Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
File: HHJWatYok1xux10O3dMXx7CnZpM.mft (raw, json)
Hash identifier: 8osegHh/YwTZEtquFGfdwq+byU27Bx6umSO8gH5e3Io=
Subject key identifier: 25:47:33:9A:F2:F8:84:BA:E3:78:50:DF:11:83:D8:31:7C:44:7A:00
Authority key identifier: 1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
Certificate issuer: /CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Certificate serial: 019FA3A9872B12DDF1AD79AB6972BB0E5F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
Manifest number: 0990
Signing time: Mon 27 Jul 2026 13:00:24 +0000
Manifest this update: Mon 27 Jul 2026 13:00:24 +0000
Manifest next update: Tue 28 Jul 2026 13:00:24 +0000
Files and hashes: 1: HHJWatYok1xux10O3dMXx7CnZpM.crl (hash: oSMDcAvmSFewCyeI8SHUiEW2BaDkcrxWWZlB2MXRcto=)
2: KRmva4VNbZlPY0IjvQ8shjxLrpg.roa (hash: zDEMwmWSm/SD9eAVElOu0hm0PpDvViLDY6P+ZmLzxTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:87:2b:12:dd:f1:ad:79:ab:69:72:bb:0e:5f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c72566ad628935c6ec75d0eddd317c7b0a76693
Validity
Not Before: Jul 27 13:00:24 2026 GMT
Not After : Jul 28 13:00:24 2026 GMT
Subject: CN=2547339af2f884bae37850df1183d8317c447a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:7c:a7:2b:ea:1d:11:e1:a0:d0:ba:0e:19:
72:5e:86:a2:4c:fa:ce:cc:60:d2:74:df:ca:a3:97:
56:71:9e:8d:f3:f1:88:88:f6:7b:06:1f:90:f2:7e:
e8:44:5b:6b:56:39:33:f8:f9:de:03:24:53:db:2a:
72:78:45:45:d0:91:6b:1f:0e:22:f1:0c:f0:d1:fc:
7b:ed:64:ff:cc:b4:0f:e6:ed:99:70:4e:d9:71:bc:
99:cc:f4:8d:37:f5:9c:4d:dd:94:11:73:af:2f:e9:
fc:5f:47:82:a5:28:d2:2d:00:57:18:6e:db:bf:ce:
e6:a6:5e:53:af:ca:fa:bb:b2:58:ce:5e:b2:cc:9d:
dc:9c:97:16:e3:c8:1d:9c:e4:34:7e:5d:4d:a5:33:
43:0e:1a:46:05:72:d9:de:b1:8c:96:b7:0c:3a:3a:
ee:41:d8:ac:93:25:14:9f:e3:ea:d8:ac:99:b1:b0:
58:27:d2:e3:9e:0c:8e:1e:ce:d4:1c:9b:e0:55:fa:
61:ac:f6:0e:65:82:5f:be:85:d3:19:0c:d0:ef:f4:
e4:d7:5d:69:df:46:be:bd:6b:05:08:d7:b4:fe:6f:
b8:e8:ac:a2:31:0d:e3:61:77:c1:a8:a1:d1:a1:c9:
e0:12:2f:b2:b4:a8:7b:b9:23:df:f1:c1:fb:fb:e8:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:47:33:9A:F2:F8:84:BA:E3:78:50:DF:11:83:D8:31:7C:44:7A:00
X509v3 Authority Key Identifier:
keyid:1C:72:56:6A:D6:28:93:5C:6E:C7:5D:0E:DD:D3:17:C7:B0:A7:66:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHJWatYok1xux10O3dMXx7CnZpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8ed7c9-0b45-4d21-a203-fc7521a25bba/1/HHJWatYok1xux10O3dMXx7CnZpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:99:ad:a1:ed:6e:2a:8b:d6:13:59:b0:59:88:35:12:ae:14:
65:7a:1c:ab:ec:aa:57:54:49:45:2e:36:38:2c:df:a1:d9:d2:
f8:ba:8f:8b:9f:f3:4d:2c:13:22:1f:81:bb:d2:a3:4f:f2:03:
36:b6:68:4d:2d:4a:81:75:e4:28:bc:0e:95:29:81:7a:2a:9c:
01:e1:6d:b9:ff:ab:75:d6:d1:a4:d6:c1:40:0a:c6:31:3e:67:
90:7d:e1:7d:a5:25:84:70:4b:37:68:05:ac:53:7c:5f:ec:c7:
7f:48:f9:87:55:1a:4f:6a:e8:9c:da:f5:bd:c7:c1:29:27:0a:
09:33:94:3b:63:c4:ea:13:9d:b7:50:a3:9e:c5:02:c9:fa:fc:
63:a4:3f:f7:82:fa:0b:d1:02:27:81:96:98:c2:86:44:26:7a:
47:82:5e:81:f8:45:66:c4:9f:ea:ff:24:03:e0:12:9b:eb:a0:
59:d9:a3:71:34:8e:4f:36:ae:f8:81:54:c6:84:0f:ee:67:87:
fa:6c:a5:19:5a:d6:c1:41:25:1e:7c:07:1f:06:e0:58:18:ba:
36:f5:43:c9:06:18:d9:fd:3d:ac:da:5f:43:97:3e:02:76:d3:
1c:a8:e7:54:9d:fa:ee:e2:b0:f5:91:7c:ff:1d:87:f5:8f:03:
88:ce:0c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:27:57 2026 by rpki-client