Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: Iwg0NYqMaPSaNUGngy0d38znBJ9GdSoJyEeQEH4MGJ8=
Subject key identifier: B3:78:69:62:8F:08:B5:47:15:04:A8:DB:BA:26:55:16:43:36:63:BE
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019EDBAD9D1ADBC34519E7EE932F157DF32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 1969
Signing time: Thu 18 Jun 2026 17:00:48 +0000
Manifest this update: Thu 18 Jun 2026 17:00:48 +0000
Manifest next update: Fri 19 Jun 2026 17:00:48 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: QXXNfES0G4va5AMVZXVxh4DZBJ8JZxlOExzs3DBlQPs=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:ad:9d:1a:db:c3:45:19:e7:ee:93:2f:15:7d:f3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jun 18 17:00:48 2026 GMT
Not After : Jun 19 17:00:48 2026 GMT
Subject: CN=b37869628f08b5471504a8dbba265516433663be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:15:79:f9:74:54:a2:0b:ad:c9:e8:8e:63:
0c:fc:98:fd:b4:a6:f3:2c:d5:15:32:79:46:04:1c:
ef:a5:0e:03:99:2f:34:93:0b:76:c3:50:9b:20:18:
dc:d4:ec:23:6d:07:8a:62:51:8a:7a:fa:02:78:37:
8e:84:23:17:b2:05:7f:1c:d5:de:01:ad:29:86:41:
94:af:c8:d1:16:42:4c:00:55:3f:ed:9b:9f:d2:fd:
52:7b:53:a5:76:da:14:4b:a1:da:d4:58:d9:ee:be:
c1:5f:31:ab:e9:5d:fb:13:d3:0b:63:c9:ba:70:29:
d4:66:34:7a:41:fe:6a:0d:9f:4e:47:fc:8c:c5:d1:
75:9a:89:dd:bc:c4:39:4f:82:0b:be:f5:34:87:fc:
2e:1c:ce:5d:97:f2:6b:f0:4f:2d:ca:1e:18:63:19:
62:72:35:b0:5b:15:19:25:c5:28:8e:52:b5:82:d3:
22:b5:c0:e9:24:f3:f5:98:06:6a:41:dc:d3:30:68:
f7:9d:74:3b:34:12:55:d0:84:e9:f7:02:71:bc:0e:
9b:fd:c8:de:a9:ae:76:d3:44:14:4f:7d:32:5b:ef:
24:a4:7c:c9:1e:b1:d7:58:08:6a:cf:b0:45:76:21:
17:76:76:05:99:29:da:e7:f3:ec:ca:05:84:3a:9a:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:78:69:62:8F:08:B5:47:15:04:A8:DB:BA:26:55:16:43:36:63:BE
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ac:b8:fb:62:f8:54:a5:af:c3:b0:80:a9:5c:97:39:b9:96:
26:7f:56:79:bd:9f:a0:5f:25:0a:70:b1:de:65:cf:54:52:03:
98:a6:d4:18:77:38:2b:2e:0e:00:2c:4d:17:97:4a:00:01:68:
6e:bd:85:65:d0:c1:a6:1f:5d:5f:14:be:33:58:c8:2f:0f:95:
78:99:c6:fe:09:73:d8:a2:84:06:42:8d:f0:d7:8c:e4:10:0f:
52:e4:06:a4:0e:df:9e:64:c9:54:66:a9:37:68:fd:22:01:62:
cb:2c:86:27:32:de:09:0b:55:54:26:64:a9:fc:96:39:d5:f0:
53:3d:88:9b:cf:84:b7:54:bd:ed:36:b5:dc:5d:9f:98:ae:c6:
33:de:8d:4f:da:41:e3:e0:e7:ba:ef:10:a9:22:3a:80:f1:19:
eb:c4:07:4c:fc:7f:3f:ef:2d:50:66:0a:10:66:57:91:62:17:
5b:71:c2:cf:fd:5b:79:f1:b4:5a:eb:69:81:b2:8c:5b:78:a0:
bb:c4:ab:14:77:5f:59:df:a9:79:ff:7a:77:ca:f3:d5:63:48:
83:84:ba:ae:2f:9a:ae:90:db:15:ea:c9:17:cf:42:98:d8:a4:
c5:4c:2f:da:a2:5a:0f:33:9a:73:7a:01:d2:88:ac:5d:0b:34:
88:cc:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:36:33 2026 by rpki-client