Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
File: HgClX517dTlrS_oT54lgpaEvTvU.mft (raw, json)
Hash identifier: 1Rarwnh4Lb5WJKpA/7pu6yTqB2ochlGhERFTbtvsSIo=
Subject key identifier: 2F:7A:76:B7:C6:32:E3:49:54:FC:7A:07:01:5A:44:7D:56:7A:2C:18
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 019F19B18F3B23168BA495E53A63F7E0DAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
Manifest number: 113F
Signing time: Tue 30 Jun 2026 18:01:34 +0000
Manifest this update: Tue 30 Jun 2026 18:01:34 +0000
Manifest next update: Wed 01 Jul 2026 18:01:34 +0000
Files and hashes: 1: HgClX517dTlrS_oT54lgpaEvTvU.crl (hash: 6d5cfni/YphuTW3rTpALIj9bNCJqKAxUfOOIxMrooTM=)
2: u_mH6EUqNkqz_nJQ2xMzHjAOs5k.roa (hash: Bwm8rVbQPci5MWzF+kRT+h1fK3xCwzJ+2otJGbrOfJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:8f:3b:23:16:8b:a4:95:e5:3a:63:f7:e0:da:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Jun 30 18:01:34 2026 GMT
Not After : Jul 1 18:01:34 2026 GMT
Subject: CN=2f7a76b7c632e34954fc7a07015a447d567a2c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:29:fa:c7:35:9d:07:88:1e:12:cb:cc:1f:
35:a8:1b:39:e3:cb:0d:96:80:e3:a3:96:80:54:f6:
ae:3b:0a:17:8f:b9:ff:46:f7:1b:82:84:44:43:87:
81:96:72:0f:77:a5:6a:1c:e7:b6:94:ce:ec:c0:a2:
a4:38:89:c5:5a:1d:f5:92:b8:db:e2:04:b0:15:d0:
0a:01:e3:64:f6:6a:98:28:92:24:a0:81:f4:b3:65:
97:1e:36:21:19:31:e1:09:fa:87:66:e2:66:bf:04:
78:6a:d4:ef:f3:d5:98:45:04:e6:c3:6c:c4:1c:c8:
e5:5f:ff:a9:e8:6f:75:8d:f5:9c:f1:27:87:0a:e2:
68:37:6b:fe:14:ee:0b:01:8b:0a:41:ad:ee:c6:67:
b7:18:b4:d7:0a:c3:0b:48:7f:01:27:5d:da:ed:51:
5c:fb:7e:2e:96:f7:b6:5e:27:d5:46:10:d8:2e:aa:
1d:cf:db:16:ca:15:c6:ca:95:c3:68:50:8c:f8:e6:
6c:48:df:e9:21:05:a9:00:79:52:7f:bc:05:34:7e:
c0:23:f1:ea:ef:fe:4d:fd:03:f7:c6:b6:13:57:78:
91:56:41:bd:6a:17:ff:d4:99:a2:07:32:cd:93:b3:
1b:e0:36:35:07:41:ce:4f:0b:dc:43:5d:09:a0:f3:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7A:76:B7:C6:32:E3:49:54:FC:7A:07:01:5A:44:7D:56:7A:2C:18
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:78:2a:30:6a:bc:01:39:57:fb:f0:df:93:cf:86:b5:95:7a:
fb:4c:b9:70:54:37:7b:c3:59:26:fa:32:e1:56:d5:e7:59:39:
89:54:35:3e:97:03:c1:86:65:da:43:da:a2:32:77:50:72:b9:
ff:04:cc:2a:4b:69:0c:9b:ef:97:b5:7b:38:db:2b:b5:55:28:
ea:52:cd:68:49:3e:47:fe:25:52:f4:fd:12:3b:08:6a:4d:57:
30:22:89:72:98:97:59:f2:2d:eb:5a:5d:57:fc:89:03:c0:af:
6b:bf:fb:df:07:26:e4:20:b8:80:58:e8:2c:07:47:fd:36:8e:
88:f5:13:0c:9e:ab:70:f6:9e:dd:49:b0:98:7f:68:9f:2a:50:
1d:89:b8:77:c9:9e:9a:45:66:fb:71:5a:b2:83:06:22:6e:cb:
ba:35:1c:2f:59:ad:4d:54:8c:da:f2:44:1e:f0:5f:5c:25:40:
57:b3:ac:66:9c:ad:c2:b4:28:13:2a:56:3c:44:24:ba:72:8b:
0f:d1:58:82:53:2f:69:2b:5f:a2:86:e9:ea:51:fd:f1:25:83:
25:fa:c7:93:db:7a:36:6e:00:8b:aa:fe:4b:fd:64:94:9f:83:
f3:b4:ed:68:64:a9:83:ea:13:a5:fe:67:7b:d5:bd:69:85:c1:
58:35:e0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:19:17 2026 by rpki-client