Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
File: HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft (raw, json)
Hash identifier: wQVIp2+MzCtndb/Taso03GRPYJcT6k9SgR3mFqB041I=
Subject key identifier: D3:AE:3E:0D:AC:3E:DE:81:E1:86:33:1C:A0:FF:87:0D:9A:92:EF:0E
Authority key identifier: 1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
Certificate issuer: /CN=1cdc76327e92f25fc471b345a37d243cc8393500
Certificate serial: 019EB921417469E965EBB7BFFF36829B6487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
Manifest number: 15E3
Signing time: Fri 12 Jun 2026 00:00:24 +0000
Manifest this update: Fri 12 Jun 2026 00:00:24 +0000
Manifest next update: Sat 13 Jun 2026 00:00:24 +0000
Files and hashes: 1: HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl (hash: z5vz+nbGdSdpdLeHoijFGFxEF5E6q16nemNHMEXUZSg=)
2: HyHThTy2laixIbO3z9EDLHwDhKY.roa (hash: BkLA8iTJLAu2dB2Rqj77I2+ZU9LC5K+pf2Js5AaTYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:41:74:69:e9:65:eb:b7:bf:ff:36:82:9b:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cdc76327e92f25fc471b345a37d243cc8393500
Validity
Not Before: Jun 12 00:00:24 2026 GMT
Not After : Jun 13 00:00:24 2026 GMT
Subject: CN=d3ae3e0dac3ede81e186331ca0ff870d9a92ef0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:72:08:d4:d7:09:de:fa:a5:1f:b0:02:8f:
e5:1e:7c:b5:7e:b0:8e:22:66:b7:f5:5e:c5:7f:6b:
5d:3e:30:6b:57:c2:dc:e5:3b:9c:01:70:f4:11:a8:
ef:e6:ca:c5:93:3d:d5:a0:f2:61:74:8a:52:eb:40:
d4:7a:14:17:21:f5:23:2f:d2:56:00:71:77:26:b8:
33:7c:88:30:05:f7:22:0e:d2:fa:2f:da:de:7e:27:
7d:1e:e6:f8:ce:03:cf:a9:97:82:ba:6c:1a:df:c4:
2e:c0:b3:d2:23:bb:42:9e:a8:58:bb:1a:82:4b:f2:
ca:82:09:14:99:db:ad:0f:1f:1c:84:cb:56:7b:69:
7f:17:ae:9a:0c:02:42:98:e9:5a:48:63:0a:c6:9d:
68:af:03:6e:be:e6:91:8e:e2:dc:43:05:54:cd:de:
6a:58:c5:9d:9a:a7:a9:14:0a:74:37:11:91:83:63:
6d:7b:92:b5:fb:c9:89:e0:43:ac:39:ab:1b:13:73:
07:41:55:20:3d:68:82:38:96:fd:f2:1d:9c:8b:35:
46:e2:98:49:bf:83:ce:9f:64:8b:41:ee:85:40:44:
bd:4c:32:bc:30:e6:d2:ce:e0:67:7c:1b:25:f2:6a:
25:5d:b6:d3:43:bc:ab:a8:2f:57:80:aa:4d:2a:10:
19:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AE:3E:0D:AC:3E:DE:81:E1:86:33:1C:A0:FF:87:0D:9A:92:EF:0E
X509v3 Authority Key Identifier:
keyid:1C:DC:76:32:7E:92:F2:5F:C4:71:B3:45:A3:7D:24:3C:C8:39:35:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNx2Mn6S8l_EcbNFo30kPMg5NQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b78a1c-1300-4ef8-ae96-80736950aa94/1/HNx2Mn6S8l_EcbNFo30kPMg5NQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d4:ce:95:02:5e:0a:96:85:95:0a:4d:ba:8d:89:98:49:28:
f0:bb:ac:3c:78:37:67:04:84:da:2d:62:12:da:55:64:d4:b9:
9c:27:cb:12:1c:57:32:cb:f0:f7:90:c8:fa:25:47:69:62:f7:
cd:d5:eb:9b:b6:35:80:b9:7b:30:fd:2f:c4:15:64:31:8c:f5:
fc:bd:c5:31:e3:1b:81:a6:e4:8f:14:a4:8f:09:3d:61:9c:74:
c5:f2:50:73:63:fd:87:84:04:0e:5d:7f:59:3e:99:4d:0b:bc:
af:3b:c1:ed:12:05:6b:5c:c0:79:8c:f6:c5:28:83:d3:df:a1:
ad:70:7f:44:d8:8d:59:2b:1c:69:67:a5:ca:40:86:6b:0d:a8:
fa:50:db:b0:9d:0b:92:69:f9:c4:04:08:37:8f:ce:e1:5c:44:
91:aa:b2:70:cd:e1:23:38:d9:8a:ad:15:3d:ed:85:57:21:84:
97:cf:50:20:de:4a:04:bd:35:03:0d:eb:b7:d6:66:ee:60:48:
b6:e6:37:c8:3c:6b:c6:18:59:28:11:78:2a:c0:b5:47:a2:b7:
5c:ee:07:c7:8f:4c:b5:0f:ea:13:33:d5:6a:b4:53:4c:fc:93:
80:1b:f7:4b:6c:a2:08:a6:36:37:1b:43:47:f0:24:59:7b:15:
a9:ac:6a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:11:52 2026 by rpki-client