Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
File: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft (raw, json)
Hash identifier: 4QPxhp1YFtxOR9Qy8mBNo0xlMw73qRXUj7C0W3kCyic=
Subject key identifier: A2:A1:55:CF:4B:A8:14:4F:7E:EB:D8:63:C6:D4:B9:CA:D6:1D:CE:92
Authority key identifier: 1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
Certificate issuer: /CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Certificate serial: 019EB73338F384C8BE92313FB6B5BFC8FBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 15:00:47 +0000
Manifest this update: Thu 11 Jun 2026 15:00:47 +0000
Manifest next update: Fri 12 Jun 2026 15:00:47 +0000
Files and hashes: 1: HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl (hash: 1ltfYMNDqPyU3/2RmweQiOWieQdXNbSASQQvUPjkHVg=)
2: qNAwNr9sOtlnmTZXNsD7ZTCA6FQ.roa (hash: dZNLxY2R+OMbFcczhFdBzgHwABmB4UkJwEeAYi+FzG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:38:f3:84:c8:be:92:31:3f:b6:b5:bf:c8:fb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cae1a26967dfe287eb602749ec2c6f05afbb57c
Validity
Not Before: Jun 11 15:00:47 2026 GMT
Not After : Jun 12 15:00:47 2026 GMT
Subject: CN=a2a155cf4ba8144f7eebd863c6d4b9cad61dce92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0e:ea:eb:6c:01:d2:25:91:b4:9b:60:70:66:
98:26:44:eb:1d:e8:73:ec:38:53:25:1f:cb:94:2a:
3a:fe:a4:09:b1:8f:f3:e2:cd:9b:13:5b:13:83:44:
bf:88:2e:bc:93:e1:6b:31:6d:60:f7:67:73:c3:65:
5c:4d:76:9c:33:74:41:5c:fa:4c:4e:e3:06:ba:a6:
da:6a:34:60:06:39:f3:89:70:49:76:16:dd:70:54:
79:88:db:5f:a1:ac:b0:ec:88:01:d2:92:54:8c:8d:
c0:de:e7:ee:fd:46:f4:bc:a5:75:13:de:ce:73:54:
dc:69:c8:2d:57:10:42:13:57:4a:f6:29:8e:50:b5:
ec:7a:5d:71:1e:47:0d:98:39:6e:14:4c:e3:5b:f9:
1b:78:03:2b:43:bb:db:8a:98:d5:ce:43:d0:b3:b7:
02:71:d9:02:f8:c2:71:ee:f2:d0:c5:2b:18:b6:53:
81:b7:c5:24:34:0d:d9:f9:c6:85:b4:73:f5:99:1a:
e8:68:8d:36:79:39:05:a4:f0:ea:4e:2b:43:31:30:
e5:65:ba:5f:a6:6e:fa:97:7c:23:9c:f8:e6:16:29:
2d:37:1f:6f:85:68:dc:b8:8a:b1:60:ae:fe:e0:44:
34:1b:ae:5d:55:20:51:44:b6:da:66:2e:85:96:64:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A1:55:CF:4B:A8:14:4F:7E:EB:D8:63:C6:D4:B9:CA:D6:1D:CE:92
X509v3 Authority Key Identifier:
keyid:1C:AE:1A:26:96:7D:FE:28:7E:B6:02:74:9E:C2:C6:F0:5A:FB:B5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/HK4aJpZ9_ih-tgJ0nsLG8Fr7tXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3d:18:02:2a:0f:71:22:e2:38:4a:96:a8:c3:4b:20:0b:f9:
43:29:2e:a5:09:0e:14:4a:17:b6:2c:51:cc:ac:fa:13:5c:71:
3e:8f:89:89:0c:7d:f4:ba:50:69:4a:4a:4b:ac:e8:3f:af:ad:
59:fb:5c:c7:ba:be:2f:9a:fc:d8:8c:19:0d:c6:79:17:0d:0a:
00:ca:73:ff:53:5e:a7:87:7d:a2:b1:e2:1a:9f:b4:c8:09:9b:
17:95:92:5d:c9:57:57:42:65:21:4a:fa:bc:d6:9d:dc:c8:ae:
04:83:6c:18:55:fc:93:cf:79:05:ab:2e:f7:64:f7:53:ad:53:
10:28:c6:ea:aa:e9:90:a2:71:c6:f1:24:ca:2c:d4:ce:15:68:
0b:5c:e7:d7:e1:99:26:4f:5a:15:1f:ce:b6:ab:30:e9:e3:b5:
f5:5a:7e:2e:51:18:53:00:63:8e:cc:6f:f4:8a:df:ed:8f:05:
36:91:da:ee:4c:53:c9:43:18:b7:d3:b7:31:45:15:bf:0e:73:
fa:98:74:d3:74:2d:dc:a7:0e:52:68:15:d1:8f:e2:2f:e4:0d:
9c:22:97:e6:24:d8:d9:00:29:d3:9a:cf:47:c3:b9:31:eb:88:
d0:e3:0e:5e:d9:2e:cc:13:24:7c:ae:e9:05:c7:3d:e9:c6:2f:
14:7c:eb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:58:52 2026 by rpki-client