Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
File: HgilntmPWaDqDmxDecMPW9XyCCE.mft (raw, json)
Hash identifier: 0E5gF92m7CGc7/hxLaV/XVSGBiAfsNlcXQFDm6rsTeM=
Subject key identifier: 08:41:DB:DD:7A:D1:FD:AA:D6:99:9A:99:F4:48:6E:77:22:BF:D4:7E
Authority key identifier: 1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
Certificate issuer: /CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Certificate serial: 019EE81FFD200D18D3849318F71527E26098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
Manifest number: 10E3
Signing time: Sun 21 Jun 2026 03:01:10 +0000
Manifest this update: Sun 21 Jun 2026 03:01:10 +0000
Manifest next update: Mon 22 Jun 2026 03:01:10 +0000
Files and hashes: 1: 6MDHWzF5H-Od8DONT_Ifwk7iJ6Y.roa (hash: Ee0DlgRuUV1WD66xgP4nuWzTz+9zaw/a3ltY55J5D/I=)
2: HgilntmPWaDqDmxDecMPW9XyCCE.crl (hash: XMyCtZaQrq2U/OE5LoN3YDYuUKZb0qeySbjHe2TPiao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 21:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:1f:fd:20:0d:18:d3:84:93:18:f7:15:27:e2:60:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e08a59ed98f59a0ea0e6c4379c30f5bd5f20821
Validity
Not Before: Jun 21 03:01:10 2026 GMT
Not After : Jun 22 03:01:10 2026 GMT
Subject: CN=0841dbdd7ad1fdaad6999a99f4486e7722bfd47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:ba:ca:c7:a9:5f:0d:ac:1a:94:d1:6a:7e:
6d:11:ea:38:a8:e9:17:6b:ff:53:f1:5f:b3:e9:13:
27:b1:5e:0d:ea:5c:3f:68:df:53:73:9f:04:2f:18:
a0:4b:5b:ca:ed:21:2c:16:83:cc:2e:c4:2b:f3:5b:
a0:cc:a3:40:0c:e1:0b:e6:29:7b:c2:3d:80:ee:fb:
9e:a0:00:ec:11:d6:ba:f2:e9:29:d7:a9:1d:02:f5:
96:c9:35:36:55:e1:38:0c:63:ac:c5:4e:25:eb:e3:
00:8f:59:a0:38:46:0d:ea:72:d5:a1:ac:cf:78:a2:
e8:5f:52:a4:d3:e4:ec:91:01:be:e8:0f:d0:80:95:
c0:9f:5e:5b:e2:90:57:95:8c:9b:54:9e:4f:3a:4e:
d5:44:c3:2d:ba:fa:69:62:46:81:b0:47:8c:63:0b:
b0:73:1a:54:1c:fa:6d:f5:68:3f:0b:f3:6b:d0:7e:
45:fa:f7:70:30:f5:f9:e5:7d:16:ca:c8:6e:3e:b2:
78:d1:cb:18:88:17:1d:61:2f:be:bb:75:cc:aa:83:
b8:9f:fa:07:a0:23:98:21:f6:33:f0:b1:80:ae:e7:
8f:69:41:85:53:29:e5:5b:2a:95:89:65:1f:d0:d0:
18:ee:09:67:86:27:a6:9e:46:6a:fb:b1:21:d4:65:
7a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:DB:DD:7A:D1:FD:AA:D6:99:9A:99:F4:48:6E:77:22:BF:D4:7E
X509v3 Authority Key Identifier:
keyid:1E:08:A5:9E:D9:8F:59:A0:EA:0E:6C:43:79:C3:0F:5B:D5:F2:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgilntmPWaDqDmxDecMPW9XyCCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e2f4b-429f-4327-b747-1f4073ba436f/1/HgilntmPWaDqDmxDecMPW9XyCCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7f:49:e7:5c:94:85:73:c5:53:2a:48:41:6d:7b:92:51:b1:
