Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
File: HgxHunmaBgczODuKTbNuhLYtMV0.mft (raw, json)
Hash identifier: 1CoFzbb4JyKlQ6li9kNuiZtgk+0jM3RU5z0a4pKhz8k=
Subject key identifier: B0:B9:02:55:9A:AB:0C:F7:C4:82:56:09:D2:EE:96:D9:00:B3:D4:BE
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Certificate issuer: /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial: 019EB68E86E3EA06DBD6994D77F9A17DB2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
Manifest number: 16EA
Signing time: Thu 11 Jun 2026 12:00:54 +0000
Manifest this update: Thu 11 Jun 2026 12:00:54 +0000
Manifest next update: Fri 12 Jun 2026 12:00:54 +0000
Files and hashes: 1: GfFVdfYr5T1D14xqtgVYsbfPLT4.roa (hash: jes0J5Li8z4Pq6OC9eIPgrGqnw1k87mzrlfDV9tkAMs=)
2: HgxHunmaBgczODuKTbNuhLYtMV0.crl (hash: F9COJACEJGcwRN5+SamrFcBkYufFPp0BQQILZDfwmuk=)
3: TWuhNlll9GdwQT5xbU8YxqqhxGU.roa (hash: V8GYFFSNGmnvziGMDmPfcsoWr5Onpn2xFpSEYeVEjp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:86:e3:ea:06:db:d6:99:4d:77:f9:a1:7d:b2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Validity
Not Before: Jun 11 12:00:54 2026 GMT
Not After : Jun 12 12:00:54 2026 GMT
Subject: CN=b0b902559aab0cf7c4825609d2ee96d900b3d4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:d5:07:3a:39:c5:5a:c8:59:d7:4a:ea:e6:
e9:b7:53:d1:68:a1:a0:63:28:e2:22:fb:05:e4:d3:
97:d4:40:86:26:52:d1:cd:5f:e9:69:9f:89:c4:1e:
9e:6f:39:8d:3e:1a:03:be:23:4d:9a:29:ae:7d:60:
c1:ac:2a:d3:74:5d:94:a1:35:55:ee:7f:57:a6:a3:
72:9a:ea:9a:64:33:e2:a4:2a:8d:05:8b:05:28:e6:
7d:ab:3c:ae:10:95:8c:b5:2d:b4:04:e5:21:63:41:
5e:73:3c:f6:e8:f5:1d:d3:9f:97:42:e1:5c:67:80:
bb:14:b7:be:4e:6f:7f:9a:67:0f:e6:66:8c:aa:2f:
d4:c3:24:97:f8:42:d2:72:5c:d4:35:f5:1d:0b:c8:
73:8f:6c:06:86:de:1d:3f:f8:88:db:bb:37:db:19:
f2:81:40:a0:61:c0:ee:f3:55:ca:19:f9:29:0c:93:
50:5a:6f:5a:51:bf:4a:4f:0a:04:6f:94:73:9a:5e:
b8:1a:00:85:7b:95:f6:59:7b:47:b7:23:5e:c1:08:
7c:64:f9:47:2c:8b:ef:14:7f:47:16:3d:b0:39:df:
cd:12:03:7e:00:55:42:8b:ab:84:6a:34:0a:46:99:
09:2a:e9:b9:4d:f3:8b:0a:42:bb:e6:c2:ea:8a:43:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B9:02:55:9A:AB:0C:F7:C4:82:56:09:D2:EE:96:D9:00:B3:D4:BE
X509v3 Authority Key Identifier:
keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:df:cb:64:b1:75:b1:1f:ef:a2:aa:4b:da:58:82:82:e9:09:
4b:65:dc:a2:46:53:2d:a9:d6:14:41:7b:36:bd:dd:9b:56:04:
06:1e:dc:a7:dd:89:a8:b0:8e:47:20:9b:e5:cb:cb:64:c5:8c:
4b:5e:f3:86:23:d9:d9:95:62:fa:18:1e:69:cb:2a:e0:63:24:
7e:57:ae:3c:1c:f3:43:09:f7:52:29:a2:e2:95:fb:f6:c3:71:
d1:dc:36:8c:40:c9:87:c7:ba:4d:65:43:8c:11:0d:6e:bd:4c:
17:fb:5c:87:ca:b1:bf:7a:07:8b:81:f1:39:e7:85:a0:8b:83:
00:a0:9d:52:5f:df:a0:51:2b:b1:69:a0:cc:01:e3:f1:5f:15:
a6:6f:f5:d3:e2:da:bd:29:b7:26:a8:2c:a0:e6:c4:e3:f0:27:
c2:bf:31:57:2b:56:3c:cf:26:c9:78:f4:65:c6:78:ab:6d:e3:
90:35:22:2e:04:29:0d:0b:16:f5:7a:d5:04:cd:99:e5:8e:6b:
bc:b8:bd:99:dd:1c:62:31:13:ce:51:d5:2a:f2:af:a4:be:be:
0c:a5:89:a0:64:7c:d5:13:c9:a6:bd:71:4c:04:97:0c:52:2d:
87:cf:59:eb:36:c2:4f:6f:bd:da:b0:2b:e8:36:02:e6:d6:b5:
6b:83:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:13:23 2026 by rpki-client