Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
File: HnsuJD-KqVRZeTK83NmvZWDc5RY.mft (raw, json)
Hash identifier: cCEN8zQIQcQfl50f2R2CeG5LGV9lBWZB16XHtqxuss8=
Subject key identifier: 5C:17:4C:3F:ED:9F:67:45:F3:4D:4B:B6:9A:0E:C7:2A:74:AC:4C:F3
Authority key identifier: 1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
Certificate issuer: /CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Certificate serial: 019FA1F2AF2653FE48324DA19F90CE710962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
Manifest number: 0E93
Signing time: Mon 27 Jul 2026 05:01:04 +0000
Manifest this update: Mon 27 Jul 2026 05:01:04 +0000
Manifest next update: Tue 28 Jul 2026 05:01:04 +0000
Files and hashes: 1: 1-z-hX5qlCf8aH8nr2X0zpJdE1hg.roa (hash: 9rLZMVrt7BCmTVumDwvgzgKKJKdaVIZCBXEilPyFZ4c=)
2: HnsuJD-KqVRZeTK83NmvZWDc5RY.crl (hash: 8peHbo9A+27hzJIhg9cJ3UBF6IKN4ABFdDicyeylUKc=)
3: XI8CVY8sYwhzkz3YLD7pkxjD3Zk.roa (hash: 25+wg4lixvrKpaIcYJueXb9oNmVKiR9L4SbDtXfdAjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:af:26:53:fe:48:32:4d:a1:9f:90:ce:71:09:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7b2e243f8aa954597932bcdcd9af6560dce516
Validity
Not Before: Jul 27 05:01:04 2026 GMT
Not After : Jul 28 05:01:04 2026 GMT
Subject: CN=5c174c3fed9f6745f34d4bb69a0ec72a74ac4cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:30:f9:97:c9:49:69:8d:37:95:3c:68:c5:
14:a1:49:2b:73:fe:13:96:5d:a6:f7:e5:65:ed:ec:
26:aa:96:0c:ac:73:8d:a2:b0:50:a8:12:ba:ef:5f:
fc:7f:65:29:7b:91:92:12:c9:ad:f8:75:a1:b4:5b:
07:34:5d:09:ee:1d:11:e5:19:54:da:80:0a:8f:59:
9c:31:40:4d:00:a7:da:3e:0e:e2:6e:df:ca:af:21:
5a:47:42:67:09:9a:08:e1:6c:a2:cd:a1:d2:5b:c5:
73:ac:7a:69:40:73:83:e2:77:9e:ea:4b:c6:a7:20:
73:cf:6f:a9:0f:66:63:48:58:4d:d8:20:f0:8b:e8:
db:7c:7e:55:c9:39:58:fa:05:cf:38:01:70:04:04:
03:ef:82:99:b3:de:1a:50:73:68:ab:b2:c6:f3:4f:
84:a9:c7:05:f3:51:7b:7c:f1:a3:8d:ca:cf:c4:35:
b7:2b:04:d2:04:b9:6c:07:b0:20:dc:de:25:bb:93:
5e:ef:f3:df:b5:ff:bb:e9:94:3f:76:44:ca:6d:11:
09:d4:5a:44:12:71:12:f1:51:37:5f:9d:48:80:ed:
97:4d:11:f0:62:f2:d7:0c:e8:f5:51:cd:08:1b:b5:
0d:b9:1f:59:03:0a:bf:e7:ac:5a:78:d7:16:7d:76:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:17:4C:3F:ED:9F:67:45:F3:4D:4B:B6:9A:0E:C7:2A:74:AC:4C:F3
X509v3 Authority Key Identifier:
