Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
File: HcHvY3SZioToDl4w2gmmn0_-qJI.mft (raw, json)
Hash identifier: JgRmgH1Rdw1+fr6jDvg1Sk+Djo2jFt6QXRlFt93gQy4=
Subject key identifier: 69:30:4D:A4:10:79:65:54:6C:98:3B:32:E4:EF:07:BA:B5:3E:2A:1F
Authority key identifier: 1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
Certificate issuer: /CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Certificate serial: 019F10E56EA5567A21401E0727B36C13E8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
Manifest number: 023C
Signing time: Mon 29 Jun 2026 01:01:39 +0000
Manifest this update: Mon 29 Jun 2026 01:01:39 +0000
Manifest next update: Tue 30 Jun 2026 01:01:39 +0000
Files and hashes: 1: HcHvY3SZioToDl4w2gmmn0_-qJI.crl (hash: NRHN/2YmCzxcRmfuiXCN/WpObKNMjAGZT7ibFz+Fjlg=)
2: eydd9b9yJG4u8PDoXh8HYchwXcQ.asa (hash: XLJ8T9Pn5PjpqOyDdfyyg17qfr7NWdf6Z89qNT5NgvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:6e:a5:56:7a:21:40:1e:07:27:b3:6c:13:e8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc1ef6374998a84e80e5e30da09a69f4ffea892
Validity
Not Before: Jun 29 01:01:39 2026 GMT
Not After : Jun 30 01:01:39 2026 GMT
Subject: CN=69304da4107965546c983b32e4ef07bab53e2a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:91:b9:71:cc:71:ca:a6:cf:c7:46:20:fc:
61:1e:09:5f:8e:ff:68:18:ee:f7:39:1c:ef:64:41:
3d:de:86:55:c4:d7:91:2c:bd:5e:d7:66:17:8b:d8:
b2:ee:b2:d2:04:aa:51:47:39:b2:d0:eb:80:83:40:
9e:fc:32:3f:03:f5:29:c6:f6:f1:02:7b:56:b9:55:
d2:ca:80:23:8a:64:5d:dd:a4:31:6f:1e:d6:17:de:
9d:8d:52:92:6e:b4:68:12:f3:c4:93:3f:e9:44:b2:
42:a7:6e:f0:8f:fe:7c:95:5c:f1:cb:60:8e:c2:04:
0d:07:49:65:2c:79:f9:14:55:1b:26:13:25:21:5c:
a1:01:09:c9:ff:37:83:c7:34:9e:60:fc:d5:aa:b6:
1f:ec:0d:c5:29:1a:e0:5e:44:5c:f9:2e:cf:f7:4c:
04:85:36:be:55:cb:db:16:7a:84:44:f3:c9:59:69:
cf:14:6d:59:aa:6c:5a:aa:03:13:80:b2:91:b3:76:
c6:73:ba:36:7f:22:a6:ec:97:52:d8:df:f0:0c:6c:
0c:0a:70:04:5b:9b:57:cd:67:00:2f:eb:0c:bc:93:
81:95:b5:19:cc:42:e9:14:93:15:49:f1:3d:61:b4:
9c:62:dc:a2:ba:86:dd:f4:dc:82:ec:c5:43:91:56:
0e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:30:4D:A4:10:79:65:54:6C:98:3B:32:E4:EF:07:BA:B5:3E:2A:1F
X509v3 Authority Key Identifier:
keyid:1D:C1:EF:63:74:99:8A:84:E8:0E:5E:30:DA:09:A6:9F:4F:FE:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcHvY3SZioToDl4w2gmmn0_-qJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/964381-1e5d-4ff7-ae2d-146c9473b6cb/1/HcHvY3SZioToDl4w2gmmn0_-qJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2a:ce:44:29:76:33:e6:c8:eb:de:c8:b4:51:f9:c5:6f:9c:
