Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: rnNBDBK8eSV919IHZsHeeO6U7L5HakxeKv/NLpzBeAw=
Subject key identifier: 2D:84:4F:16:B1:AD:F1:E2:86:DE:80:6B:DD:CF:3F:65:A1:40:93:ED
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 019EDD9BFD9DBB50A217BF2457FB62DE752C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 196A
Signing time: Fri 19 Jun 2026 02:00:48 +0000
Manifest this update: Fri 19 Jun 2026 02:00:48 +0000
Manifest next update: Sat 20 Jun 2026 02:00:48 +0000
Files and hashes: 1: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: iQiKQCU1wyT74gzg0rC9SQBPO97pjXYZD9GKfy1q+YM=)
2: lFgdap73IKN-x6XHvGiMEA7qWxg.roa (hash: Cy3+NfE+G8o591s23SgJa1A+OW1ox1rr66Hm02Ee6OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:9b:fd:9d:bb:50:a2:17:bf:24:57:fb:62:de:75:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jun 19 02:00:48 2026 GMT
Not After : Jun 20 02:00:48 2026 GMT
Subject: CN=2d844f16b1adf1e286de806bddcf3f65a14093ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:92:75:01:62:a0:81:9a:d5:34:7f:60:8e:
98:3c:bb:cb:3a:70:d1:11:82:ce:59:b9:82:5c:6e:
6c:cf:dc:a1:f2:74:53:cb:8b:5a:ec:59:ee:bc:7b:
ce:e6:87:a0:4c:d4:af:c5:ce:80:a9:d5:13:6b:ac:
ce:bc:87:9d:4f:62:cb:fb:0f:f6:55:92:0a:2e:3b:
09:26:d8:53:de:80:e8:fd:e4:a1:ab:0e:29:6e:37:
fc:51:07:e2:77:f6:cc:a3:b9:64:84:f4:ff:3b:95:
7b:08:c4:7e:b0:7b:eb:14:a7:66:cc:d6:0a:c1:6f:
a0:5f:75:9d:42:1b:d5:48:35:c9:a9:e5:8f:b2:3c:
1c:07:a6:2f:ba:67:98:07:3c:48:c8:0f:50:17:28:
1a:f0:c0:79:d9:a5:e3:bb:27:eb:1b:8e:3d:3a:92:
c8:a2:4f:4e:ca:26:71:2f:27:7d:77:b1:e4:4b:73:
9a:96:5b:9d:19:58:b0:0a:0e:d2:48:4b:31:3d:d1:
65:86:b7:34:5c:f8:76:d9:2c:19:a8:c8:37:92:1e:
76:87:f2:30:06:c4:03:5a:6c:35:ed:68:d5:d4:f1:
5d:ac:d6:03:b0:13:ff:48:5a:60:c7:f0:8e:71:fb:
04:43:4c:dd:99:8a:64:2b:fb:ad:04:1f:a6:22:59:
74:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:4F:16:B1:AD:F1:E2:86:DE:80:6B:DD:CF:3F:65:A1:40:93:ED
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:88:11:5f:ef:fb:b4:c9:1c:c7:e7:ac:7c:00:02:f2:75:e9:
29:d7:f7:2d:be:45:c5:41:06:70:05:f6:11:91:6a:bc:5d:b6:
36:df:ae:c5:b0:7b:a3:41:60:20:cb:e8:a0:a1:1a:c8:c8:f9:
a0:e0:32:15:a7:1f:c7:c2:86:ee:c8:e8:a1:90:63:0f:b5:06:
be:f2:83:ef:29:3f:98:f7:04:e2:57:1b:af:c7:3d:a0:c2:63:
d3:3a:f5:8c:0f:6f:2b:5a:9a:3a:6d:3c:0f:50:53:77:4d:56:
7d:f3:27:28:1a:ad:93:cb:d0:4b:fe:59:3d:5b:81:11:66:2a:
15:31:53:f8:35:e1:50:0b:ba:89:55:47:98:42:bc:cf:35:41:
29:94:2e:87:f9:0b:36:4c:08:16:0f:f3:8e:48:fb:08:23:de:
75:b8:51:a4:64:12:56:e6:0c:60:cf:e4:0f:cf:1c:a4:cc:38:
65:fe:5c:99:4b:01:99:88:2c:66:d9:f2:a0:5f:2e:12:5e:46:
ef:2c:63:72:da:19:7e:13:26:4d:d3:da:d1:da:e2:de:6a:2d:
b2:a9:ac:ed:cc:6c:e4:2c:ed:80:1d:2d:9c:7b:9d:a0:bd:07:
ce:ab:fc:6d:06:9b:68:57:45:f0:77:f3:ec:2e:f6:6d:55:23:
a9:81:ff:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7dm/2du1CiF78kV/ti3nUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OWQ1YzFjYTg2NWIwNGI2ZjJiM2NjZDkwMTZlOTJkZGFk
OTlhYWIwHhcNMjYwNjE5MDIwMDQ4WhcNMjYwNjIwMDIwMDQ4WjAzMTEwLwYDVQQD
EygyZDg0NGYxNmIxYWRmMWUyODZkZTgwNmJkZGNmM2Y2NWExNDA5M2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaeSdQFioIGa1TR/YI6YPLvLOnDR
EYLOWbmCXG5sz9yh8nRTy4ta7FnuvHvO5oegTNSvxc6AqdUTa6zOvIedT2LL+w/2
VZIKLjsJJthT3oDo/eShqw4pbjf8UQfid/bMo7lkhPT/O5V7CMR+sHvrFKdmzNYK
wW+gX3WdQhvVSDXJqeWPsjwcB6YvumeYBzxIyA9QFyga8MB52aXjuyfrG449OpLI
ok9OyiZxLyd9d7HkS3OalludGViwCg7SSEsxPdFlhrc0XPh22SwZqMg3kh52h/Iw
BsQDWmw17WjV1PFdrNYDsBP/SFpgx/COcfsEQ0zdmYpkK/utBB+mIll0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2ETxaxrfHiht6Aa93PP2WhQJPtMB8GA1UdIwQY
MBaAFISdXByoZbBLbys8zZAW6S3a2ZqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUt
ZGRlMGQxMjczNWM2LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzQxOGItZWM3ZC00NmQyLTk5ZDUtZGRlMGQxMjczNWM2
LzEvaEoxY0hLaGxzRXR2S3p6TmtCYnBMZHJabXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4gRX+/7
tMkcx+esfAAC8nXpKdf3Lb5FxUEGcAX2EZFqvF22Nt+uxbB7o0FgIMvooKEayMj5
oOAyFacfx8KG7sjooZBjD7UGvvKD7yk/mPcE4lcbr8c9oMJj0zr1jA9vK1qaOm08
D1BTd01WffMnKBqtk8vQS/5ZPVuBEWYqFTFT+DXhUAu6iVVHmEK8zzVBKZQuh/kL
NkwIFg/zjkj7CCPedbhRpGQSVuYMYM/kD88cpMw4Zf5cmUsBmYgsZtnyoF8uEl5G
7yxjctoZfhMmTdPa0dri3motsqms7cxs5CztgB0tnHudoL0Hzqv8bQabaFdF8Hfz
7C72bVUjqYH/qg==
-----END CERTIFICATE-----
Generated at Fri Jun 19 04:31:14 2026 by rpki-client