Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
File: Hqemr7IbsUh0L2FV0aOa_I_H55w.mft (raw, json)
Hash identifier: Ne1GHLOXPZi3d89NXuHrc6AmH/PNePysc1wHjnvjbWs=
Subject key identifier: C4:2F:58:62:40:EE:08:C8:36:EB:98:1D:8A:82:F5:35:61:17:54:60
Authority key identifier: 1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
Certificate issuer: /CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Certificate serial: 019EB87C5A3B0FBABC077E1871C7A734C331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
Manifest number: 129A
Signing time: Thu 11 Jun 2026 21:00:17 +0000
Manifest this update: Thu 11 Jun 2026 21:00:17 +0000
Manifest next update: Fri 12 Jun 2026 21:00:17 +0000
Files and hashes: 1: Hqemr7IbsUh0L2FV0aOa_I_H55w.crl (hash: lVdb38sC8z0Jc/mhvpzRVbxtf65Ls+QNHW5v4dm3+MA=)
2: fSE8Q3BHF-37hTlX0eyFzGv4iBc.roa (hash: pVD8HGH2rJXCl52itQj8YwGZtz7maygncTTWGAdWmOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:5a:3b:0f:ba:bc:07:7e:18:71:c7:a7:34:c3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea7a6afb21bb148742f6155d1a39afc8fc7e79c
Validity
Not Before: Jun 11 21:00:17 2026 GMT
Not After : Jun 12 21:00:17 2026 GMT
Subject: CN=c42f586240ee08c836eb981d8a82f53561175460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:d8:9e:da:24:7c:d8:06:04:03:d9:cf:4c:
a5:74:2c:65:15:e2:18:fd:3c:b2:11:68:d4:91:14:
ba:c2:74:b7:e1:2a:66:37:75:4f:bb:98:18:cb:91:
a4:cf:bc:4b:4c:24:ec:3c:70:1d:c9:4e:87:a1:48:
bf:20:31:b1:d7:58:1d:24:e4:d6:c9:0b:a3:92:a7:
6b:af:f3:60:20:19:68:1e:a8:92:65:2b:a6:ef:0d:
01:c0:37:c7:a8:0d:4a:c6:0b:6d:82:47:06:d9:e9:
49:ea:ea:78:14:c0:53:4c:27:7b:f5:16:23:a2:21:
2f:a8:ba:a9:a3:5d:5b:8b:12:6c:37:13:5e:41:7e:
d0:13:fc:cf:78:48:b4:59:7f:2e:14:d8:6b:29:95:
d7:69:b5:6d:cb:3a:ef:da:37:d3:53:b5:36:c2:43:
90:58:2f:f3:ad:18:98:a4:f5:d5:76:94:aa:85:d1:
04:29:1d:50:d3:63:64:b5:47:4b:3b:fd:6f:a4:31:
55:64:63:c2:04:ad:86:77:43:33:86:34:2f:d2:d8:
84:bc:8a:72:fd:1d:ec:02:5d:6a:7f:49:bf:38:82:
88:f4:f9:34:a9:c2:00:fb:e7:80:32:61:b0:26:7c:
b2:89:86:88:80:b5:5d:6d:a2:00:31:b2:ba:ef:d2:
f5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2F:58:62:40:EE:08:C8:36:EB:98:1D:8A:82:F5:35:61:17:54:60
X509v3 Authority Key Identifier:
keyid:1E:A7:A6:AF:B2:1B:B1:48:74:2F:61:55:D1:A3:9A:FC:8F:C7:E7:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hqemr7IbsUh0L2FV0aOa_I_H55w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/886163-65b3-4599-bf4b-f36cd8790b0a/1/Hqemr7IbsUh0L2FV0aOa_I_H55w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7b:3c:b1:06:a5:dc:6d:85:65:77:21:92:43:20:8c:17:30:
