Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: F5W12DUP8aVW2W+mj9nfAl/WW90elXjshhCAtnQGIIU=
Subject key identifier: 7E:23:07:B6:04:B5:E5:77:C1:34:CE:B7:D2:11:99:D2:A0:CD:5F:2D
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 019F190CE502A7D7024B577433CB2FBB01E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 07A8
Signing time: Tue 30 Jun 2026 15:01:43 +0000
Manifest this update: Tue 30 Jun 2026 15:01:43 +0000
Manifest next update: Wed 01 Jul 2026 15:01:43 +0000
Files and hashes: 1: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: NCyI70j2dQ30nJJMHOR4Y/AfY+7HXvkQkKT5oPJG570=)
2: h6CMS5oBPwqxsthnPIFhjc0V9K8.roa (hash: SyY/BmEPaPkpZh5+caF1REe1XeX5Sv+dw9c9C5Elg48=)
3: yiX6lLdpB5XmkAdPuvtnINRIVlY.roa (hash: mWoNnZ8RcTqfWnj2UmwqsuLMfxRCZHX81aZJ54qm8Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:e5:02:a7:d7:02:4b:57:74:33:cb:2f:bb:01:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Jun 30 15:01:43 2026 GMT
Not After : Jul 1 15:01:43 2026 GMT
Subject: CN=7e2307b604b5e577c134ceb7d21199d2a0cd5f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:a4:2e:2e:69:8a:93:08:1c:9f:be:d4:da:
2b:98:37:a8:03:5e:9c:57:07:8e:bb:57:01:54:84:
14:fc:1d:21:dc:98:1e:0a:bf:7b:c9:67:38:fb:59:
28:21:1a:4d:33:30:5f:10:41:df:70:c2:d7:41:be:
a7:85:c1:4b:b0:0a:36:08:83:90:ee:10:2c:37:58:
37:84:3e:4d:87:64:0a:36:77:32:24:25:ff:bf:d7:
1b:6c:5e:49:bb:61:a4:1c:d2:a8:3d:f0:a3:b0:0c:
50:a7:a5:4c:98:51:6c:bd:46:ac:77:01:55:d3:81:
d8:27:84:ea:ad:9b:08:b2:87:b3:08:f2:2a:51:9d:
c3:ef:e2:8a:b6:40:e7:c3:f1:d6:5d:12:6c:91:28:
b5:98:a0:5c:ef:7b:b9:ab:59:1c:65:a9:03:50:12:
61:e2:c9:ce:8a:cb:92:ac:8d:3c:d0:9b:49:af:a7:
a1:8b:79:08:64:94:b9:17:36:59:83:2b:90:8b:96:
81:e5:5a:cd:9b:dd:2b:62:df:34:ab:64:a8:44:71:
26:ab:97:6e:09:fd:0b:76:8c:da:78:10:35:54:54:
aa:eb:7e:63:0b:f1:58:a8:aa:3f:ff:26:c6:c5:a7:
9e:32:7a:61:56:ed:9f:c4:00:8a:1c:78:53:f1:13:
56:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:23:07:B6:04:B5:E5:77:C1:34:CE:B7:D2:11:99:D2:A0:CD:5F:2D
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:09:3e:0e:ef:dc:a8:d1:56:68:4f:f1:b8:14:82:08:e4:7d:
e0:e2:10:58:cf:e9:fb:7b:28:65:be:f0:b8:87:d7:b0:50:54:
f4:9d:55:0b:b2:a5:5d:6a:7c:d8:ce:fe:5d:f1:9c:d7:0d:65:
dc:40:39:c7:e2:3c:7e:4c:d2:70:9a:19:0a:b5:95:1a:15:93:
e4:42:cc:95:bd:6d:6c:ca:4f:3d:86:bb:9b:80:8b:7c:7c:9a:
a5:8e:79:0d:7e:d9:f0:77:2e:b4:d1:1f:57:eb:c4:d3:18:88:
ed:9d:b0:45:40:03:38:b1:96:bc:bf:c5:ec:c4:ce:a2:72:de:
e8:c3:08:58:38:6a:15:31:ce:3a:6b:4e:6f:0c:59:74:47:db:
89:d6:c4:53:fd:51:66:f3:4d:e2:be:f8:87:5d:be:44:ab:d5:
70:52:4b:18:23:b3:b1:cb:40:fc:b2:84:43:eb:6e:49:c7:b1:
ef:79:f9:0a:7e:47:9b:d8:a5:84:7d:89:6b:51:ef:40:6f:ea:
ac:0a:2d:0e:2c:bf:b3:85:05:0b:46:1e:71:50:c3:63:fc:da:
5f:51:9a:49:95:a4:7c:22:a3:07:80:aa:08:69:ef:30:89:40:
d3:de:8d:ea:76:20:50:b6:d5:cd:e7:a0:30:50:3d:da:52:a1:
32:6e:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:37 2026 by rpki-client