Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json)
Hash identifier: 5BUXPWrYEvqJqLhcSw0kOisePZ9zkGQRp11RKOcksQI=
Subject key identifier: 73:FB:EB:11:39:BB:BF:FE:73:53:95:56:B5:1D:47:CC:3A:CD:77:19
Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Certificate serial: 019F17C25F81E7968B156FD50B6738BDEAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
Manifest number: 0CC9
Signing time: Tue 30 Jun 2026 09:00:41 +0000
Manifest this update: Tue 30 Jun 2026 09:00:41 +0000
Manifest next update: Wed 01 Jul 2026 09:00:41 +0000
Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: cXYymJ7W5J/IHySd5kEl5EMrDm1glW1TMApJlrukr8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:5f:81:e7:96:8b:15:6f:d5:0b:67:38:bd:ea:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a
Validity
Not Before: Jun 30 09:00:41 2026 GMT
Not After : Jul 1 09:00:41 2026 GMT
Subject: CN=73fbeb1139bbbffe73539556b51d47cc3acd7719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:1f:37:bb:ca:1a:e5:e5:35:a8:19:48:61:
ec:ae:13:1b:42:c1:78:19:e8:ec:e3:7a:ef:d5:74:
2f:89:e0:8a:a4:d3:e2:69:18:9d:83:32:c8:41:a0:
47:68:98:b5:18:8a:5e:de:e1:37:59:ac:08:45:e2:
44:66:03:a7:86:0b:d6:11:31:15:af:f3:19:29:48:
38:a0:31:fe:eb:5c:b4:18:4a:4f:37:04:15:94:76:
81:3e:d8:e9:4b:1f:d4:8e:fd:17:e0:fa:be:5e:d8:
44:4a:c0:5f:36:cd:4c:e5:1d:91:d2:ba:18:a1:be:
89:13:93:89:b0:2a:d2:b6:70:d4:74:10:04:22:d7:
a0:47:d5:f4:b3:62:df:86:7b:a7:fd:f2:c0:19:48:
04:44:24:f5:14:24:8f:1c:59:a3:16:c4:97:97:d9:
ea:4f:3f:08:3f:7c:9f:12:b4:f3:3f:b9:62:93:39:
42:67:65:dc:b8:a5:1d:c1:dc:67:4c:10:41:14:fd:
26:87:ee:b2:39:90:75:2a:0e:05:5a:81:50:9b:53:
6d:21:39:db:82:02:54:7a:b6:b1:3e:32:0a:f4:01:
a1:36:36:ca:20:6b:55:68:b3:8b:53:d8:24:6c:20:
f9:b9:38:53:49:ca:79:dd:95:b8:02:b3:4e:2f:fa:
1f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:EB:11:39:BB:BF:FE:73:53:95:56:B5:1D:47:CC:3A:CD:77:19
X509v3 Authority Key Identifier:
keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:56:28:d2:8a:8a:bd:b9:29:55:ba:e6:da:19:85:4e:ba:76:
0c:9b:7f:e1:72:e9:fa:b6:e0:b4:c3:26:c6:ba:54:16:af:ca:
39:08:99:60:88:bd:d9:82:c6:7f:31:b4:5a:6c:56:48:47:9c:
db:80:e4:c0:81:f2:7d:45:15:b6:6a:22:ac:41:10:92:fc:6a:
bc:8c:ef:8a:f5:73:8f:b2:ac:a8:38:51:38:36:84:a5:f0:64:
e2:35:b5:40:e5:69:a3:6f:8c:89:ac:15:ba:9b:04:c1:cb:6e:
01:bc:10:fa:61:f2:77:72:5b:f8:f5:72:9f:d8:a3:a3:8d:dc:
8b:80:8a:80:35:99:ad:85:7f:0c:fc:50:20:bf:8e:84:8e:e2:
9f:9f:5c:67:21:21:fa:6c:36:aa:26:ff:a0:56:94:b2:bd:48:
f7:3c:db:31:c1:ec:32:08:24:5c:f3:66:14:37:96:30:c0:52:
08:40:c5:1c:de:0e:3d:51:df:ad:9a:a7:d1:08:d6:07:b0:d0:
75:7e:9b:8e:90:ff:ac:de:52:9d:fe:42:b7:b8:5b:7a:73:49:
6a:0a:37:e8:eb:38:97:6a:6f:6e:95:f6:74:49:87:51:71:2a:
ed:d3:26:4f:d9:a3:ff:04:93:cf:85:6c:fa:11:09:0c:45:19:
35:a9:b8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Xwl+B55aLFW/VC2c4verTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MWExYzNjMjU5MDcxYzJiY2JjMjdmNzkxZmQxZTIwZjU4
MGE5NmEwHhcNMjYwNjMwMDkwMDQxWhcNMjYwNzAxMDkwMDQxWjAzMTEwLwYDVQQD
Eyg3M2ZiZWIxMTM5YmJiZmZlNzM1Mzk1NTZiNTFkNDdjYzNhY2Q3NzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplsfN7vKGuXlNagZSGHsrhMbQsF4
Gejs43rv1XQvieCKpNPiaRidgzLIQaBHaJi1GIpe3uE3WawIReJEZgOnhgvWETEV
r/MZKUg4oDH+61y0GEpPNwQVlHaBPtjpSx/Ujv0X4Pq+XthESsBfNs1M5R2R0roY
ob6JE5OJsCrStnDUdBAEItegR9X0s2Lfhnun/fLAGUgERCT1FCSPHFmjFsSXl9nq
Tz8IP3yfErTzP7likzlCZ2XcuKUdwdxnTBBBFP0mh+6yOZB1Kg4FWoFQm1NtITnb
ggJUeraxPjIK9AGhNjbKIGtVaLOLU9gkbCD5uThTScp53ZW4ArNOL/of+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHP76xE5u7/+c1OVVrUdR8w6zXcZMB8GA1UdIwQY
MBaAFNYaHDwlkHHCvLwn95H9HiD1gKlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NmNkODYtNmRlMS00YzNkLWIwZjct
ODU3MTQwNjY5N2FkLzEvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80NmNkODYtNmRlMS00YzNkLWIwZjctODU3MTQwNjY5N2Fk
LzEvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFYo0oqK
vbkpVbrm2hmFTrp2DJt/4XLp+rbgtMMmxrpUFq/KOQiZYIi92YLGfzG0WmxWSEec
24DkwIHyfUUVtmoirEEQkvxqvIzvivVzj7KsqDhRODaEpfBk4jW1QOVpo2+MiawV
upsEwctuAbwQ+mHyd3Jb+PVyn9ijo43ci4CKgDWZrYV/DPxQIL+OhI7in59cZyEh
+mw2qib/oFaUsr1I9zzbMcHsMggkXPNmFDeWMMBSCEDFHN4OPVHfrZqn0QjWB7DQ
dX6bjpD/rN5Snf5Ct7hbenNJago36Os4l2pvbpX2dEmHUXEq7dMmT9mj/wSTz4Vs
+hEJDEUZNam4Yg==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:50 2026 by rpki-client