56:50:1e:9a:56:da:66:2c:6c:65:39:74:ae:f5:4e:95:dc:23:
c7:97:19:fe:65:a7:84:18:7d:d0:0e:0b:b8:9f:60:1f:24:cd:
98:dc:a9:e4:a7:e9:73:15:a2:77:f0:03:ae:bc:92:96:04:a7:
1b:e0:d9:21:a5:6b:63:fb:20:2a:f1:5b:08:d0:20:8e:c3:fa:
51:b0:20:6c:7d:d6:dd:f9:21:68:bb:10:25:02:c6:40:d3:32:
65:54:4b:bc:33:87:c9:ec:aa:0b:dd:48:df:80:8f:62:7e:7d:
dc:20:35:c5:89:a7:25:2a:82:2b:97:b3:f3:68:e6:79:8a:3d:
46:c7:fa:4d:ca:a9:cb:89:04:43:5d:a7:b7:94:f0:c3:47:b6:
39:08:dc:69:34:5a:b6:83:a4:c1:55:c7:0e:24:b4:26:65:cc:
76:20:12:10:7c:c8:75:c1:90:f9:6c:6e:26:73:eb:16:5a:b2:
db:3b:2c:b3:8e:2d:60:9d:d4:da:d6:32:c3:be:2b:ab:6c:30:
36:82:d8:4b:9b:a6:a9:80:9f:c5:32:54:cb:03:45:78:f5:59:
c9:12:09:99:9e:ee:2b:e4:4b:69:89:dc:e1:68:b9:4f:c1:42:
47:dc:a7:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7oH/0gDRjThJMY9xUn4mCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDhhNTllZDk4ZjU5YTBlYTBlNmM0Mzc5YzMwZjViZDVm
MjA4MjEwHhcNMjYwNjIxMDMwMTEwWhcNMjYwNjIyMDMwMTEwWjAzMTEwLwYDVQQD
EygwODQxZGJkZDdhZDFmZGFhZDY5OTlhOTlmNDQ4NmU3NzIyYmZkNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuem6ysepXw2sGpTRan5tEeo4qOkX
a/9T8V+z6RMnsV4N6lw/aN9Tc58ELxigS1vK7SEsFoPMLsQr81ugzKNADOEL5il7
wj2A7vueoADsEda68ukp16kdAvWWyTU2VeE4DGOsxU4l6+MAj1mgOEYN6nLVoazP
eKLoX1Kk0+TskQG+6A/QgJXAn15b4pBXlYybVJ5POk7VRMMtuvppYkaBsEeMYwuw
cxpUHPpt9Wg/C/Nr0H5F+vdwMPX55X0WyshuPrJ40csYiBcdYS++u3XMqoO4n/oH
oCOYIfYz8LGAruePaUGFUynlWyqViWUf0NAY7glnhiemnkZq+7Eh1GV62wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhB29160f2q1pmamfRIbnciv9R+MB8GA1UdIwQY
MBaAFB4IpZ7Zj1mg6g5sQ3nDD1vV8gghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZTJmNGItNDI5Zi00MzI3LWI3NDct
MWY0MDczYmE0MzZmLzEvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZTJmNGItNDI5Zi00MzI3LWI3NDctMWY0MDczYmE0MzZm
LzEvSGdpbG50bVBXYURxRG14RGVjTVBXOVh5Q0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH39J51yU
hXPFUypIQW17klGxVlAemlbaZixsZTl0rvVOldwjx5cZ/mWnhBh90A4LuJ9gHyTN
mNyp5KfpcxWid/ADrrySlgSnG+DZIaVrY/sgKvFbCNAgjsP6UbAgbH3W3fkhaLsQ
JQLGQNMyZVRLvDOHyeyqC91I34CPYn593CA1xYmnJSqCK5ez82jmeYo9Rsf6Tcqp
y4kEQ12nt5Tww0e2OQjcaTRatoOkwVXHDiS0JmXMdiASEHzIdcGQ+WxuJnPrFlqy
2zsss44tYJ3U2tYyw74rq2wwNoLYS5umqYCfxTJUywNFePVZyRIJmZ7uK+RLaYnc
4Wi5T8FCR9ynBg==
-----END CERTIFICATE-----
Generated at Sun Jun 21 08:06:18 2026 by rpki-client