Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: mva1+nDZsiF56FZe20qzZ+A3KdabVGGNnayWZvoK+KU=
Subject key identifier: 11:79:09:65:8A:11:D3:09:9C:7D:87:76:B6:51:57:AE:D1:20:8F:34
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 019EB8B4B73B16B7813654A7B86E6D783126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 167A
Signing time: Thu 11 Jun 2026 22:01:51 +0000
Manifest this update: Thu 11 Jun 2026 22:01:51 +0000
Manifest next update: Fri 12 Jun 2026 22:01:51 +0000
Files and hashes: 1: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: TJ90l/+Rk6hptpPd5uo6uW1GuSmXe3Rf5mRh/naF2kE=)
2: jYlsueQe6bTuxJo3Pao6U7_lbjM.roa (hash: xljjWi7Hj8DkN9QHcryj+ylFV/KQmtfdUgA8aZcK8mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:b7:3b:16:b7:81:36:54:a7:b8:6e:6d:78:31:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Jun 11 22:01:51 2026 GMT
Not After : Jun 12 22:01:51 2026 GMT
Subject: CN=117909658a11d3099c7d8776b65157aed1208f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:35:63:79:3e:29:f3:9b:c1:e1:06:73:8b:
de:1c:19:52:ee:d1:2c:d7:c4:ff:dd:39:c4:cc:35:
d2:79:01:01:af:b6:7c:e7:29:a9:5b:77:1f:c7:0c:
7e:0a:c8:92:82:ac:69:39:0a:ec:00:e0:5d:f6:e9:
81:35:27:2a:41:50:72:ad:8e:26:7c:2b:24:43:79:
52:e5:f2:bf:48:70:ac:3f:33:f0:4a:67:84:aa:4c:
23:06:89:15:92:da:22:8a:f5:87:16:81:91:00:65:
d1:ef:af:83:18:5a:f0:22:5c:df:94:57:fa:0f:27:
c6:31:3a:1b:a5:29:05:7f:d5:fc:48:0f:a5:f0:6c:
e9:d3:42:41:75:c9:7f:23:b2:61:b3:1c:86:56:61:
b3:c3:d3:c5:43:9a:87:9c:03:cb:ad:ff:f8:3a:33:
f3:1f:36:f9:30:b5:54:d8:f5:66:8c:bf:e6:32:56:
c3:f8:b9:8c:4e:f5:08:40:14:0b:b8:ae:c1:22:b0:
6c:7f:db:0d:20:25:0a:7e:5b:b7:6c:c7:87:1e:6d:
86:0c:d1:f8:0d:de:6e:bc:e5:b3:b7:69:09:ca:40:
46:b3:df:af:d1:7a:28:fa:0f:72:e0:50:0c:92:16:
dd:89:f6:a6:74:d9:d9:84:e6:f9:1b:59:b3:f7:cb:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:79:09:65:8A:11:D3:09:9C:7D:87:76:B6:51:57:AE:D1:20:8F:34
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bc:1f:af:28:e1:8f:45:e4:02:33:6d:8e:41:b0:60:62:a8:
18:ac:ea:b3:ee:3d:69:2a:1d:5d:e4:41:64:d8:03:7d:f2:fd:
d8:61:9c:63:c7:18:c0:83:32:d6:97:ba:05:47:57:f0:a0:40:
9b:6e:06:ed:fb:14:5e:35:db:36:81:ce:cd:e3:89:d1:17:27:
4e:46:0c:25:a3:c2:a6:ab:d4:8f:68:8f:33:c6:c3:f3:50:e7:
d3:d9:2e:d0:f0:27:5c:ad:cd:4e:35:49:f7:7b:0c:ce:cd:67:
9f:63:9b:80:c9:f4:23:35:41:c2:c8:4e:1f:92:b6:b2:70:ea:
6c:5c:07:79:56:d3:63:71:ac:0a:e5:ef:d6:bc:65:a8:39:46:
e4:7f:76:2b:f8:34:12:ac:c6:08:ee:ef:f8:cd:f8:6c:02:a9:
bc:1f:f5:c9:ce:57:6d:4b:fa:d3:98:df:7a:13:22:45:9f:bf:
17:97:41:b5:20:49:fa:b5:dd:18:d7:c1:bf:16:58:3c:10:f8:
12:d5:ee:21:da:7e:df:63:54:cd:7d:ce:2a:f1:57:c4:d7:98:
bf:06:c9:d5:14:f2:b3:ec:a6:6a:14:1c:ae:9d:b3:4e:e2:90:
74:fb:c0:86:65:3b:f2:58:63:c6:05:5b:a3:6d:8a:a9:e0:67:
02:b9:90:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64tLc7FreBNlSnuG5teDEmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMGFjZWVhMTdmNTNkZTcwOGY5YTczYWJjMGM4NzE2NGQy
MDdkMDgwHhcNMjYwNjExMjIwMTUxWhcNMjYwNjEyMjIwMTUxWjAzMTEwLwYDVQQD
EygxMTc5MDk2NThhMTFkMzA5OWM3ZDg3NzZiNjUxNTdhZWQxMjA4ZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvs1Y3k+KfObweEGc4veHBlS7tEs
18T/3TnEzDXSeQEBr7Z85ympW3cfxwx+CsiSgqxpOQrsAOBd9umBNScqQVByrY4m
fCskQ3lS5fK/SHCsPzPwSmeEqkwjBokVktoiivWHFoGRAGXR76+DGFrwIlzflFf6
DyfGMTobpSkFf9X8SA+l8Gzp00JBdcl/I7JhsxyGVmGzw9PFQ5qHnAPLrf/4OjPz
Hzb5MLVU2PVmjL/mMlbD+LmMTvUIQBQLuK7BIrBsf9sNICUKflu3bMeHHm2GDNH4
Dd5uvOWzt2kJykBGs9+v0Xoo+g9y4FAMkhbdifamdNnZhOb5G1mz98s9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF5CWWKEdMJnH2HdrZRV67RII80MB8GA1UdIwQY
MBaAFB0KzuoX9T3nCPmnOrwMhxZNIH0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEt
YzZiY2NhNzIxNDcxLzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYTU2ZjYtMWNmMi00Mzg4LTk2ZmEtYzZiY2NhNzIxNDcx
LzEvSFFyTzZoZjFQZWNJLWFjNnZBeUhGazBnZlFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7wfryjh
j0XkAjNtjkGwYGKoGKzqs+49aSodXeRBZNgDffL92GGcY8cYwIMy1pe6BUdX8KBA
m24G7fsUXjXbNoHOzeOJ0RcnTkYMJaPCpqvUj2iPM8bD81Dn09ku0PAnXK3NTjVJ
93sMzs1nn2ObgMn0IzVBwshOH5K2snDqbFwHeVbTY3GsCuXv1rxlqDlG5H92K/g0
EqzGCO7v+M34bAKpvB/1yc5XbUv605jfehMiRZ+/F5dBtSBJ+rXdGNfBvxZYPBD4
EtXuIdp+32NUzX3OKvFXxNeYvwbJ1RTys+ymahQcrp2zTuKQdPvAhmU78lhjxgVb
o22KqeBnArmQDw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:30:16 2026 by rpki-client