73:a5:98:da:5b:85:70:cd:ef:06:bd:a7:2e:9e:41:dc:ff:e7:
32:c9:3b:c3:25:2d:72:7e:c4:cb:08:00:e2:db:9b:9c:9a:77:
8d:a2:8d:b8:f9:33:9d:bb:f0:cf:40:63:41:cb:6d:a8:f2:e7:
1b:d3:60:60:f0:75:24:ab:9e:8c:04:b8:8a:49:28:a9:26:85:
e7:7f:d3:78:be:17:75:6c:83:5e:ab:ad:90:0a:4c:cb:e8:3e:
b3:6f:fc:80:5b:7e:29:fc:be:77:e8:75:88:d6:fd:14:e4:e3:
c9:c3:5e:45:e9:30:11:da:ea:1b:32:ed:92:aa:72:4c:d7:63:
42:19:e3:75:c6:af:fd:4a:b6:d9:fb:5d:bb:2a:ae:b8:9e:6e:
b3:9b:8d:5b:ef:97:b8:15:11:c0:e6:f1:02:ad:9e:32:8f:10:
b1:4f:c1:34:69:a0:16:50:ab:58:ba:d6:8c:2e:99:72:dc:49:
80:f3:52:4a:4c:35:b7:27:93:85:e2:68:e9:98:f0:08:b1:03:
c4:2b:18:f5:8c:25:7c:db:78:d6:08:b7:8d:69:7e:6d:8d:42:
bd:3a:06:11:b3:cd:c1:39:59:8b:8e:b8:4c:f5:76:fc:b4:19:
e3:12:e5:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fFo7D7q8B34YccenNMMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYTdhNmFmYjIxYmIxNDg3NDJmNjE1NWQxYTM5YWZjOGZj
N2U3OWMwHhcNMjYwNjExMjEwMDE3WhcNMjYwNjEyMjEwMDE3WjAzMTEwLwYDVQQD
EyhjNDJmNTg2MjQwZWUwOGM4MzZlYjk4MWQ4YTgyZjUzNTYxMTc1NDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIDYntokfNgGBAPZz0yldCxlFeIY
/TyyEWjUkRS6wnS34SpmN3VPu5gYy5Gkz7xLTCTsPHAdyU6HoUi/IDGx11gdJOTW
yQujkqdrr/NgIBloHqiSZSum7w0BwDfHqA1KxgttgkcG2elJ6up4FMBTTCd79RYj
oiEvqLqpo11bixJsNxNeQX7QE/zPeEi0WX8uFNhrKZXXabVtyzrv2jfTU7U2wkOQ
WC/zrRiYpPXVdpSqhdEEKR1Q02NktUdLO/1vpDFVZGPCBK2Gd0MzhjQv0tiEvIpy
/R3sAl1qf0m/OIKI9Pk0qcIA++eAMmGwJnyyiYaIgLVdbaIAMbK679L1AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQvWGJA7gjINuuYHYqC9TVhF1RgMB8GA1UdIwQY
MBaAFB6npq+yG7FIdC9hVdGjmvyPx+ecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGIt
ZjM2Y2Q4NzkwYjBhLzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84ODYxNjMtNjViMy00NTk5LWJmNGItZjM2Y2Q4NzkwYjBh
LzEvSHFlbXI3SWJzVWgwTDJGVjBhT2FfSV9INTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQns8sQal
3G2FZXchkkMgjBcwc6WY2luFcM3vBr2nLp5B3P/nMsk7wyUtcn7EywgA4tubnJp3
jaKNuPkznbvwz0BjQcttqPLnG9NgYPB1JKuejAS4ikkoqSaF53/TeL4XdWyDXqut
kApMy+g+s2/8gFt+Kfy+d+h1iNb9FOTjycNeRekwEdrqGzLtkqpyTNdjQhnjdcav
/Uq22ftduyquuJ5us5uNW++XuBURwObxAq2eMo8QsU/BNGmgFlCrWLrWjC6ZctxJ
gPNSSkw1tyeTheJo6ZjwCLEDxCsY9YwlfNt41gi3jWl+bY1CvToGEbPNwTlZi464
TPV2/LQZ4xLlAg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:06:19 2026 by rpki-client