keyid:1E:7B:2E:24:3F:8A:A9:54:59:79:32:BC:DC:D9:AF:65:60:DC:E5:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnsuJD-KqVRZeTK83NmvZWDc5RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4daee0-84e2-41e9-9643-d54955643cd9/1/HnsuJD-KqVRZeTK83NmvZWDc5RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:95:78:fc:18:38:e6:4e:dd:b6:88:03:11:9c:d9:e3:66:3f:
f9:db:d0:f4:af:c9:1b:ad:49:70:6e:b7:ed:49:e1:a9:f3:ce:
b9:16:b4:13:61:8d:15:22:74:50:eb:06:e5:44:0e:d7:5d:54:
35:56:fc:15:c5:cd:fb:c4:39:78:f6:1d:9a:28:a5:1e:43:bd:
db:58:93:c4:22:05:39:08:dd:24:31:12:a5:9e:4b:3e:16:c0:
47:11:f7:e8:ee:3b:58:50:9b:84:3b:7d:fb:8c:a5:2e:1f:60:
db:20:b1:62:ad:fb:b4:86:89:f1:70:81:e5:35:5f:04:16:87:
c4:2c:20:c8:2b:cc:20:16:16:bd:58:a9:cd:70:16:6e:f6:51:
3b:8c:af:11:c5:f7:1c:44:97:89:55:2a:14:da:3f:a9:22:d1:
44:2d:a3:b3:a4:9c:14:03:4d:87:79:97:e7:59:da:bb:80:c7:
5d:e9:2d:2e:4a:de:27:04:2e:9f:86:3e:d6:2e:1e:aa:c6:95:
1b:45:ec:57:56:5f:61:25:7f:97:35:cb:5d:ac:b8:b1:4c:bc:
69:87:04:69:69:24:be:96:28:26:cc:d1:8f:89:73:4c:5a:8c:
83:c8:29:ef:7f:6c:58:ec:c4:66:fc:c9:1b:da:23:71:2b:37:
b2:b1:40:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8q8mU/5IMk2hn5DOcQliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlN2IyZTI0M2Y4YWE5NTQ1OTc5MzJiY2RjZDlhZjY1NjBk
Y2U1MTYwHhcNMjYwNzI3MDUwMTA0WhcNMjYwNzI4MDUwMTA0WjAzMTEwLwYDVQQD
Eyg1YzE3NGMzZmVkOWY2NzQ1ZjM0ZDRiYjY5YTBlYzcyYTc0YWM0Y2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogsw+ZfJSWmNN5U8aMUUoUkrc/4T
ll2m9+Vl7ewmqpYMrHONorBQqBK671/8f2Upe5GSEsmt+HWhtFsHNF0J7h0R5RlU
2oAKj1mcMUBNAKfaPg7ibt/KryFaR0JnCZoI4WyizaHSW8VzrHppQHOD4nee6kvG
pyBzz2+pD2ZjSFhN2CDwi+jbfH5VyTlY+gXPOAFwBAQD74KZs94aUHNoq7LG80+E
qccF81F7fPGjjcrPxDW3KwTSBLlsB7Ag3N4lu5Ne7/Pftf+76ZQ/dkTKbREJ1FpE
EnES8VE3X51IgO2XTRHwYvLXDOj1Uc0IG7UNuR9ZAwq/56xaeNcWfXaQiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwXTD/tn2dF801LtpoOxyp0rEzzMB8GA1UdIwQY
MBaAFB57LiQ/iqlUWXkyvNzZr2Vg3OUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMt
ZDU0OTU1NjQzY2Q5LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80ZGFlZTAtODRlMi00MWU5LTk2NDMtZDU0OTU1NjQzY2Q5
LzEvSG5zdUpELUtxVlJaZVRLODNObXZaV0RjNVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZV4/Bg4
5k7dtogDEZzZ42Y/+dvQ9K/JG61JcG637UnhqfPOuRa0E2GNFSJ0UOsG5UQO111U
NVb8FcXN+8Q5ePYdmiilHkO921iTxCIFOQjdJDESpZ5LPhbARxH36O47WFCbhDt9
+4ylLh9g2yCxYq37tIaJ8XCB5TVfBBaHxCwgyCvMIBYWvVipzXAWbvZRO4yvEcX3
HESXiVUqFNo/qSLRRC2js6ScFANNh3mX51nau4DHXektLkreJwQun4Y+1i4eqsaV
G0XsV1ZfYSV/lzXLXay4sUy8aYcEaWkkvpYoJszRj4lzTFqMg8gp739sWOzEZvzJ
G9ojcSs3srFASw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:50:21 2026 by rpki-client