Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: yLzrtIJ/5oNQwZxxb3Uv9bRrhAc2VEP5Gt9clNUAERE=
Subject key identifier: 97:1C:31:EE:EE:E6:72:44:03:56:7A:00:5D:9A:87:C7:49:3C:E4:59
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 019EB7D80A5285C09432305680CB45BD0306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 0ECD
Signing time: Thu 11 Jun 2026 18:00:49 +0000
Manifest this update: Thu 11 Jun 2026 18:00:49 +0000
Manifest next update: Fri 12 Jun 2026 18:00:49 +0000
Files and hashes: 1: ILRt9LkKcLV8zTDhe4daBlelpbE.roa (hash: NtW+TS7Xs6SFuc4EVBUAJ27kGuxkzyU+HkBhm6grJWo=)
2: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: n3H176TWn+MYDoWXzBFtUYsUKpYNsZAHam+jT7rjLVc=)
3: T5tca3eRSBXQYZ3SqJhOW7Yc8mQ.roa (hash: cOn2EnZ6WvGENwI0qXwoWVZXLsqu0B3PPBV5nncT3Hs=)
4: aMnzI3Vlx1VkjK-AhtMje8rEUrA.roa (hash: clrVl3R15Nf5RVyElPWOOa52ljSeBdDqyIlVAivM47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:0a:52:85:c0:94:32:30:56:80:cb:45:bd:03:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Jun 11 18:00:49 2026 GMT
Not After : Jun 12 18:00:49 2026 GMT
Subject: CN=971c31eeeee6724403567a005d9a87c7493ce459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:c9:12:5c:cb:db:3a:ad:a3:7a:f3:0a:d1:
a2:a4:4c:e4:0c:b6:9f:94:f0:77:8d:1d:6c:13:cf:
32:3d:f1:3f:a3:36:ae:c1:bd:32:8d:56:50:4e:ed:
8e:e3:73:66:03:03:76:0d:a2:40:d2:d6:89:7e:c6:
19:5e:6b:2a:b1:03:15:9f:09:b7:fa:e9:31:63:d5:
e1:a8:3f:52:f1:c3:e0:16:64:75:cd:ca:57:51:61:
67:6f:8f:56:59:6c:e7:45:ac:95:95:fa:fe:19:e5:
66:8f:3d:dd:ae:14:00:5c:f3:48:ab:3d:d0:d8:63:
0e:d2:17:5f:49:c6:56:ca:c6:e0:81:f7:a1:b8:8b:
39:68:b9:b6:f2:35:ae:a0:53:bc:17:65:c7:75:04:
00:a3:06:3d:4f:3a:73:8c:49:32:72:b2:43:d9:da:
2b:79:21:fb:7b:13:7d:ef:7c:82:b9:d4:6d:3e:16:
c2:84:c0:a8:9e:6d:5b:43:53:75:e1:84:b7:a7:c2:
19:e9:65:5e:f6:ae:bc:33:98:11:b5:0c:46:bb:4f:
b7:16:d9:32:a9:17:88:9e:69:1f:96:4a:3b:a6:01:
7c:e0:11:0d:2f:7e:84:97:75:58:5b:b9:0e:3c:dd:
60:0e:68:88:3d:42:c0:fd:6d:dd:f5:cd:8c:c0:c0:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1C:31:EE:EE:E6:72:44:03:56:7A:00:5D:9A:87:C7:49:3C:E4:59
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:89:0a:0b:45:a1:a5:25:48:ce:d1:8a:ea:27:96:6d:ac:cd:
d6:ca:ff:7c:1b:33:98:a1:c8:c4:18:15:59:76:52:f1:8a:35:
50:20:bb:8e:8a:e3:a2:c9:0c:4a:69:c9:a1:7d:46:ba:08:71:
01:58:d1:34:5b:b5:e4:de:48:94:80:60:af:45:46:6c:ce:fd:
b3:bf:7c:3a:2c:cb:b4:6f:61:47:9d:7f:a1:48:00:d8:00:30:
b4:9e:41:33:ae:72:4b:24:db:99:5b:2b:cb:28:b9:ce:4e:db:
4e:19:36:86:b4:71:73:65:b5:89:76:73:99:dd:c9:d1:4c:08:
39:ae:3a:1d:ee:9e:01:a2:2b:00:97:e4:c0:4e:b4:6e:90:3a:
87:3e:c8:9f:cb:5e:62:e4:2a:06:9c:99:cc:29:8d:f5:e2:e6:
c8:fb:c7:57:bc:8b:67:5c:8a:44:ea:71:f3:3d:f2:33:1e:e6:
e4:87:c8:82:6b:ee:2b:92:dc:f8:16:02:d1:7e:57:aa:48:a1:
f0:1c:df:a5:ce:9e:a8:4c:19:df:c1:2c:c6:a4:90:3c:3e:3b:
f8:30:74:bc:a4:52:1d:93:c4:8a:71:5d:19:cb:e5:13:43:c2:
fa:81:49:09:5b:39:01:d0:c1:00:77:24:bb:cd:2c:75:19:6f:
1b:8b:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:14:55 2026 by rpki-client