Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File: 1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier: YX9gTPlNqdN8pcCa/K04Q0aTkBSHEc+qxwDSrdsBTI8=
Subject key identifier: 7B:3F:09:70:B3:90:2D:DA:4A:7C:DD:BF:C8:AA:D8:77:2B:D2:B4:F5
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer: /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial: 019F189E4668181C9678F5DB1F9EDA945DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number: 0AC4
Signing time: Tue 30 Jun 2026 13:00:53 +0000
Manifest this update: Tue 30 Jun 2026 13:00:53 +0000
Manifest next update: Wed 01 Jul 2026 13:00:53 +0000
Files and hashes: 1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: MAuCCD8bzdWX/OBpYMYZxvbUQ95en1hrnDhGoiXUKgk=)
2: 93kiNNYoQc853Cz6ue8qioc2i3U.asa (hash: WLUYaARSKUVqmQ7ak9029kT0kjkhtKg9e5NIskAm7E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:46:68:18:1c:96:78:f5:db:1f:9e:da:94:5d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Validity
Not Before: Jun 30 13:00:53 2026 GMT
Not After : Jul 1 13:00:53 2026 GMT
Subject: CN=7b3f0970b3902dda4a7cddbfc8aad8772bd2b4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:23:c8:c1:60:08:7c:e7:84:b0:75:1f:37:
b0:8f:a4:83:2b:7c:c8:5a:9d:87:2a:7d:42:3e:5d:
48:51:86:ed:f2:4e:99:93:45:82:9e:94:2a:e3:fb:
01:da:a1:47:4c:7e:95:68:b4:62:4a:93:65:16:46:
1b:0b:a9:d9:00:ab:da:01:3e:d8:09:34:f8:08:90:
ea:1a:e3:ec:ab:7b:dc:8e:bb:6d:d9:b1:10:f0:62:
8e:4f:22:13:f9:da:ec:d0:64:9e:4e:3a:88:14:6e:
52:d3:5f:f9:33:fa:d8:42:51:77:0c:0f:8d:db:b3:
18:d4:c1:9e:f4:f9:4e:25:a5:a5:66:4c:7e:61:b8:
e8:a3:b2:31:2f:27:3d:f1:81:1c:9d:40:9c:8e:bc:
ef:1c:47:b5:4f:b3:06:5d:54:24:32:34:5b:eb:52:
d2:f6:43:be:43:0b:41:9d:ea:cc:57:03:f4:9e:02:
2e:d7:45:73:e6:70:f4:93:ca:77:be:8e:86:db:06:
2c:07:46:5f:a7:71:09:ca:b9:22:13:e8:43:6a:0a:
e5:8c:d6:e7:98:d9:2e:db:7f:9f:16:06:1f:e5:4f:
66:ac:ec:64:f9:8f:5d:91:8f:8f:3d:ea:8c:ef:75:
2b:54:04:72:af:53:5d:6c:b9:a2:59:8f:e5:f3:34:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3F:09:70:B3:90:2D:DA:4A:7C:DD:BF:C8:AA:D8:77:2B:D2:B4:F5
X509v3 Authority Key Identifier:
keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:21:d8:56:8c:95:0d:cc:43:1d:cd:80:be:29:12:46:31:65:
e4:6a:83:7c:2a:f6:f0:8a:f3:70:35:6f:bd:57:43:ff:44:51:
44:27:8a:8f:4e:2c:1e:d8:bc:7a:e9:86:f2:28:71:7a:1a:b9:
3d:69:4d:7a:e5:67:b1:58:10:f4:1a:2e:c5:3c:70:e4:70:43:
68:60:48:cf:15:41:9c:8b:9e:1f:15:d6:16:d7:81:ef:ea:0e:
4d:40:16:22:4c:ce:86:cc:26:bb:c8:88:83:33:7a:07:1b:06:
5f:0d:cd:31:df:b5:ef:7d:7c:22:c2:48:e3:9b:f4:49:42:52:
3b:ae:f2:74:30:42:2a:ad:32:f9:37:1e:2e:ae:ca:7f:b8:14:
f6:8d:73:b5:2f:56:f9:ed:eb:4f:ad:74:35:e3:78:d8:71:a3:
03:0b:32:4d:56:41:ec:61:47:76:50:ff:4f:ff:3f:5c:ea:74:
4a:76:df:43:2f:49:22:37:3b:fe:e1:1c:df:4c:32:a4:e1:15:
74:fd:16:ab:e4:58:4a:26:9c:b5:06:3f:ac:6f:7e:88:7e:36:
25:8f:d9:f4:1b:e4:23:f1:b7:98:89:9a:10:4a:50:12:ce:43:
4f:51:64:11:b5:75:c6:de:4f:f8:a9:de:38:0f:64:0f:1c:4c:
54:29:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:23:39 2026 by rpki-client