Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
File: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft (raw, json)
Hash identifier: db6xkPhnTNIwg4fiLk6oLl18RkZUpWmtCxAz/9mpgl0=
Subject key identifier: 36:D8:F8:61:1B:DB:EC:82:AA:E4:7F:12:BF:00:6A:1D:96:5E:39:F0
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 019F84FA466067CC785D98E31AB602FFA9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
Manifest number: 1069
Signing time: Tue 21 Jul 2026 14:00:22 +0000
Manifest this update: Tue 21 Jul 2026 14:00:22 +0000
Manifest next update: Wed 22 Jul 2026 14:00:22 +0000
Files and hashes: 1: HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl (hash: V7OcjEv5q3yBGiO0vBU6p6aAVENVv1q5EKhzhU7VN7w=)
2: LvE1FOOjXHAB_ZBIESGtUGStN-w.roa (hash: uFYfE2aGUIZRnV1OPNvCDoBelhKF2bgbMXml4HQyyPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:46:60:67:cc:78:5d:98:e3:1a:b6:02:ff:a9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Jul 21 14:00:22 2026 GMT
Not After : Jul 22 14:00:22 2026 GMT
Subject: CN=36d8f8611bdbec82aae47f12bf006a1d965e39f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:67:48:8b:f8:15:98:d1:02:21:80:85:e4:
68:2c:c9:be:5e:8f:f8:d1:80:00:fa:58:8b:7a:a0:
c5:6a:74:82:64:17:ac:86:9b:75:35:92:ae:ef:76:
42:34:a3:6a:98:16:7b:ec:9a:58:98:45:54:35:1e:
24:76:05:a0:d3:1d:a8:d2:54:c8:a4:02:e8:78:d7:
31:05:9a:62:62:41:f4:ad:df:6e:a1:18:c9:70:61:
af:c5:50:15:60:3b:32:c0:10:db:74:ec:b7:7d:af:
e2:37:5e:92:3f:8f:28:30:94:aa:62:80:88:13:1f:
a3:91:1a:9a:e5:8d:92:23:d9:d8:f5:64:04:37:d5:
20:ab:a1:59:2a:cf:ad:2a:3b:5d:0f:75:66:37:f4:
ec:8c:e4:22:ee:3c:08:0c:90:2d:d1:3b:d8:3a:61:
64:b2:da:bb:21:7c:e0:37:86:69:a4:74:4b:26:ea:
3e:80:81:d9:c5:d6:26:1c:6d:5e:96:c2:e9:02:bf:
54:6e:a4:3c:85:bc:9e:00:b2:07:76:9a:51:57:da:
be:de:e7:0d:25:98:8a:2e:38:74:d0:78:de:a9:97:
ec:46:89:eb:c4:16:ab:59:af:f4:f8:0a:57:7c:31:
62:8a:11:4d:4e:31:90:4f:f7:05:91:3d:bd:39:ea:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D8:F8:61:1B:DB:EC:82:AA:E4:7F:12:BF:00:6A:1D:96:5E:39:F0
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:00:66:61:5a:09:87:69:df:86:83:ce:b0:5c:c0:f2:d5:a0:
d2:8e:86:6a:b5:d2:6a:7a:c9:d1:52:65:8e:d8:93:dd:f6:e0:
39:2a:8a:6b:2d:1b:fb:a1:13:ca:bc:e2:8c:74:a7:25:7d:c9:
30:ae:bd:bf:93:b4:6d:49:5a:cb:b5:b6:aa:44:1c:e7:cd:c2:
75:82:61:3e:14:37:0d:ca:55:53:ea:59:58:6d:8d:d0:9b:27:
0a:62:2b:9a:cd:06:fe:76:44:3b:26:19:93:ed:e4:6a:08:71:
a6:bf:63:b9:34:c8:bb:4a:e2:11:db:23:e4:86:01:0a:a3:26:
cb:55:00:c4:10:3a:86:c1:11:c6:35:30:60:d2:8a:d6:f9:d6:
ac:88:0d:65:25:f2:ea:fd:df:eb:b4:3c:27:6f:9c:b7:b7:00:
ed:41:d5:23:a6:34:08:db:f9:b6:29:4a:ed:87:b6:e0:27:95:
f8:eb:b2:7d:ec:d9:06:b5:a9:16:52:b9:fc:f7:d8:c1:29:d0:
c9:57:fa:fc:c4:39:fe:6b:fb:95:14:dd:00:3d:99:9e:85:cf:
6d:f7:d8:05:35:8a:b5:0c:b6:a9:2e:e2:29:b8:4d:c6:b8:a2:
b6:42:66:4b:32:f3:b1:d5:f3:ed:60:14:7b:46:87:f6:9b:05:
d8:b2:d2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:39 2026 by rpki-client