Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: dS4jxLt/Uwf4+U5zSioFSmo7D5lxwohgoky747nqo3g=
Subject key identifier: 93:F4:E3:E1:AC:15:3A:9E:D1:BC:E0:B9:E9:C7:94:AC:BA:E2:84:C1
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 019EB76AB0F9FEBFA172D1933E522AA3B955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 16:01:22 +0000
Manifest this update: Thu 11 Jun 2026 16:01:22 +0000
Manifest next update: Fri 12 Jun 2026 16:01:22 +0000
Files and hashes: 1: 2KPFTLeDrSm9M4_XVjKhQsAeW5w.roa (hash: oiy5/t8+xoYRfuAXJZSTJK9AhNzpLlj1CftKpmctdeM=)
2: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: cQrN1oAe0UACUZcv/AOmcLBBAoeChWRgglIA1HzACO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:b0:f9:fe:bf:a1:72:d1:93:3e:52:2a:a3:b9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Jun 11 16:01:22 2026 GMT
Not After : Jun 12 16:01:22 2026 GMT
Subject: CN=93f4e3e1ac153a9ed1bce0b9e9c794acbae284c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:e2:62:38:fa:87:50:19:73:2e:88:bb:7e:
43:09:95:b4:4e:63:a9:49:c6:f4:99:59:81:d5:5d:
2a:e8:e0:0f:3c:e0:a9:a0:bd:1f:70:55:9e:b9:89:
67:be:ca:d2:f8:fb:26:41:c2:48:05:8f:50:e8:c8:
83:f5:aa:23:4f:52:30:fa:89:ae:07:06:58:98:50:
19:a6:33:ef:b5:61:1d:aa:c5:30:32:a3:8f:4a:e5:
13:f3:c0:78:3a:17:50:27:ef:ce:91:1a:e5:b7:1e:
34:48:cb:d4:b8:88:5b:9a:12:dd:8b:a6:ee:4f:87:
68:3e:4e:19:02:86:61:6b:42:79:90:52:dc:43:3e:
b4:43:5f:b5:5e:a3:f1:16:16:68:ec:b1:ee:3a:23:
45:be:88:3d:69:84:f4:8c:79:24:3c:44:ef:d3:0f:
1b:4e:47:5d:bc:73:6d:af:65:c3:12:a3:1d:64:31:
8a:22:5f:30:0c:aa:3f:76:24:93:c7:f9:cc:26:be:
f7:9b:e7:49:b1:c7:e4:ce:c4:9e:2d:24:c0:1a:32:
89:01:49:0f:07:06:7c:e9:80:5f:5d:dc:ef:fd:69:
d8:7d:b6:ad:c7:b9:9a:06:5e:5b:69:86:3f:49:14:
71:38:d0:55:a0:f8:9e:e8:a1:76:3f:59:59:40:6d:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F4:E3:E1:AC:15:3A:9E:D1:BC:E0:B9:E9:C7:94:AC:BA:E2:84:C1
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:b9:0e:12:13:e9:e8:48:e3:a9:81:fa:ed:00:0a:57:77:
06:b9:6e:12:73:d4:a7:ec:b5:05:42:8b:fa:2d:cc:40:db:ef:
98:03:7c:35:6c:c0:2b:19:8b:59:f8:2b:b5:8d:bc:3a:cb:6f:
e9:1d:ed:84:eb:e0:fc:f9:75:4c:3c:64:ae:de:0e:93:d1:29:
8d:7c:21:58:e1:c0:4e:8b:85:85:4e:0b:85:1b:8e:47:f1:6d:
74:0f:04:e3:aa:68:0d:66:83:ff:50:b5:d6:03:15:e5:3d:15:
16:b3:c9:33:58:f8:09:52:96:be:92:a2:a5:64:4b:95:d7:7d:
4e:13:0a:40:08:cf:cc:d8:25:47:f9:6e:a1:62:92:20:bf:e8:
dd:17:a5:ea:dd:83:17:02:4c:b8:89:09:41:77:1d:d6:3d:a6:
5e:e2:aa:05:36:94:58:f5:d3:5b:b6:64:89:c6:3a:8e:7d:59:
44:4d:45:c6:f0:eb:e3:5a:3e:57:04:a4:5d:24:ac:ca:bb:90:
ca:20:74:77:dd:fb:9a:ab:da:e7:3f:3e:58:03:df:bf:b6:2a:
c2:ee:32:57:28:cd:54:d4:75:f0:6f:e2:9b:67:dc:fe:2c:8a:
71:98:1d:09:0d:e9:c3:1f:88:bd:f4:e0:88:20:6d:26:c5:36:
82:60:39:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63arD5/r+hctGTPlIqo7lVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDQzNmRkNjk4ZWJhM2VhYjVhOTJkYjFkNjRmMmYzMTRl
ZDMxMTYwHhcNMjYwNjExMTYwMTIyWhcNMjYwNjEyMTYwMTIyWjAzMTEwLwYDVQQD
Eyg5M2Y0ZTNlMWFjMTUzYTllZDFiY2UwYjllOWM3OTRhY2JhZTI4NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4/iYjj6h1AZcy6Iu35DCZW0TmOp
Scb0mVmB1V0q6OAPPOCpoL0fcFWeuYlnvsrS+PsmQcJIBY9Q6MiD9aojT1Iw+omu
BwZYmFAZpjPvtWEdqsUwMqOPSuUT88B4OhdQJ+/OkRrltx40SMvUuIhbmhLdi6bu
T4doPk4ZAoZha0J5kFLcQz60Q1+1XqPxFhZo7LHuOiNFvog9aYT0jHkkPETv0w8b
TkddvHNtr2XDEqMdZDGKIl8wDKo/diSTx/nMJr73m+dJscfkzsSeLSTAGjKJAUkP
BwZ86YBfXdzv/WnYfbatx7maBl5baYY/SRRxONBVoPie6KF2P1lZQG0S2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJP04+GsFTqe0bzguenHlKy64oTBMB8GA1UdIwQY
MBaAFB4ENt1pjro+q1qS2x1k8vMU7TEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAt
ZDQzMTlkMTNjNzc1LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zY2UwNDctZDg1OC00ZTdmLWEwNzAtZDQzMTlkMTNjNzc1
LzEvSGdRMjNXbU91ajZyV3BMYkhXVHk4eFR0TVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALre5DhIT
6ehI46mB+u0ACld3BrluEnPUp+y1BUKL+i3MQNvvmAN8NWzAKxmLWfgrtY28Ostv
6R3thOvg/Pl1TDxkrt4Ok9EpjXwhWOHATouFhU4LhRuOR/FtdA8E46poDWaD/1C1
1gMV5T0VFrPJM1j4CVKWvpKipWRLldd9ThMKQAjPzNglR/luoWKSIL/o3Rel6t2D
FwJMuIkJQXcd1j2mXuKqBTaUWPXTW7ZkicY6jn1ZRE1FxvDr41o+VwSkXSSsyruQ
yiB0d937mqva5z8+WAPfv7Yqwu4yVyjNVNR18G/im2fc/iyKcZgdCQ3pwx+IvfTg
iCBtJsU2gmA5qA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:20 2026 by rpki-client