Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
File: HkXMabTR7hUbUCdEL7upRMJ035c.mft (raw, json)
Hash identifier: QeMhPZwkbAW4W8321sXtLS4PenYxIh8sD64XRnQNrJs=
Subject key identifier: 78:8E:ED:DE:70:64:60:92:0B:95:D2:41:44:F7:4C:C7:AD:17:90:49
Authority key identifier: 1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
Certificate issuer: /CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Certificate serial: 019F122E744392968357DE091BBFE79D3B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
Manifest number: 1900
Signing time: Mon 29 Jun 2026 07:01:02 +0000
Manifest this update: Mon 29 Jun 2026 07:01:02 +0000
Manifest next update: Tue 30 Jun 2026 07:01:02 +0000
Files and hashes: 1: HkXMabTR7hUbUCdEL7upRMJ035c.crl (hash: uHwA8LaQJmx7kwpMvpfpmH850OTOD2z/BQjlOfocNoI=)
2: aZ1Tmj5Fb0n-wAOpGfFgPSrHdBE.roa (hash: Gos9McZbPOXHaQCrEQsYEbpvs5QjrqdpWFlMgXSAVtE=)
3: cmpuXpIT4rvzqBUAC8x_2HfS7ko.asa (hash: oUrQJpTPJIb/YuIVBdY/6NRHdTxNTlQPuGs1oAK8Nmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:74:43:92:96:83:57:de:09:1b:bf:e7:9d:3b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e45cc69b4d1ee151b5027442fbba944c274df97
Validity
Not Before: Jun 29 07:01:02 2026 GMT
Not After : Jun 30 07:01:02 2026 GMT
Subject: CN=788eedde706460920b95d24144f74cc7ad179049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:f6:bc:55:1c:63:53:00:f5:f3:0e:38:6f:
a3:c9:83:1d:af:e0:bb:31:36:a6:17:ad:29:04:fa:
eb:74:8f:9e:dc:ca:14:31:4c:a6:da:8b:c9:53:7f:
5c:d4:69:f8:03:cb:69:dd:db:11:f8:06:9f:dc:0b:
02:48:8d:c2:c0:f9:93:0c:12:d5:5f:a8:a5:4e:37:
86:24:34:96:59:0f:b6:16:c7:11:2d:2e:cd:13:9b:
bc:7b:10:8a:01:8d:47:5a:06:99:9e:e6:e5:22:aa:
ed:5f:27:51:f4:d7:7a:9d:33:32:d3:a0:cc:bb:c3:
00:58:45:5c:33:b6:3c:61:ae:3a:a9:66:b6:20:93:
a5:b5:b7:77:61:de:36:da:40:f5:e7:d4:7e:b5:45:
ac:f5:91:12:2a:c2:fc:55:ae:0b:3f:f1:72:6d:19:
50:64:6c:47:a2:07:70:6f:59:f5:cf:bb:e1:28:07:
f2:23:0f:f8:ec:95:de:9f:4e:d4:dc:31:73:22:ab:
ab:08:47:ca:a2:ba:81:3a:24:b0:ab:09:ea:40:3f:
67:a6:a2:13:0a:0b:b1:b5:51:cb:1f:94:e4:34:2b:
8b:af:a8:79:26:5a:cf:b3:53:18:fd:53:7e:70:de:
4e:b8:19:c4:f9:6b:fb:35:27:f1:b0:f6:33:3e:f5:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8E:ED:DE:70:64:60:92:0B:95:D2:41:44:F7:4C:C7:AD:17:90:49
X509v3 Authority Key Identifier:
keyid:1E:45:CC:69:B4:D1:EE:15:1B:50:27:44:2F:BB:A9:44:C2:74:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkXMabTR7hUbUCdEL7upRMJ035c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d49528-2aa4-4a7d-9845-c2443aa547e2/1/HkXMabTR7hUbUCdEL7upRMJ035c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:68:65:cb:dc:f7:80:6b:5f:6e:f1:af:77:8c:bd:7e:b0:99:
ab:14:7b:dd:98:83:7f:3b:32:66:aa:51:32:a7:a9:34:f4:ed:
ad:ac:54:e1:e0:52:5d:54:8e:ca:37:62:6b:46:29:b9:d9:cf:
c6:7a:b5:fd:54:51:b1:73:fc:aa:8b:74:d3:22:3f:1c:62:e9:
e4:e5:fa:82:76:ca:86:ff:ca:c3:0a:be:26:01:db:3e:fe:ba:
c0:7a:c5:3c:32:39:fe:8e:79:d2:c9:d6:d8:18:51:fb:4a:1d:
2d:c7:2d:14:ee:4a:b5:c4:19:9a:aa:4f:61:83:38:51:26:99:
97:9a:6f:19:61:53:4c:6d:7b:6a:53:59:07:68:19:94:34:b5:
1d:dc:53:d2:a2:c2:63:2d:6d:02:2a:e6:04:59:6d:32:26:de:
63:f9:6b:c3:40:eb:82:69:4d:26:d1:05:9c:ed:2c:5f:39:9e:
d7:aa:2e:c1:7f:fb:ac:6c:0e:d0:0b:13:80:2b:c4:27:d5:00:
ab:86:62:9d:34:07:13:cd:83:59:a8:70:8e:90:cc:3d:86:d4:
3b:ce:4e:6c:a9:c7:47:4c:69:da:77:dd:46:e4:ab:50:73:22:
82:ff:22:54:02:ef:ce:8c:4c:88:d7:81:96:d7:aa:9a:b3:c0:
f7:dc:d7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:22 2026 by rpki-client