Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: aasuTSYojA4bhmlxdfcc+09ANu76n06SFmm9gO6ZLpw=
Subject key identifier: E6:51:2C:3C:CC:87:FB:BE:06:9B:CE:88:D2:64:3E:D5:62:D8:B3:27
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019F96255CBC3D8F6BE86651F00D42EB701D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 12D6
Signing time: Fri 24 Jul 2026 22:00:58 +0000
Manifest this update: Fri 24 Jul 2026 22:00:58 +0000
Manifest next update: Sat 25 Jul 2026 22:00:58 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: MXS7bhGeKW/gn8O9H+Uj/MDfNI6XCCjAwyWRZZ9I/GY=)
2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:5c:bc:3d:8f:6b:e8:66:51:f0:0d:42:eb:70:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Jul 24 22:00:58 2026 GMT
Not After : Jul 25 22:00:58 2026 GMT
Subject: CN=e6512c3ccc87fbbe069bce88d2643ed562d8b327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c1:6f:1a:85:65:86:61:e1:d9:6d:9d:76:86:
e7:6f:73:b5:94:cc:bc:92:6a:36:48:05:51:56:b9:
03:d6:66:d9:07:f5:9b:bf:ac:56:3e:d2:d1:2a:77:
3d:78:9f:7f:6c:87:ca:44:1d:35:a3:5d:b6:9c:f6:
df:ed:63:6c:e0:b0:6a:87:33:e6:84:d3:06:c9:98:
b5:5e:ff:e4:51:16:0a:d3:45:d6:cc:c8:6b:c3:60:
8e:10:83:1a:4d:67:82:f1:33:ea:5d:81:93:52:56:
3e:7d:4a:ac:f4:b4:ce:1b:46:d6:32:65:1b:07:83:
7a:78:76:19:6c:02:bf:d3:2d:af:69:60:11:4f:16:
1a:f3:03:7e:a5:c2:ee:04:5d:47:14:d5:fd:a5:f3:
01:1e:52:f4:8d:65:7d:77:f8:3e:88:de:81:4a:3d:
0d:be:fe:5d:e1:7c:06:32:dd:c9:35:22:ac:72:d0:
e9:81:46:5b:af:7e:ec:a9:2b:9b:41:be:d1:c8:96:
6b:7c:b0:1c:29:6a:36:2b:42:1c:8d:f3:e2:fb:b3:
96:5b:9d:69:ea:ae:55:46:3b:f4:27:8a:c8:4e:5a:
6f:ef:c9:f9:37:92:58:c5:19:24:02:8b:35:e1:74:
97:89:69:20:bd:ac:a1:80:28:2e:37:50:76:18:c9:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:51:2C:3C:CC:87:FB:BE:06:9B:CE:88:D2:64:3E:D5:62:D8:B3:27
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7c:2c:13:33:44:ee:f5:37:7a:e1:4e:c6:2e:cb:bb:a2:95:
55:0b:17:c2:bc:39:2e:a2:63:ee:86:07:04:c4:07:bf:d8:bd:
29:a0:43:a9:2c:7a:b5:d8:d1:13:64:bd:33:de:ad:fc:a9:a9:
4a:d5:07:8c:c9:96:19:1f:69:4e:9a:6e:4b:27:2e:b2:3d:e7:
c9:d4:cb:ea:05:5d:84:6d:01:b7:ee:e4:96:24:de:d4:d8:41:
55:2c:5d:03:2d:95:b0:68:56:99:0d:41:65:9d:ff:3d:36:ac:
06:e7:b0:0e:12:cc:70:07:fa:e6:4c:52:06:f2:cb:82:f6:15:
98:d4:07:9d:8b:e6:d2:9d:fa:c7:a7:e8:65:57:fb:66:c8:b3:
1e:6c:89:cb:5c:64:19:fe:3e:3b:18:72:c8:e5:4d:ea:34:e7:
08:46:2e:fd:f4:05:e5:39:a8:ba:bb:fa:a6:64:a6:cf:c2:6d:
f6:40:17:42:46:d4:ae:e3:7f:88:11:8a:39:1d:73:be:bd:bc:
bb:fd:55:c8:12:1c:44:79:dd:00:8d:90:9a:d4:94:35:88:fe:
a0:fe:ed:b4:9d:c6:a0:f7:96:9c:35:93:42:02:a9:23:13:de:
04:67:52:b4:59:6a:77:22:59:d0:78:e3:df:71:ba:4d:fa:99:
e6:ff:a1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:26 2026 by rpki-client