
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: 2oaonbw+L4+n8lsTg8sutuzzDw2MpxQwx2XWKvWEOUo=
Subject key identifier: EB:23:62:C4:08:5B:96:CD:17:DC:A4:D9:F8:C7:11:BE:36:98:07:4B
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 019EBAA2DD31A2BFFDDB4CC4D8F8B8E8469D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 167B
Signing time: Fri 12 Jun 2026 07:01:36 +0000
Manifest this update: Fri 12 Jun 2026 07:01:36 +0000
Manifest next update: Sat 13 Jun 2026 07:01:36 +0000
Files and hashes: 1: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: +JDwKu383+/Pr9BVWEPqkjDcd/ozn9gTZ6m3ty3JKEM=)
2: jYlsueQe6bTuxJo3Pao6U7_lbjM.roa (hash: xljjWi7Hj8DkN9QHcryj+ylFV/KQmtfdUgA8aZcK8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a2:dd:31:a2:bf:fd:db:4c:c4:d8:f8:b8:e8:46:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Jun 12 07:01:36 2026 GMT
Not After : Jun 13 07:01:36 2026 GMT
Subject: CN=eb2362c4085b96cd17dca4d9f8c711be3698074b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:d5:d6:a8:32:63:fe:1a:96:ed:1c:6e:cd:
bb:c1:6b:35:cf:7a:99:64:c1:6b:8e:c6:9c:92:07:
cf:04:96:0c:3b:27:90:2f:4d:90:20:af:aa:0c:44:
53:49:12:d9:31:a8:0a:f4:35:ae:af:da:bd:94:04:
94:7a:6d:22:e3:d6:48:54:d0:88:0e:ed:99:41:50:
4c:5b:8a:ea:99:83:6f:de:23:d5:51:12:dc:7b:dd:
8d:fd:f6:55:46:e1:a3:1b:50:ba:7b:38:aa:3c:79:
6c:a9:6c:bf:dc:07:41:e0:cb:a5:98:d9:8f:eb:ce:
f5:14:40:31:f3:1c:f9:da:1f:98:6d:bd:82:1a:cb:
92:d7:77:e4:d6:cb:71:c5:29:e0:c2:fc:28:26:59:
fd:f9:6c:a7:35:50:45:bb:08:a5:9c:40:c0:16:62:
26:e3:fd:38:1c:09:fb:a1:db:c2:c7:b8:8e:68:c8:
c8:11:84:46:df:51:9d:c5:77:6a:e8:43:2e:10:77:
70:9e:a9:57:86:7a:9a:09:b1:9f:29:f8:2d:e1:39:
bd:a9:65:eb:12:b1:b0:ea:6f:85:8d:94:86:65:c3:
1b:d7:42:06:ec:22:e6:b6:1c:a3:91:ca:66:93:df:
80:51:95:04:ec:ea:e3:65:4b:34:10:ed:09:3f:3a:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:23:62:C4:08:5B:96:CD:17:DC:A4:D9:F8:C7:11:BE:36:98:07:4B
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:09:9d:b0:26:65:d6:88:2a:6b:45:91:94:e1:68:c6:14:ed:
75:b5:60:49:87:5a:71:ab:b5:ca:9e:5a:46:d4:60:b2:d6:49:
42:da:4f:6a:ce:ef:6a:92:c3:f8:3b:d4:8f:df:4c:2c:ce:94:
16:35:fa:d0:a0:1b:1f:dd:d1:1b:7e:35:0c:75:28:aa:f6:ca:
16:81:08:97:5a:36:dd:12:68:01:c0:e9:97:55:b7:67:71:37:
82:cd:45:07:9b:a8:50:ed:b9:21:94:b0:ce:dd:60:30:e7:8f:
81:57:df:19:49:59:d4:12:fa:f7:f6:f8:ae:bd:60:f5:a9:d7:
3b:b9:f4:5b:1e:85:a3:53:69:ae:e4:e1:ef:1a:19:45:aa:c9:
0b:7d:4d:3e:4a:50:7f:36:0e:7d:88:b4:ae:0d:76:b7:cd:51:
d1:f5:1d:8d:f5:9f:9c:e2:ef:e6:b1:e6:e4:b3:15:00:ad:18:
9c:c1:1c:a5:45:69:2c:5a:2e:de:44:77:8b:f7:89:e0:54:94:
9e:89:89:ff:30:66:fd:10:f3:fc:c4:9a:57:3e:0c:a1:b1:f5:
ac:3d:49:76:7e:43:a7:50:ad:45:b0:f7:bb:58:f0:28:8b:37:
37:6c:61:e8:b4:f1:3d:6b:90:5a:23:da:6e:32:22:80:30:48:
42:6b:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:32:29 2026 by rpki-client