55:0c:7e:04:35:8a:75:cc:24:50:c2:23:01:05:da:d4:63:67:
47:61:6a:d5:00:c8:5b:25:ee:1c:50:a6:d2:36:b5:1b:a1:96:
eb:c8:d5:08:2d:63:ef:04:4a:69:0d:71:59:42:b7:83:62:ac:
7c:f4:4a:91:e1:08:f5:4f:38:c2:ed:5b:5f:32:05:cf:43:86:
6a:4d:34:21:33:ef:74:a7:3e:08:0c:ee:0b:ed:47:4f:fd:4d:
cb:32:40:fb:10:50:72:d3:66:00:4a:17:40:16:89:52:e8:60:
0e:7c:28:fb:ac:74:8e:58:93:58:6d:00:e8:09:b0:2c:36:61:
8d:98:1e:d3:8e:5e:25:60:d2:fa:c8:d7:07:35:34:82:8a:04:
50:3d:7a:b5:21:43:19:28:a9:ac:ea:4c:4f:f1:31:ab:6a:da:
25:7b:26:7a:b8:fc:20:fe:25:b3:10:05:05:fb:c2:85:f2:e5:
6d:bc:55:fb:e4:c3:78:0e:eb:2d:02:73:39:7e:0b:9f:6a:84:
5a:cf:67:01:9a:0b:25:27:dc:0b:e1:2e:4f:70:4b:6b:53:14:
8e:d0:e0:2e:9d:ed:51:a2:de:d2:19:c1:82:50:22:ae:d1:66:
25:2f:f9:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5W6lVnohQB4HJ7NsE+jDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYzFlZjYzNzQ5OThhODRlODBlNWUzMGRhMDlhNjlmNGZm
ZWE4OTIwHhcNMjYwNjI5MDEwMTM5WhcNMjYwNjMwMDEwMTM5WjAzMTEwLwYDVQQD
Eyg2OTMwNGRhNDEwNzk2NTU0NmM5ODNiMzJlNGVmMDdiYWI1M2UyYTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0aRuXHMccqmz8dGIPxhHglfjv9o
GO73ORzvZEE93oZVxNeRLL1e12YXi9iy7rLSBKpRRzmy0OuAg0Ce/DI/A/Upxvbx
AntWuVXSyoAjimRd3aQxbx7WF96djVKSbrRoEvPEkz/pRLJCp27wj/58lVzxy2CO
wgQNB0llLHn5FFUbJhMlIVyhAQnJ/zeDxzSeYPzVqrYf7A3FKRrgXkRc+S7P90wE
hTa+VcvbFnqERPPJWWnPFG1ZqmxaqgMTgLKRs3bGc7o2fyKm7JdS2N/wDGwMCnAE
W5tXzWcAL+sMvJOBlbUZzELpFJMVSfE9YbScYtyiuobd9NyC7MVDkVYOCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkwTaQQeWVUbJg7MuTvB7q1PiofMB8GA1UdIwQY
MBaAFB3B72N0mYqE6A5eMNoJpp9P/qiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQt
MTQ2Yzk0NzNiNmNiLzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85NjQzODEtMWU1ZC00ZmY3LWFlMmQtMTQ2Yzk0NzNiNmNi
LzEvSGNIdlkzU1ppb1RvRGw0dzJnbW1uMF8tcUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgirORCl2
M+bI697ItFH5xW+cVQx+BDWKdcwkUMIjAQXa1GNnR2Fq1QDIWyXuHFCm0ja1G6GW
68jVCC1j7wRKaQ1xWUK3g2KsfPRKkeEI9U84wu1bXzIFz0OGak00ITPvdKc+CAzu
C+1HT/1NyzJA+xBQctNmAEoXQBaJUuhgDnwo+6x0jliTWG0A6AmwLDZhjZge045e
JWDS+sjXBzU0gooEUD16tSFDGSiprOpMT/Exq2raJXsmerj8IP4lsxAFBfvChfLl
bbxV++TDeA7rLQJzOX4Ln2qEWs9nAZoLJSfcC+EuT3BLa1MUjtDgLp3tUaLe0hnB
glAirtFmJS/5dQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:21 2026 by rpki-client