Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json)
Hash identifier: bRgziJkhph5uYovbkCZEjqOWv3Buo32ex5ojC8jsG6Q=
Subject key identifier: 90:A2:2C:DA:76:D6:A9:26:A2:A5:60:49:69:60:74:D4:7C:62:1C:54
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 019F0AAC2247449C2CBA5916046FCC3CC0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
Manifest number: 03F8
Signing time: Sat 27 Jun 2026 20:01:20 +0000
Manifest this update: Sat 27 Jun 2026 20:01:20 +0000
Manifest next update: Sun 28 Jun 2026 20:01:20 +0000
Files and hashes: 1: G9jujcQZlUdVMOptG1eSDU2YY8I.roa (hash: EJGVSoBSNBmuI6zXcVl26rucMI4v4bwSguQQOZP/asw=)
2: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: FZWvG1qhVWo+AILoii6sgtg+OksfJKECJ3pnWUVPAbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:ac:22:47:44:9c:2c:ba:59:16:04:6f:cc:3c:c0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Jun 27 20:01:20 2026 GMT
Not After : Jun 28 20:01:20 2026 GMT
Subject: CN=90a22cda76d6a926a2a56049696074d47c621c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:ff:8a:6d:a1:72:ed:6b:f9:1a:94:9b:c1:
c9:40:ef:2f:87:bb:f3:4e:5d:4c:9f:ab:dc:7c:f9:
64:22:62:e8:a4:e0:69:77:ea:2f:a6:0c:f6:e7:45:
2e:d5:85:81:1d:9e:0b:9a:48:a3:94:11:64:a0:76:
d4:55:b5:95:be:93:52:f6:10:d1:b7:02:2f:86:1b:
fb:83:a9:80:c7:12:df:de:e4:45:28:a2:3a:2b:8c:
9d:75:87:d5:2f:f3:6c:e6:3c:13:fc:76:29:4c:73:
67:5e:5c:f6:4b:ab:e6:71:27:4b:a7:d4:66:f1:e4:
3d:27:2d:3c:e2:2f:75:8f:81:32:6f:37:6b:ca:90:
20:cf:55:9b:fc:df:40:26:0d:13:ce:97:43:90:60:
02:5a:f2:a3:ca:d2:9c:7a:76:e1:75:c9:80:ea:f3:
91:5e:2e:dd:c4:13:f3:55:00:ed:16:f6:e3:60:23:
55:51:f5:24:99:26:a0:e4:c0:9f:18:84:4b:50:df:
36:d1:26:62:ec:c6:7d:9d:dd:b4:b5:e7:d9:05:98:
43:a2:95:92:f0:ae:f0:c1:cc:9e:ef:7a:e3:0b:f3:
d1:4e:c6:fb:f4:fb:9f:5b:c0:3f:85:41:34:50:fb:
50:11:de:1c:28:55:73:03:b5:1b:a3:0d:09:29:0b:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:2C:DA:76:D6:A9:26:A2:A5:60:49:69:60:74:D4:7C:62:1C:54
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3c:bc:6e:12:8f:95:41:f0:5f:f0:d1:97:8f:db:c7:7a:a9:
8d:8f:48:a7:57:52:33:08:eb:cb:73:ed:83:95:57:f0:25:8e:
c5:11:31:e4:5b:2b:0b:75:fb:8e:03:5c:d9:60:48:5a:f6:44:
b5:5f:1c:bb:8b:cd:59:b9:4d:e8:5b:d2:6f:a2:f8:07:e9:b7:
69:0d:d7:58:4a:78:4e:03:13:0c:76:37:34:5f:c3:87:39:36:
95:98:4e:67:71:e9:cb:4d:da:88:b2:63:53:ba:1e:c2:67:90:
b4:01:31:5a:32:42:67:1a:a1:cf:4f:e2:c3:2c:f4:03:fd:6a:
8d:b6:59:6b:3e:09:d5:fc:13:53:42:f2:bd:c4:75:0e:8b:b9:
81:70:9d:01:4d:2a:f4:c3:61:c9:48:70:0f:2a:6a:12:26:6e:
8f:8f:59:6b:ae:94:e3:12:3e:68:e8:e0:51:dd:73:d1:41:9c:
72:b7:f4:ab:a0:b2:9e:06:73:6c:bf:5a:9e:99:93:b1:26:73:
97:b1:69:7a:db:f4:ed:80:12:a8:33:45:a4:7b:05:f2:e5:6f:
cc:4f:f3:a3:56:60:fa:08:b2:be:fc:21:9c:2d:13:d3:41:92:
ae:0a:e4:a3:4b:a0:6e:28:53:ee:2e:e9:12:be:f0:12:10:bc:
66:57:8c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:17:31 2026 by rpki-client