Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft
File: HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft (raw, json)
Hash identifier: +PXiwxtfJk/NmfMUasxanWkAlv6+AsxegaSOFZCdsx0=
Subject key identifier: 54:E3:54:34:83:3F:CE:AD:5D:C7:AB:33:7A:B1:87:91:67:3D:B4:01
Authority key identifier: 1C:94:E2:F6:65:C3:ED:5A:12:2C:40:46:8C:C4:C0:64:14:70:3C:12
Certificate issuer: /CN=1c94e2f665c3ed5a122c40468cc4c06414703c12
Certificate serial: 019FA2CE14CA51AA89BF4688754E41F0510D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJTi9mXD7VoSLEBGjMTAZBRwPBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:42 +0000
Manifest this update: Mon 27 Jul 2026 09:00:42 +0000
Manifest next update: Tue 28 Jul 2026 09:00:42 +0000
Files and hashes: 1: HJTi9mXD7VoSLEBGjMTAZBRwPBI.crl (hash: mkg23p31ET/0R9+btzzPcxYA570oGzimEhwaCZZFGWw=)
2: Q7_fgWKsBc4B4O9A9Oysi85FRtc.roa (hash: jFoA+OD+m0hRjQbafIBz80/kGVUMJlfVN/1TjjfmogY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJTi9mXD7VoSLEBGjMTAZBRwPBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:14:ca:51:aa:89:bf:46:88:75:4e:41:f0:51:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c94e2f665c3ed5a122c40468cc4c06414703c12
Validity
Not Before: Jul 27 09:00:42 2026 GMT
Not After : Jul 28 09:00:42 2026 GMT
Subject: CN=54e35434833fcead5dc7ab337ab18791673db401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:7a:ab:33:71:d6:fc:34:f0:d8:90:23:48:
73:f5:db:61:41:41:cd:f1:b0:3c:ee:ab:ab:70:bb:
0d:54:4a:97:20:99:54:68:f3:24:d8:67:94:4f:20:
fd:40:85:5e:06:cf:f5:a8:9a:79:40:90:15:4e:0c:
c6:66:ec:6c:33:d4:99:14:f7:b5:e9:e0:d2:09:cb:
e5:79:3a:39:02:87:1c:45:97:bf:fd:1a:57:9a:aa:
6a:1e:ae:bb:f6:92:59:ff:0a:51:13:db:84:7f:43:
c1:9e:a9:ed:a7:cc:76:4d:46:08:ab:93:32:44:77:
c5:57:9b:11:13:4f:f6:4d:97:1c:99:e8:ab:b9:50:
e5:ca:78:a3:fc:88:20:58:ac:cd:3a:b2:46:e0:e3:
41:4e:c6:3b:0a:8e:85:a8:9b:be:48:e1:42:a7:a7:
85:9a:af:db:4f:57:d1:2a:f6:01:88:b6:18:73:52:
0c:55:f9:3e:c8:7e:59:8b:75:28:15:b0:87:40:7d:
e4:00:dd:42:c8:d8:cf:53:e7:ca:b0:4f:2e:25:ae:
a6:b3:1d:ff:69:61:fe:82:f2:e0:14:a2:01:75:a0:
4a:8e:2d:f2:7d:3d:d0:3c:bc:85:d4:7b:f8:41:14:
13:82:c8:38:be:87:50:e9:17:10:08:63:22:e4:f5:
4b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:54:34:83:3F:CE:AD:5D:C7:AB:33:7A:B1:87:91:67:3D:B4:01
X509v3 Authority Key Identifier:
keyid:1C:94:E2:F6:65:C3:ED:5A:12:2C:40:46:8C:C4:C0:64:14:70:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJTi9mXD7VoSLEBGjMTAZBRwPBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7e:36:a9:98:5b:58:59:82:b9:9e:c2:fa:7d:69:3e:05:68:
6b:37:77:c0:f0:9a:0b:7a:02:66:b5:2b:d3:50:21:12:2e:7a:
e3:4f:2f:22:80:c8:23:4a:ed:22:73:37:b9:0a:0c:88:58:84:
d9:08:07:f2:55:f2:95:13:70:75:c9:8d:65:38:bb:44:86:41:
c7:36:dc:3c:0c:f7:58:06:9a:b4:96:d4:ab:a7:37:e5:2e:77:
61:19:f0:30:32:ff:22:2a:ff:63:94:58:d3:25:ba:81:1d:0a:
77:2c:38:d0:33:a2:bc:c7:08:73:e4:c8:db:32:01:ae:2f:7f:
8e:d9:8a:32:dc:ae:f8:bb:bb:4c:0f:e3:a9:21:ed:d0:51:87:
a5:0c:6a:f8:74:ea:57:55:ff:32:40:bc:e7:46:81:8b:b2:22:
a3:5b:01:f7:ff:40:d1:7c:23:00:66:6c:42:17:cf:34:cf:71:
c5:6e:76:55:14:05:24:f3:6d:59:a2:16:3e:37:88:18:0e:eb:
50:04:92:72:83:22:9e:33:8b:c8:53:9d:42:ad:fa:63:16:8e:
68:1a:93:fe:14:ce:a1:52:35:04:a5:c5:24:f6:d8:51:fa:94:
f9:50:70:ee:64:ad:7a:4f:1d:b8:98:eb:09:8f:b3:ea:19:67:
e9:86:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:21:36 2026 by rpki-client