
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
File: HGnHYzivyQhbj71mm4t0vXqS1DE.mft (raw, json)
Hash identifier: FwwAkz6ki1gyC6jWFAWpdCXvKo/7yz01gUtKmKsPM2I=
Subject key identifier: EE:0A:82:2D:1E:9A:94:9B:7D:2E:56:FB:56:16:C5:73:86:41:5D:2C
Authority key identifier: 1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
Certificate issuer: /CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Certificate serial: 019E91A6562284119967F55560FACFEC4E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
Manifest number: 162F
Signing time: Thu 04 Jun 2026 08:00:57 +0000
Manifest this update: Thu 04 Jun 2026 08:00:57 +0000
Manifest next update: Fri 05 Jun 2026 08:00:57 +0000
Files and hashes: 1: HGnHYzivyQhbj71mm4t0vXqS1DE.crl (hash: fc+O6SAXbcZEZWUf2OWjYci3ejd/oSeZgOSZURkk+bc=)
2: WAiJPERlMEAh5qrgyMMcndKbs6c.roa (hash: zfIldmOVBvuxzGlnGLqlwDlsMvOVa6R4F1tNInZRtk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:a6:56:22:84:11:99:67:f5:55:60:fa:cf:ec:4e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c69c76338afc9085b8fbd669b8b74bd7a92d431
Validity
Not Before: Jun 4 08:00:57 2026 GMT
Not After : Jun 5 08:00:57 2026 GMT
Subject: CN=ee0a822d1e9a949b7d2e56fb5616c57386415d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:f1:ed:89:94:e6:15:92:29:df:9f:b5:c0:
13:f3:24:be:06:ce:d3:c7:db:9f:97:4e:b5:61:b6:
d1:02:84:ee:c9:da:9f:a8:b1:44:75:74:88:f6:76:
9e:05:8b:8b:79:a4:f9:d4:6e:44:d0:2f:9d:fb:0e:
72:44:b7:fa:c0:3b:d6:4d:b7:0c:e7:4e:a3:1f:21:
36:13:7b:e6:f4:33:b0:83:7b:ea:ad:44:0d:a5:75:
75:ee:25:1f:49:24:b5:98:28:2c:6d:32:f8:51:82:
44:02:33:c9:e1:1d:4a:ea:dc:7f:cb:3b:09:55:24:
2a:84:0b:92:39:3c:86:f3:0f:09:9c:8b:14:cd:fa:
d5:12:eb:44:ac:ec:e8:de:16:48:c0:df:e7:7f:4b:
82:3f:6e:2f:74:e1:a4:3b:78:a9:29:48:97:e7:8c:
f7:7a:67:f7:16:dc:f5:15:30:4e:a8:6f:37:cf:1b:
21:62:51:96:62:a0:91:8a:04:4f:3a:45:be:01:51:
be:30:f8:e7:fb:58:a0:e2:95:61:f1:2a:54:bf:0e:
3c:c8:85:04:0d:c0:5d:3e:01:a4:c2:16:09:7b:ea:
09:98:5e:0d:22:71:82:16:61:30:47:e4:de:67:16:
08:9e:e7:21:4f:0f:67:e5:a7:84:2c:49:ee:53:1f:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0A:82:2D:1E:9A:94:9B:7D:2E:56:FB:56:16:C5:73:86:41:5D:2C
X509v3 Authority Key Identifier:
keyid:1C:69:C7:63:38:AF:C9:08:5B:8F:BD:66:9B:8B:74:BD:7A:92:D4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGnHYzivyQhbj71mm4t0vXqS1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/a2088b-a126-4ba6-871c-5759b427f4d1/1/HGnHYzivyQhbj71mm4t0vXqS1DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0c:9c:47:37:87:77:38:c8:70:9e:75:6a:27:ce:27:5b:b6:
bf:61:c4:81:d9:10:b5:24:9c:21:42:d3:85:7b:40:9f:7f:b9:
32:26:19:f4:c5:11:09:7a:dd:3c:b8:b9:a1:b9:0c:ab:5c:d9:
f4:4c:d3:d6:23:31:b6:a9:9f:96:21:d1:05:24:c5:0f:96:3c:
23:b4:8a:88:d0:07:6f:53:14:c1:c8:f6:77:f8:d5:13:45:7c:
c9:98:aa:f4:65:d0:96:58:0b:30:35:98:aa:60:6f:c7:10:8f:
64:f3:c4:53:68:37:01:4b:8d:d8:c4:4c:9e:f1:36:3d:98:49:
63:16:f6:16:47:6d:1a:5f:a3:21:69:52:3e:33:41:c8:b5:17:
83:d2:d7:49:9b:c4:61:96:31:50:8f:8c:9c:d4:a1:3e:15:eb:
6d:a2:9e:bd:29:4f:c0:b5:0a:a6:0c:8c:a6:c6:cf:a9:81:3d:
a2:f4:b8:10:c2:b2:84:22:56:6f:57:c5:02:b5:fa:51:b8:44:
03:67:1c:f6:4a:25:47:a2:b4:ac:a4:64:38:4e:fb:df:4b:8f:
91:e6:5d:83:99:db:65:ba:d4:ff:13:b6:0a:0d:f5:69:17:9a:
4f:ca:6c:f3:fd:39:0e:f2:82:b9:68:f3:e8:94:23:f9:1c:26:
e6:c7:d6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:32 2026 by rpki-client