Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: 3e/CqmFuoYL6PlAENP0Y+opUZXOYvdPmIkyDe7Zz0Fw=
Subject key identifier: 6B:BE:D1:9E:16:9B:24:46:27:56:CA:D7:34:F9:CE:06:BB:89:34:00
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 019D3865B555E049B60F7C68675EBA88FC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 1842
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: KtXAzcQhN+kwmqp+QRUr5JHzVJ5QjPj/Ma0T8dUP5aA=)
2: Y0yvGwL8N-nOEiU7zOM6SSHHJLQ.roa (hash: 8/QpRSCZ4OTmfd3cZORygSL1Lec3LinxRtnyUo2sHK8=)
3: j4FzHGNM-x8JCvJ06e6JApa0Mj4.roa (hash: F+UQE401zF1jsBTDqKt2hLCSf3ZWTZdmAcKzmrDSjF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b5:55:e0:49:b6:0f:7c:68:67:5e:ba:88:fc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=6bbed19e169b24462756cad734f9ce06bb893400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:dc:26:c9:70:95:7b:9a:ed:26:e9:f7:2a:
2f:ef:13:77:b4:b8:1f:7b:f5:cc:aa:0f:28:87:e5:
98:75:19:dc:b2:b8:e6:64:ba:11:fa:b5:f0:71:02:
78:1a:79:e9:c0:7d:6b:d8:56:39:4d:3e:64:db:74:
4d:ed:35:52:00:2e:22:ef:98:59:fb:38:74:41:d8:
3b:e0:49:17:b7:8f:89:7b:7d:df:7c:4b:e9:44:d5:
c4:fd:aa:e0:7b:16:5d:5d:cc:48:a1:51:60:7f:43:
6f:7b:a3:f0:f6:77:fe:e9:af:dd:86:e5:0a:f0:74:
ba:14:79:25:f0:81:6b:65:70:0e:51:17:ea:1f:58:
e6:48:4f:5f:2e:d8:e8:3e:74:21:5e:65:31:37:4d:
56:80:2e:c9:db:46:7c:d9:a1:f1:f8:45:c3:6c:9f:
06:de:ba:18:41:6c:1e:35:a2:3d:8d:d3:1f:a1:02:
ed:9c:20:d5:01:c7:77:1d:eb:7c:0c:2a:60:8e:16:
d3:c2:dd:16:32:d1:ca:12:62:c1:bc:5a:3e:60:56:
4d:69:eb:51:2e:ba:b4:2a:33:06:a2:7c:5b:9f:9e:
58:16:3f:f4:37:65:d9:ca:0b:a4:7c:47:a0:07:65:
a6:57:ed:e4:4e:7f:62:27:a1:28:15:20:32:fd:2e:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BE:D1:9E:16:9B:24:46:27:56:CA:D7:34:F9:CE:06:BB:89:34:00
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e6:54:16:d7:4a:8e:6a:1a:79:a9:17:ad:a6:21:41:8e:9f:
65:bf:2a:59:36:b8:dd:15:b7:8a:20:56:bd:b5:d3:72:af:ee:
54:d6:a6:8c:ba:f2:78:5d:a0:0e:c9:8a:24:46:a4:b6:40:c9:
20:42:23:c3:54:22:21:0c:5f:e0:8e:ae:50:76:9b:b6:48:86:
47:43:ce:f2:5c:c2:a2:14:67:c0:ff:d5:62:99:78:a9:5f:4c:
26:b7:45:0a:e1:d7:4c:65:3e:d9:e9:63:7d:7a:e6:93:ef:23:
87:41:01:26:83:02:27:d8:1d:cb:13:ba:fb:87:93:67:5a:7a:
8c:42:97:28:ef:ee:0b:90:ac:f8:13:2b:ff:4b:bf:36:26:49:
e7:84:d2:4c:37:7b:13:fc:29:6e:ad:98:6f:07:67:2d:27:2f:
47:be:b5:49:3c:1d:56:5a:3a:11:94:88:5b:9c:a7:f8:a4:55:
da:fe:15:6a:ce:e2:2a:62:98:f0:b9:1a:57:59:f7:3a:a9:94:
ea:fc:d3:8d:10:fc:70:6a:b5:d3:9b:27:1b:b3:e3:ab:a4:ad:
bc:67:fd:24:47:94:9f:d2:f5:54:e8:e6:bd:7e:53:fb:62:9f:
51:3e:11:07:b0:5c:b3:9f:08:f4:1d:06:47:cc:c5:7f:e9:7d:
4c:8e:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:36 2026 by rpki-client