Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
File: hGlcglEp42VKUIs7xSn-Ols4ObE.mft (raw, json)
Hash identifier: NMaQkOjhdmoFzrFmJ77cH3mJsyV10JKC9ahGlsx+dn4=
Subject key identifier: BA:A3:A6:1A:45:EC:C2:B0:9A:82:F1:73:A9:B4:0B:47:51:11:4B:26
Authority key identifier: 84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
Certificate issuer: /CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Certificate serial: 019EB5B2A7EF8B5997069D268CBBA641E496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
Manifest number: 14A6
Signing time: Thu 11 Jun 2026 08:00:44 +0000
Manifest this update: Thu 11 Jun 2026 08:00:44 +0000
Manifest next update: Fri 12 Jun 2026 08:00:44 +0000
Files and hashes: 1: WJgbjZB87tJLoahMumVDjucLblI.roa (hash: YviU04V4NEhTzYiRRcQuelFb9gp3nZ2OardyM6DZLlI=)
2: hGlcglEp42VKUIs7xSn-Ols4ObE.crl (hash: J+s2wCXcdWCsKSm+zOQmK012t4i+xD3NIGNmGydcv7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:b2:a7:ef:8b:59:97:06:9d:26:8c:bb:a6:41:e4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84695c825129e3654a508b3bc529fe3a5b3839b1
Validity
Not Before: Jun 11 08:00:44 2026 GMT
Not After : Jun 12 08:00:44 2026 GMT
Subject: CN=baa3a61a45ecc2b09a82f173a9b40b4751114b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:af:35:d0:27:6f:ce:5f:ce:d7:dd:c1:01:
36:5d:c7:48:9e:10:63:12:9f:be:d1:5d:83:7b:3b:
aa:81:51:3f:c6:34:98:be:65:52:68:4d:85:dd:aa:
6d:e8:e5:45:8a:22:68:b7:b0:e9:ca:09:9c:eb:9a:
7e:e5:19:ba:76:3f:de:35:1d:79:03:f8:1b:9b:1b:
57:6f:ec:21:9f:43:91:e9:fd:3e:e6:fc:9a:8f:eb:
a2:91:0d:8d:21:b1:5d:33:ae:aa:39:17:81:f1:e4:
bd:3e:30:5b:8f:8d:77:98:3b:97:9e:f4:59:33:0c:
99:f0:f9:ab:65:bb:23:00:ad:6f:f2:bf:a8:aa:1d:
f1:24:3e:5a:58:c0:69:c7:1b:28:59:11:94:97:2b:
29:60:0e:9c:0c:2f:f8:3b:70:84:89:58:82:76:fd:
ca:5e:fc:d3:fb:df:91:75:90:e3:43:14:4d:d3:dc:
9e:bc:bc:a4:66:f7:cb:10:6c:b8:bf:69:3c:0a:48:
65:55:00:fe:e7:2e:fe:87:9a:6f:66:fa:2a:15:ea:
73:ab:28:63:19:b5:02:1e:48:f8:fa:14:51:b3:41:
88:85:22:ba:8b:f5:ea:a7:28:00:cb:b6:5f:e2:25:
7e:52:11:1d:cc:ce:2d:8f:68:b7:d7:31:8b:e8:13:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:A6:1A:45:EC:C2:B0:9A:82:F1:73:A9:B4:0B:47:51:11:4B:26
X509v3 Authority Key Identifier:
keyid:84:69:5C:82:51:29:E3:65:4A:50:8B:3B:C5:29:FE:3A:5B:38:39:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGlcglEp42VKUIs7xSn-Ols4ObE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/a0e90f-2198-442e-95fc-b7f63423f192/1/hGlcglEp42VKUIs7xSn-Ols4ObE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:25:7d:8c:c9:45:35:19:d7:42:24:f9:ac:1e:3c:a5:c3:30:
98:eb:05:17:f9:57:e7:cd:3b:da:16:13:c3:c9:08:80:ae:ba:
1d:d3:3f:a9:6e:f3:78:fb:1c:ac:4a:a7:1c:a3:6b:e7:c7:f9:
c5:e6:88:bb:e8:74:8b:8d:87:74:75:a6:f3:90:6d:bc:8d:89:
1f:88:56:23:47:37:f2:ef:ec:6d:59:29:e7:8c:74:99:3a:bb:
2d:93:dd:37:21:4f:7e:23:2b:b5:da:87:b9:97:b0:11:99:d6:
c0:06:67:0f:17:bb:eb:af:f8:13:9b:a3:52:51:98:f1:7b:ed:
98:69:61:ee:8d:e2:8d:a5:58:8a:a7:a3:de:cf:d6:c5:19:da:
af:70:fd:92:8e:ed:25:e9:a4:24:5f:fb:55:b2:05:ba:9b:d3:
75:90:87:b1:1d:97:cd:da:d3:18:1c:d4:71:02:75:6a:10:a9:
2c:da:82:89:32:b0:d3:43:f0:95:4e:98:c5:0b:71:c6:58:48:
fc:4d:74:27:5a:c9:12:78:7b:4a:28:a7:43:08:3c:4f:04:95:
be:73:98:54:59:c8:cc:41:15:9b:92:8d:57:d5:af:0e:63:d4:
1a:62:75:ab:72:c7:04:b6:13:79:2f:26:ed:8f:5c:de:2c:62:
2e:97:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:48:32 2026 by rpki-client