
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
File: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft (raw, json)
Hash identifier: YShuSry/ZpeOmebSO0AhChZMYKNsMqhfCyfYL7vMLZk=
Subject key identifier: 66:C2:F4:07:E7:0E:41:95:21:C3:00:F4:2E:AE:5C:E9:6A:B1:79:81
Authority key identifier: 1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
Certificate issuer: /CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Certificate serial: 019F10094FD6D608178CBE2DEACE636E81F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
Manifest number: 10BA
Signing time: Sun 28 Jun 2026 21:01:13 +0000
Manifest this update: Sun 28 Jun 2026 21:01:13 +0000
Manifest next update: Mon 29 Jun 2026 21:01:13 +0000
Files and hashes: 1: HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl (hash: KjYTwImlWd2CsTtu3/DLiWGrDXejnYJHk7DVsYkkyA8=)
2: nwKbwtoqpnT5gVqh1QUIgDFgOWQ.roa (hash: JOb72Ix/3IvyYR98c/TNjJBo/rc+TguIVe9HFGNgsGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:09:4f:d6:d6:08:17:8c:be:2d:ea:ce:63:6e:81:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9b8562615f5110d3551f8ec5dd056fb0a48aba
Validity
Not Before: Jun 28 21:01:13 2026 GMT
Not After : Jun 29 21:01:13 2026 GMT
Subject: CN=66c2f407e70e419521c300f42eae5ce96ab17981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f0:a8:2e:2a:9f:1c:c8:2e:b5:fb:f0:e2:21:
83:fe:50:9b:e1:8a:e3:7f:28:5a:1f:97:b6:f2:7b:
6e:4f:fd:26:94:b7:6f:ba:8c:46:36:ee:c6:57:b2:
88:ff:99:d5:95:b2:9c:fc:b8:b1:c6:27:86:67:0c:
c3:84:c2:d5:f2:55:fe:f0:97:34:e7:99:a6:c9:f8:
80:78:0f:ef:cf:14:d6:2a:45:e3:7c:08:5d:81:73:
ff:a1:42:53:02:50:ad:67:ce:3d:e6:e2:9a:a0:ea:
70:78:9f:c7:a8:60:81:59:0e:9c:d1:07:d0:75:43:
03:7e:83:f6:fd:68:63:78:f7:84:5c:46:5f:58:43:
3a:32:87:54:b9:72:71:68:0d:e8:65:51:d7:47:be:
fd:a4:55:24:4a:05:f6:90:19:44:c2:df:06:7d:df:
5c:29:a5:21:5f:c9:f6:eb:1d:03:75:43:f6:69:d4:
b0:94:e9:94:3e:98:b3:91:e1:9e:29:07:2c:85:87:
8f:5f:60:c9:08:82:ef:91:cb:29:6c:af:88:64:50:
9e:ec:18:fa:01:1c:78:80:59:dd:50:aa:59:37:04:
3c:8f:fa:69:f3:e2:30:3f:30:73:a6:6a:de:37:bb:
0f:94:58:b4:82:9e:40:44:af:fd:76:0e:55:7c:b8:
b7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C2:F4:07:E7:0E:41:95:21:C3:00:F4:2E:AE:5C:E9:6A:B1:79:81
X509v3 Authority Key Identifier:
keyid:1E:9B:85:62:61:5F:51:10:D3:55:1F:8E:C5:DD:05:6F:B0:A4:8A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4544e4-35db-4098-9040-539a0f26684d/1/HpuFYmFfURDTVR-Oxd0Fb7Ckiro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c2:fc:97:f9:e0:e3:89:5d:52:b2:41:42:1f:6d:52:d3:2c:
6a:9e:f2:26:6d:f7:f0:22:b3:e6:12:82:ff:55:06:0c:a9:72:
d8:93:c5:9b:c1:bc:38:50:3a:b3:dd:be:0d:1f:96:0e:3e:eb:
0b:6b:1d:de:ad:2a:3a:1b:69:21:1e:e9:e8:f2:c7:64:63:b7:
b6:45:ce:84:97:4e:96:1e:6f:d5:96:63:de:66:97:47:f7:8f:
91:d6:d9:ee:50:c9:1a:bc:b2:78:97:c0:d6:de:a6:f3:55:6b:
88:3c:e4:2d:e4:3d:ad:b6:69:7d:af:28:b5:d1:55:fe:4c:2b:
55:be:96:d9:ef:3d:88:8f:de:cf:12:d4:09:e5:ed:71:71:0a:
3f:82:3c:2b:94:f7:96:0a:e9:34:81:1c:b2:bf:ed:3a:df:48:
86:71:52:ed:e0:e9:c9:ed:24:e2:1b:05:29:2b:b9:cd:69:8a:
48:2f:8e:b7:a7:c3:93:ab:ae:c8:74:be:73:72:68:4c:e7:f0:
4b:b7:06:34:a6:16:f7:e6:45:a2:e5:13:c7:b6:10:e5:d8:13:
d8:12:72:83:8b:86:2b:8c:96:9a:3f:10:85:dc:0c:a7:07:a9:
f5:c2:b9:b3:1d:b6:0f:72:23:cd:bd:fe:bf:9b:ba:62:26:48:
7a:16:1f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 00:07:09 2026 by rpki-client