Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: 5nyNsexb+Zw4Qu2KeSbUuIC+Ksanb9sbySQW3eA9PXU=
Subject key identifier: E2:54:70:2D:75:A5:2C:04:33:3E:E3:FE:A5:36:55:65:31:B2:6A:45
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 019F84FB1C8097CF6E4B561107D4F623D5F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 16AD
Signing time: Tue 21 Jul 2026 14:01:16 +0000
Manifest this update: Tue 21 Jul 2026 14:01:16 +0000
Manifest next update: Wed 22 Jul 2026 14:01:16 +0000
Files and hashes: 1: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: 2ivSgolfMp8lz678QXfW4KYA/3k1nqcJ9j8PWoBBrbQ=)
2: WAiJPERlMEAh5qrgyMMcndKbs6c.roa (hash: zfIldmOVBvuxzGlnGLqlwDlsMvOVa6R4F1tNInZRtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fb:1c:80:97:cf:6e:4b:56:11:07:d4:f6:23:d5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Jul 21 14:01:16 2026 GMT
Not After : Jul 22 14:01:16 2026 GMT
Subject: CN=e254702d75a52c04333ee3fea536556531b26a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:43:ec:b1:48:ff:0a:e0:7f:fa:99:d6:75:
ed:82:5d:5e:88:d7:2d:2b:d1:78:15:fc:7e:8d:30:
ec:1a:23:08:f3:83:7f:1b:28:e8:d8:1b:8d:53:a1:
71:45:ff:c4:40:a4:4e:29:0d:a6:a6:1d:99:42:d2:
46:ad:f7:5b:7c:9e:5a:51:1f:58:ab:99:19:2e:cc:
6a:f4:3c:2d:92:7c:06:75:0a:1d:07:cf:1e:64:6e:
03:25:84:69:ab:8e:6c:25:ae:cf:c1:47:32:0f:8f:
af:36:84:50:59:24:02:71:ce:0a:c6:8a:90:7f:4f:
be:47:25:cc:06:2c:5a:4e:dd:76:52:a1:e2:8c:37:
1b:60:3a:33:3e:59:d3:7b:f7:f3:23:42:86:6b:38:
84:53:ed:b4:05:23:16:1a:f7:38:3c:bb:e3:31:2a:
bd:45:79:d6:2f:e5:fe:71:d2:91:51:f6:ec:51:ce:
15:36:38:8b:76:a7:0f:e4:b5:97:f2:4f:a8:39:1f:
0d:58:04:4b:df:0b:02:e1:29:ce:0b:f8:e2:64:fe:
d6:ad:8b:92:36:15:24:05:1f:be:6c:18:06:f0:05:
16:8c:60:0d:40:43:31:24:7d:a8:b7:e1:70:7a:43:
1d:18:64:67:bf:b6:e6:04:0c:16:f1:b6:fa:71:0c:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:54:70:2D:75:A5:2C:04:33:3E:E3:FE:A5:36:55:65:31:B2:6A:45
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cd:67:5b:bf:86:de:0e:a7:d4:1c:20:ad:ec:26:57:92:48:
95:d4:07:0e:dd:01:92:79:82:5a:f5:5a:d0:e5:22:36:ee:42:
6f:2b:61:f5:eb:86:22:bd:a0:75:db:8b:52:95:e5:9a:44:98:
83:4a:ca:c5:33:b6:b1:e5:6f:f2:f8:ec:50:03:9e:c2:ad:26:
59:31:f1:c9:c5:0a:16:d2:cd:55:38:50:4d:e4:a2:14:b7:7e:
08:1c:02:45:4e:0f:2f:38:39:c4:5a:b4:10:c9:1b:2a:1a:3b:
fe:cb:cc:5c:34:a7:5b:ee:e0:64:4c:19:41:62:36:84:4e:cd:
5b:26:47:b7:79:6d:a9:d1:9f:44:b2:d3:1c:3b:87:19:77:28:
de:e9:3b:da:ed:1a:d5:e5:04:d9:38:fd:6d:a7:7b:ee:45:28:
1e:b2:a9:49:b9:b5:66:0c:04:fb:ec:27:2f:71:9e:01:50:a3:
a5:b5:7e:dc:f4:98:43:56:ad:60:4d:b8:05:84:3d:94:0e:c3:
4c:8f:4b:7b:5a:39:75:90:14:a9:8c:37:5f:1a:dc:e3:11:7d:
41:2a:f3:58:73:e3:67:00:3e:a7:ed:14:5d:09:e0:15:0b:ca:
14:b0:65:3e:ea:cb:5d:9a:26:52:8d:7c:10:98:5a:3e:04:0e:
93:d5:51:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:28:35 2026 by rpki-client