Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
File: hUwNsAZYRNlZTf6N2O_XftHkk_g.mft (raw, json)
Hash identifier: XxpZbXO+4+lLAHIWaO5uih7bJ4YpALi0uQiTpHXK+bQ=
Subject key identifier: 08:BF:A6:F2:42:C8:77:14:48:8E:BD:F6:5D:7B:BA:F5:F8:B0:C2:E9
Authority key identifier: 85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
Certificate issuer: /CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Certificate serial: 019E8D921F3CDEEAB2517DDCE9899AF853AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
Manifest number: 1942
Signing time: Wed 03 Jun 2026 13:00:24 +0000
Manifest this update: Wed 03 Jun 2026 13:00:24 +0000
Manifest next update: Thu 04 Jun 2026 13:00:24 +0000
Files and hashes: 1: DB-kubcDSriQvnabeDogJ7LkMfM.roa (hash: XGoLRb9s7HKmX6rpBYGsBJA5idHvV3yS22+b7xVn/rY=)
2: hUwNsAZYRNlZTf6N2O_XftHkk_g.crl (hash: d4IBUDST5jlOPmL97ydXc1fX1aOv+Efiec0H9D4lYmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:92:1f:3c:de:ea:b2:51:7d:dc:e9:89:9a:f8:53:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c0db0065844d9594dfe8dd8efd77ed1e493f8
Validity
Not Before: Jun 3 13:00:24 2026 GMT
Not After : Jun 4 13:00:24 2026 GMT
Subject: CN=08bfa6f242c87714488ebdf65d7bbaf5f8b0c2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:fb:8d:62:5a:aa:4f:1e:13:ba:d5:e0:f1:
58:17:35:fa:ec:b7:93:92:35:12:50:ed:bc:33:08:
2a:b3:19:b1:b1:a3:29:2d:5a:aa:20:1e:8a:bb:2d:
93:39:1e:d5:b9:39:7c:f5:fd:56:5a:9a:59:3e:0d:
28:11:26:a7:42:b9:7c:6b:3e:9e:c6:50:8e:d0:77:
d0:04:52:97:cd:da:1b:72:f1:35:f2:7b:0e:89:14:
5a:96:cd:8a:f7:de:36:22:5a:16:db:22:68:63:96:
a4:e1:53:ae:e2:0f:ae:fd:f3:49:83:78:ab:a9:db:
ec:d3:5a:4a:17:39:3f:8a:96:18:79:8a:1b:6f:a0:
16:b0:88:9e:a0:da:51:e4:fe:9a:f0:74:e5:02:ea:
42:ee:a8:1a:01:d4:c1:e2:06:c2:36:fa:bb:23:c1:
81:b1:14:47:eb:c9:17:69:98:ad:52:09:35:be:19:
25:23:68:d0:c7:bb:45:19:a7:93:59:3f:6e:02:b4:
32:0a:58:ec:3c:59:6e:88:c5:5b:c2:8b:b0:ed:16:
09:9d:6b:aa:3a:49:69:c2:3c:20:c1:89:72:bc:c5:
6c:a3:43:ca:da:68:40:45:6d:86:51:fe:3d:7e:b0:
78:98:c3:bb:65:07:23:23:91:cd:fb:9c:77:7a:93:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:A6:F2:42:C8:77:14:48:8E:BD:F6:5D:7B:BA:F5:F8:B0:C2:E9
X509v3 Authority Key Identifier:
keyid:85:4C:0D:B0:06:58:44:D9:59:4D:FE:8D:D8:EF:D7:7E:D1:E4:93:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwNsAZYRNlZTf6N2O_XftHkk_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ec67db-c7a1-48a6-ab94-60b93595bac9/1/hUwNsAZYRNlZTf6N2O_XftHkk_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:11:02:35:1e:d4:39:02:bf:57:1a:0a:19:0b:fa:d7:cd:5c:
82:a3:c0:9a:c4:30:58:4b:17:e8:cf:f2:bc:1e:1f:b0:a6:97:
59:ab:81:9f:21:bb:e0:52:73:03:d5:b4:0c:25:8b:c3:e1:2d:
da:64:78:44:97:31:32:f0:c4:a5:30:bb:cc:e4:50:af:0d:2b:
84:6b:6d:b1:d8:40:7f:99:cb:02:b1:3c:b8:a6:b8:c9:4d:74:
ae:25:c7:d3:dd:f4:d1:ed:8e:8f:23:ba:60:b0:e6:2c:77:86:
8a:d5:28:c5:41:39:24:42:38:9a:ff:17:3a:8a:10:90:fa:47:
a2:06:96:21:d8:6f:46:f4:8a:e0:ba:7c:d1:23:f9:94:40:c2:
c8:96:dc:49:9b:5c:db:c4:62:0a:e8:1c:b3:4a:bc:42:83:32:
c9:df:ec:2e:27:19:a2:33:37:d6:0a:ab:0c:3e:c2:5b:7a:19:
a3:cf:0a:71:cb:66:86:ca:b7:a8:a0:fa:60:58:b3:ec:22:f1:
ca:0d:6f:5d:24:66:1a:43:9b:35:bb:09:01:d2:a7:dd:32:bb:
06:85:b3:b0:a6:93:99:12:e0:a5:b7:98:79:a4:72:fe:ca:c1:
49:36:bc:27:62:42:d9:4b:01:2e:4b:7c:0c:37:3e:83:08:e8:
ae:0f:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:53:43 2026 by rpki-client