Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: /oJIdXtkSmzbz6RFFSCYaliEJTM5XTc+tynhZvGKS5I=
Subject key identifier: 40:09:B3:6E:BE:A5:AA:0E:11:AC:D3:16:4D:A5:7C:95:A5:AA:18:4D
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 019EB9222846092E378203D5760D71999012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 1697
Signing time: Fri 12 Jun 2026 00:01:23 +0000
Manifest this update: Fri 12 Jun 2026 00:01:23 +0000
Manifest next update: Sat 13 Jun 2026 00:01:23 +0000
Files and hashes: 1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: MCowcgjvdjOthBjudArnanmRKry2aH4WbZuxGOSxGH4=)
4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:28:46:09:2e:37:82:03:d5:76:0d:71:99:90:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Jun 12 00:01:23 2026 GMT
Not After : Jun 13 00:01:23 2026 GMT
Subject: CN=4009b36ebea5aa0e11acd3164da57c95a5aa184d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:b4:61:05:ee:0d:1d:a9:72:37:e8:ca:02:
35:7d:23:a7:c6:f2:7a:c8:16:f8:48:55:92:62:c1:
29:f4:2a:bc:4e:40:75:d1:b8:5b:ab:a5:bc:be:66:
f6:08:cb:44:8b:4d:61:ce:11:0a:06:99:d1:8c:59:
56:60:16:21:9f:9b:83:68:9f:6e:7e:7e:ff:6f:67:
d4:b4:20:91:7f:82:c5:fa:4c:d6:6f:29:1c:1b:6c:
1d:81:86:04:59:fa:5d:bd:4d:40:e2:bd:4f:24:fb:
cb:4c:38:e4:a0:0a:1a:ee:12:0b:e1:bf:1a:d0:72:
80:20:4c:f3:23:40:20:ee:77:39:ec:c7:65:d4:be:
44:ea:1d:e6:6f:83:91:c0:d3:59:e1:e0:79:eb:62:
c4:52:a9:fb:12:3e:56:7a:58:3a:1c:7b:21:ae:1c:
07:0e:94:df:f5:c0:04:3f:b5:45:3c:6c:b1:fd:30:
1d:88:e3:01:e7:0f:18:8f:30:b5:19:09:28:d5:ee:
30:4a:b7:ca:ce:4b:5e:16:c4:72:37:2a:32:83:5a:
09:fa:4a:3f:cb:64:7b:1d:ef:1c:2d:eb:be:e6:7b:
80:26:0d:3d:bd:5e:ec:2f:1f:33:31:b6:64:58:a1:
79:e2:5a:6d:8f:ee:9f:a8:7a:31:0f:61:c1:5b:3b:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:09:B3:6E:BE:A5:AA:0E:11:AC:D3:16:4D:A5:7C:95:A5:AA:18:4D
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c9:65:b4:2b:b8:52:4f:6b:b7:58:9a:22:d4:ee:8e:cb:6d:
06:62:b2:51:74:4b:7c:d2:b3:19:0a:ed:e3:ce:97:74:be:49:
49:06:ce:c7:c1:b3:e3:7d:0a:7d:ba:ea:2f:9e:87:40:b5:84:
c7:f3:fe:05:64:42:b6:c1:d5:13:4c:b2:a2:b4:82:e2:b7:bf:
d8:46:56:24:7e:78:4b:bd:f2:9f:f5:7d:51:14:7b:df:52:b3:
39:70:e2:d9:33:29:07:e8:e1:d2:2f:dd:fb:43:13:90:44:8a:
93:4f:44:c3:03:6f:73:30:fb:da:f2:3d:fd:38:0f:a0:a8:01:
1d:2e:e5:3b:ff:3b:1f:24:75:cf:93:3b:7f:0b:76:84:c8:13:
12:1f:01:d7:62:2a:de:51:c1:85:25:6d:fa:cf:b9:95:90:ec:
19:48:11:9a:71:50:f2:2e:2e:7f:b0:91:d5:62:b7:b2:c2:f0:
8c:b3:a6:cd:03:19:05:aa:a1:1e:27:c7:b8:60:4b:f0:a7:78:
51:0d:5c:ac:48:10:15:1e:30:15:f7:55:d2:eb:e4:c9:cc:74:
4a:e9:95:93:dc:e9:6a:7f:da:a9:38:17:b6:5d:67:13:70:25:
55:63:a4:dc:8d:06:39:d4:10:63:6f:23:97:61:b1:54:13:23:
e3:be:95:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65IihGCS43ggPVdg1xmZASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZGI3NDdiMjg5NzE3YTA2ODRjZDZhYzgyMzA3YWE2N2Ji
MmQ3YmIwHhcNMjYwNjEyMDAwMTIzWhcNMjYwNjEzMDAwMTIzWjAzMTEwLwYDVQQD
Eyg0MDA5YjM2ZWJlYTVhYTBlMTFhY2QzMTY0ZGE1N2M5NWE1YWExODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd20YQXuDR2pcjfoygI1fSOnxvJ6
yBb4SFWSYsEp9Cq8TkB10bhbq6W8vmb2CMtEi01hzhEKBpnRjFlWYBYhn5uDaJ9u
fn7/b2fUtCCRf4LF+kzWbykcG2wdgYYEWfpdvU1A4r1PJPvLTDjkoAoa7hIL4b8a
0HKAIEzzI0Ag7nc57Mdl1L5E6h3mb4ORwNNZ4eB562LEUqn7Ej5Welg6HHshrhwH
DpTf9cAEP7VFPGyx/TAdiOMB5w8YjzC1GQko1e4wSrfKzkteFsRyNyoyg1oJ+ko/
y2R7He8cLeu+5nuAJg09vV7sLx8zMbZkWKF54lptj+6fqHoxD2HBWzvKbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAJs26+paoOEazTFk2lfJWlqhhNMB8GA1UdIwQY
MBaAFITbdHsolxegaEzWrIIweqZ7ste7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83MTQyYjEtNzA5MS00ZDNhLWJkNmQt
OWZlN2VlOWMwMzY4LzEvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi83MTQyYjEtNzA5MS00ZDNhLWJkNmQtOWZlN2VlOWMwMzY4
LzEvaE50MGV5aVhGNkJvVE5hc2dqQjZwbnV5MTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8lltCu4
Uk9rt1iaItTujsttBmKyUXRLfNKzGQrt486XdL5JSQbOx8Gz430KfbrqL56HQLWE
x/P+BWRCtsHVE0yyorSC4re/2EZWJH54S73yn/V9URR731KzOXDi2TMpB+jh0i/d
+0MTkESKk09EwwNvczD72vI9/TgPoKgBHS7lO/87HyR1z5M7fwt2hMgTEh8B12Iq
3lHBhSVt+s+5lZDsGUgRmnFQ8i4uf7CR1WK3ssLwjLOmzQMZBaqhHifHuGBL8Kd4
UQ1crEgQFR4wFfdV0uvkycx0SumVk9zpan/aqTgXtl1nE3AlVWOk3I0GOdQQY28j
l2GxVBMj476Vyg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:59:51 2026 by rpki-client