Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: a/RgjgrmrWE5ZTyxgz9LvLE5AN7lNjct6pJgW1lGCF4=
Subject key identifier: 3B:E2:26:58:5C:96:50:94:FF:F2:4A:59:CC:10:02:0F:F2:6C:D5:A5
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 019EBA3432C7F8F88746084349E197296287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 0D99
Signing time: Fri 12 Jun 2026 05:00:43 +0000
Manifest this update: Fri 12 Jun 2026 05:00:43 +0000
Manifest next update: Sat 13 Jun 2026 05:00:43 +0000
Files and hashes: 1: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: FN7YvEyV8SEmeG3N5jcIG+l839g5ROBPsoW/f+DArM8=)
2: osHVQH8VsNLb4CfrwBHFrXKWzUM.roa (hash: VoKNeQ3l9XKj9V37+GVfXeQ4vJfOENAKEnCMkVGQkdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:32:c7:f8:f8:87:46:08:43:49:e1:97:29:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Jun 12 05:00:43 2026 GMT
Not After : Jun 13 05:00:43 2026 GMT
Subject: CN=3be226585c965094fff24a59cc10020ff26cd5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:f7:79:cd:3e:e9:e7:67:e3:c0:28:c6:cd:
c0:b0:29:2a:74:8e:92:41:c1:12:7c:7d:c4:ec:d1:
53:a8:ce:d9:b7:50:eb:1c:56:28:04:ea:ea:d4:65:
52:72:cc:24:e6:29:76:46:a3:b2:2d:8d:ed:4e:5d:
ad:f0:e0:e4:90:a8:7e:66:73:57:99:a1:a0:74:2b:
2f:41:3b:e7:f4:02:16:2a:8f:23:9b:89:96:9c:9e:
da:55:0d:36:2e:06:08:e8:ce:8c:75:32:d0:e5:bd:
c2:7b:2c:63:df:02:f9:8f:b8:f2:62:12:7c:a5:cc:
42:ae:3b:13:0f:d5:33:fd:14:9c:3f:01:de:0b:5b:
5d:05:08:0b:fc:70:f9:61:62:d8:af:c2:f8:b6:16:
b0:f3:69:64:f3:4b:41:e8:34:f7:79:80:60:97:de:
32:c2:cc:fd:cc:93:26:f3:94:dc:8b:f7:24:4b:41:
9a:1c:ac:17:14:dc:e7:21:25:29:f8:f8:33:49:55:
dd:6b:f9:22:3b:82:38:bd:3b:c5:3f:f8:f1:23:0d:
a9:c0:a4:22:f3:16:47:4d:7d:28:0b:c6:75:3d:13:
b4:56:4c:be:36:2f:0d:1b:67:97:7e:fd:8c:d6:b2:
45:c8:63:00:67:83:5f:78:f5:e2:6b:62:48:ba:44:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:26:58:5C:96:50:94:FF:F2:4A:59:CC:10:02:0F:F2:6C:D5:A5
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:71:d5:79:d7:62:d2:9c:1f:7b:2a:af:74:00:e7:a9:dc:e1:
58:e2:a8:14:81:4f:e6:55:91:3e:0f:b2:a4:ca:d0:20:72:45:
44:95:18:87:91:a7:00:23:ca:75:c9:65:d0:7c:2e:7c:93:bc:
29:64:14:7b:cd:b3:96:51:b6:48:70:8f:a2:17:cb:6e:ed:d9:
bd:d1:ef:a6:ec:14:f3:a0:55:16:83:c9:8f:15:d5:4c:48:cc:
38:98:57:9c:0d:3e:d5:0a:fd:e4:15:54:06:76:7f:46:8c:1d:
3f:75:2d:0c:5b:cc:ba:eb:cd:9a:8c:d0:79:9d:e5:c0:ca:bf:
2b:9b:41:44:bf:e6:a0:44:eb:fe:b7:ef:09:15:64:9e:3f:f7:
e6:f2:18:94:ce:f1:d7:9a:9b:49:80:90:c8:9c:fd:9d:3c:6a:
17:08:52:34:73:4b:52:49:46:72:a3:12:7d:47:41:04:e6:da:
c2:83:21:03:fd:65:78:65:d0:e3:3a:34:3b:27:61:36:15:4c:
17:c3:3c:ae:6d:d7:32:91:2d:7a:d3:a5:a9:a1:8f:d6:58:5c:
45:26:f8:0c:15:01:7e:19:51:e0:7e:7b:90:90:78:be:f0:58:
21:6f:3f:28:2d:f3:16:36:a2:72:6a:5c:1e:4f:8d:1b:2a:5b:
95:2a:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:06:15 2026 by rpki-client