Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: Qoe71OQjVW5ePF30QsaGR9xxindWAq15xrk1l7O6Lss=
Subject key identifier: 60:06:CE:DE:61:D1:3A:BF:2F:F9:24:B4:61:DA:85:29:D4:D6:93:04
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 019EB80F352B2DB9AEAC0CB676D634D7FD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1870
Signing time: Thu 11 Jun 2026 19:01:04 +0000
Manifest this update: Thu 11 Jun 2026 19:01:04 +0000
Manifest next update: Fri 12 Jun 2026 19:01:04 +0000
Files and hashes: 1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: /1mzD1nR3Ea/IIVe6JpgfGgQdu8hwxZDCELUOLnYvps=)
2: LNkknaOANYr2AA8ZuXpEtPtOI2U.roa (hash: NdnyraokPSONSOY68l5BBrIXI7N+cymphtjpwfbN+j8=)
3: VMnWGp7firuAUsWhbCng8rrrFlw.roa (hash: Fy/4ogGN6QuHkOB3ALl0+4oSCn6tCK4BbOxmnXohTkE=)
4: Vav1Ve0V_wYLXop_F-tg15-s9Ck.roa (hash: 2kpbPB/kpBJfWefdjXYSzZRTk/oD3Mu5OJcsFnMDxdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:35:2b:2d:b9:ae:ac:0c:b6:76:d6:34:d7:fd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Jun 11 19:01:04 2026 GMT
Not After : Jun 12 19:01:04 2026 GMT
Subject: CN=6006cede61d13abf2ff924b461da8529d4d69304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:46:d1:ae:20:3e:04:7c:fc:0b:59:43:cf:
54:30:2d:54:12:b7:de:99:a4:30:d4:55:2e:ac:5e:
02:d6:e4:08:6a:b0:46:57:e7:32:6f:75:1f:23:c4:
cb:cd:71:8e:6e:70:41:ec:44:3a:b0:2f:3a:09:a4:
ed:ae:51:a7:69:5c:38:48:e1:56:16:2e:a4:1d:2d:
80:7e:8f:21:95:fa:28:d4:ef:73:6c:64:37:96:93:
5d:98:e3:cd:b1:0e:46:b7:7a:f4:06:da:53:57:5c:
89:4a:ba:29:59:f4:2a:2d:d2:37:3f:5e:22:5a:9e:
49:32:27:75:4d:a0:3d:a6:d7:9c:3d:6f:f6:b3:f3:
1f:46:e7:96:62:25:b2:d2:d9:89:f7:cc:e1:98:5e:
e0:2a:d1:e5:5c:02:1a:d5:3a:3e:af:cf:f7:ff:c8:
d3:72:9a:c8:09:45:a4:20:5e:19:71:65:46:4d:02:
d8:6b:d3:7f:56:5c:42:70:97:91:88:09:b1:1e:8a:
f4:76:f9:d3:a0:bf:2f:70:54:6b:e8:35:21:0b:f5:
09:75:0c:cf:b2:1d:93:ea:4f:ec:e4:7d:74:e0:26:
0e:de:3c:cc:86:6e:17:44:e7:7d:fe:ff:41:04:77:
88:27:27:16:09:2b:f0:c4:fd:f4:b5:20:fc:f2:2d:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:06:CE:DE:61:D1:3A:BF:2F:F9:24:B4:61:DA:85:29:D4:D6:93:04
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:23:bd:0e:cf:c6:00:1d:97:d9:d3:37:16:77:08:0f:f0:83:
ef:00:47:7e:d9:4c:3b:16:d3:99:bc:d5:c0:c9:1d:f2:7c:0d:
e7:56:02:c5:92:ee:d0:70:01:79:ac:c2:c5:bf:80:15:ca:f1:
7f:a3:cd:d2:d2:06:7e:15:be:bc:17:16:ee:7a:b1:20:aa:9e:
e3:fb:99:a1:b6:bd:89:fd:2a:e4:8c:34:4d:95:34:7f:5c:8c:
8d:1d:b4:c0:62:72:9d:46:97:a0:2d:87:8c:d4:03:3d:85:89:
06:61:29:29:80:33:20:84:1d:60:db:1a:0e:14:d6:5c:d0:91:
a8:aa:4e:af:35:e0:8f:f5:cd:4a:65:10:46:4e:4d:8c:1c:81:
9b:56:44:06:a1:1d:78:f0:f7:52:0f:8c:53:0f:14:af:8f:6f:
17:1b:11:fd:51:af:66:cb:d8:56:f7:1b:62:cf:36:bb:5f:b7:
f3:3c:19:ba:02:98:b7:a7:bd:d0:8f:fd:2e:1a:71:ad:61:71:
fb:a7:b4:ec:b0:72:0c:68:63:ac:6c:3d:f0:6c:4b:e1:6d:34:
03:2a:46:af:77:98:74:62:57:6a:0a:13:bd:c8:fd:ca:c5:2d:
80:7f:ea:5d:ef:39:32:55:86:36:3b:ca:39:fd:2f:3c:db:55:
a8:43:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:44:00 2026 by rpki-client