Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
File: HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft (raw, json)
Hash identifier: KbiNF5d+zM+ycEVlAcgvJ6vD5oR/B92jTejwOGxp++s=
Subject key identifier: 27:BE:3F:B4:24:AC:AF:89:C4:69:AC:14:BC:3D:4C:C2:FB:14:12:93
Authority key identifier: 1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
Certificate issuer: /CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Certificate serial: 019EB6C545760D519C6B0F7FFEAC0F6D11F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
Manifest number: 07E9
Signing time: Thu 11 Jun 2026 13:00:42 +0000
Manifest this update: Thu 11 Jun 2026 13:00:42 +0000
Manifest next update: Fri 12 Jun 2026 13:00:42 +0000
Files and hashes: 1: HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl (hash: zfX0vvXEJI+krT6wyvxTIWztsUAiyz71segU3gcxHps=)
2: m8GmWxaGzhbyfzeA3jXtYZtS49c.roa (hash: ufyYBYKdtvNPQKTZ7RHmH34YskTQ9OHfZWJp++dRaZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c5:45:76:0d:51:9c:6b:0f:7f:fe:ac:0f:6d:11:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccaab0b0defc93c32f80c44b082fb2905f23c62
Validity
Not Before: Jun 11 13:00:42 2026 GMT
Not After : Jun 12 13:00:42 2026 GMT
Subject: CN=27be3fb424acaf89c469ac14bc3d4cc2fb141293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5c:67:09:11:75:35:e4:72:2c:f7:73:5a:f6:
36:84:b1:47:87:c2:74:25:2b:34:cc:a4:32:0d:6f:
dd:e7:8f:67:d8:60:a2:c1:10:1b:09:74:40:99:56:
73:ff:cf:b6:cd:45:af:c0:94:fd:5b:05:f2:1b:46:
5d:6a:6b:2d:4e:60:7a:6b:b6:4a:42:46:e8:cd:92:
e1:3c:41:1e:85:87:70:b4:bc:87:4d:66:83:93:f6:
8f:7f:a6:98:79:1a:91:12:73:aa:b5:4b:6b:95:d5:
6c:e9:c5:83:d4:4e:07:06:2c:cb:03:9c:76:a7:3f:
42:c8:95:eb:48:44:22:4e:f5:39:78:b6:5d:b8:4e:
76:eb:f3:b7:66:3a:77:39:d7:7a:ef:cf:a4:9a:33:
ec:0c:32:e7:fe:a1:7c:45:4f:ad:30:c7:69:c0:81:
31:9b:7a:06:41:74:d5:56:f0:3b:c3:90:d9:58:aa:
14:18:1c:41:6b:a1:a4:f0:83:d9:38:58:cc:75:d7:
d8:71:16:12:4b:0b:3c:51:f4:bc:99:e5:4a:18:06:
0e:eb:5e:f0:ac:27:9f:2f:68:0d:0a:b8:56:c5:ec:
69:3e:7b:2f:05:2c:61:11:0d:00:67:ce:3e:44:97:
6b:cd:4b:fd:53:4f:52:21:ab:0d:d2:e1:0f:35:1f:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BE:3F:B4:24:AC:AF:89:C4:69:AC:14:BC:3D:4C:C2:FB:14:12:93
X509v3 Authority Key Identifier:
keyid:1C:CA:AB:0B:0D:EF:C9:3C:32:F8:0C:44:B0:82:FB:29:05:F2:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMqrCw3vyTwy-AxEsIL7KQXyPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/787aae-1131-4d9c-8594-6947f02ac6af/1/HMqrCw3vyTwy-AxEsIL7KQXyPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:fb:66:ac:e4:29:d3:5f:97:89:c0:93:e8:9d:57:92:76:
33:65:0b:1c:6e:dd:a6:8d:a2:c2:68:d7:11:1e:c1:f9:80:54:
41:df:45:d6:99:92:eb:42:27:24:94:df:4c:5e:93:6e:5d:8d:
6a:fc:56:a5:a3:16:8b:ab:2b:8b:6d:d4:13:6e:ab:48:a5:a8:
a6:be:fd:b1:a2:cc:83:ef:ab:39:2a:f5:af:52:ff:c9:dd:77:
2c:b3:74:37:39:c5:2c:b7:0e:c0:58:6a:2b:bc:6a:17:24:ac:
10:47:a7:24:28:32:ba:1f:03:b0:85:1b:68:d0:17:14:0b:77:
d6:77:85:80:ff:76:19:72:b4:66:7b:2e:ba:42:7d:47:36:e9:
b7:85:b9:4e:30:4f:e9:24:97:ed:25:ba:61:2e:4b:b7:7f:7a:
5a:19:e3:13:2c:4e:bb:d5:88:d0:c5:63:ed:88:a7:55:fe:3a:
d2:e6:1c:74:4c:9c:2c:bc:4c:b7:83:67:56:bc:3b:f5:49:db:
f2:60:00:1e:af:63:55:27:d9:c8:58:db:22:80:4a:e2:44:0a:
d7:11:0f:99:50:78:a7:ef:94:c8:b6:86:23:33:9b:87:16:df:
36:9e:03:50:45:09:6e:e4:79:54:24:b3:c3:90:6c:55:6e:99:
d1:22:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:31 2026 by rpki-client