
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: Fsgz6x0PAxQYF++QiULxQhvVxpGMlIwgYT9yGneH4Fk=
Subject key identifier: AE:6B:55:33:74:28:B2:E3:3D:33:59:D7:80:EE:A3:08:32:C5:46:43
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 019EE7B1E5FB37CEB2FBDAB6ECBA92AB80F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 0C68
Signing time: Sun 21 Jun 2026 01:00:56 +0000
Manifest this update: Sun 21 Jun 2026 01:00:56 +0000
Manifest next update: Mon 22 Jun 2026 01:00:56 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: GPwC0zq4EL4W6sz8eXFwRLP0peKjuay1mokajDBKDDQ=)
2: izo4UDdC4mpQkmyWIGDJxTunxWE.roa (hash: nGq0zWnIwQfu9LNAcwYVVr+irG2rx0o9SiWP5Vb3sPw=)
3: sCQK0hD61FJAM1RWBV01BmeoHq0.roa (hash: 2nCV/DvBky7socAFisrJxsyWYsp6XWUMeNmIdiwZJuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:b1:e5:fb:37:ce:b2:fb:da:b6:ec:ba:92:ab:80:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Jun 21 01:00:56 2026 GMT
Not After : Jun 22 01:00:56 2026 GMT
Subject: CN=ae6b55337428b2e33d3359d780eea30832c54643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:0d:a6:c7:c0:e6:dd:cb:73:de:6f:03:5b:
c4:7b:71:36:86:e2:35:c5:fd:58:8a:f0:7c:3f:81:
7f:21:e3:ab:35:b8:13:65:55:ca:d3:ff:cc:65:64:
26:9a:21:ee:1a:aa:4d:9f:2b:bd:c1:02:12:9d:16:
d2:ec:b6:9b:28:7f:cc:d0:cc:4a:bf:39:ae:c1:79:
ad:bc:7b:a1:d7:29:a5:ec:dd:fa:fb:62:83:f7:ba:
da:12:41:e7:ed:f2:b5:05:b0:98:be:71:cc:07:93:
0e:c1:27:53:7f:e9:dc:76:2d:d5:ca:47:12:8d:20:
0c:fd:76:97:82:20:c9:0b:a7:82:c3:40:df:e0:70:
b6:b2:21:a6:a6:55:b8:2b:e5:d4:41:a2:ab:43:6e:
a2:a4:2f:11:a3:d3:64:6c:2d:1d:48:13:ea:0e:48:
68:db:c4:52:c7:58:bf:13:d0:c1:21:2c:e9:f8:93:
ab:a2:15:19:30:d5:af:4b:ae:03:52:13:80:d7:32:
e9:41:43:bc:ad:c6:1e:14:1f:7b:a5:8f:7f:74:7d:
39:50:48:5b:f7:be:78:0b:6a:d6:5f:6d:96:b1:e3:
81:cb:e7:a3:ac:73:fe:03:3a:aa:c5:e2:28:06:fe:
ed:fc:31:d0:ed:92:d1:59:03:1b:4f:85:70:19:77:
2a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6B:55:33:74:28:B2:E3:3D:33:59:D7:80:EE:A3:08:32:C5:46:43
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:72:50:f1:f4:8a:9d:30:18:57:d0:e8:b6:8e:2a:36:a9:
d0:7b:3a:5b:1b:27:58:1f:40:57:20:15:ae:f5:9f:03:49:db:
02:f7:53:f0:12:dc:5f:72:33:22:20:9a:dc:39:a1:e0:d5:ac:
8d:1a:19:9f:9f:eb:74:22:cb:5e:ea:85:e0:21:ba:e0:f9:82:
ae:61:f4:3e:ab:2d:13:88:1b:b0:58:e5:2f:43:0e:86:66:a6:
6f:5a:db:91:3d:1d:6a:08:cb:e8:6e:6c:d1:e1:33:68:3f:6b:
d2:ef:d6:9a:1e:2d:64:61:02:96:6e:35:0f:22:62:5d:56:83:
8f:c0:16:84:c4:23:5d:22:52:61:c6:ff:0c:66:95:83:18:13:
8a:7f:d3:f3:95:e2:86:e0:6d:13:cd:dc:10:03:0d:cb:28:f5:
48:13:e0:46:99:af:7c:30:dd:4a:12:4b:04:76:42:ed:a9:71:
38:b3:91:b5:46:dd:52:6c:a0:cb:68:56:6a:e8:d0:94:f5:35:
0c:18:e4:bd:b7:89:2b:86:90:44:52:f0:71:e2:ed:de:93:1f:
26:31:5e:84:54:4c:1f:c6:78:2d:39:d0:5c:10:18:20:8b:69:
73:d2:d3:54:dd:ef:25:30:57:bc:93:54:a2:1f:e3:14:4c:c9:
ff:42:d2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:38:31 2026 by rpki-client