJmZGI5MzhjYTJk
LzEvSG5VUVozSEVLVjQ5UHMtZ1RMbF9ZeFlqNWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3vfXM+p
PdIh/n6AgKMkCLnbdjpV31BIrghejkN4FEB2zi1K+Frl37nvIurGXuliUTXOxs4f
jB2IatYjG1ibvf5MjDQwRs3tbsDJQkObYJ1BfK8/p5HblaUDCGy3a299b4yQxd79
jsS+aEZigrlXNIDMwRZ9g0+Rk/QhbXKlKycgRWPk0iZd6WjuR1uZG6W5ei8E6bZE
y1pc8HuXWw1NFTVOk9w2vC8gyi5E6nFWSz4kgwLVRDsHysjLfWaA/Xt30k8AY61b
1hrX20cnfK2zQQpJE0mphAuBJmP+MJvW/5t5AtxGoK68ztp2xK7BM2ow39o4xqVL
ORZLNtigJ1hXwQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:25:32 2026 by rpki-client