
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: LslOu9/28lChTUoPKz0IPsC2xNzm7ZYpe3bXG+Tc5Hk=
Subject key identifier: EE:01:FF:0B:87:69:83:06:04:3C:20:60:BF:7A:71:C1:C1:02:EB:75
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 019EDD9C5A3A03F65A7CD9A42C709E71D9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 1971
Signing time: Fri 19 Jun 2026 02:01:11 +0000
Manifest this update: Fri 19 Jun 2026 02:01:11 +0000
Manifest next update: Sat 20 Jun 2026 02:01:11 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: au_k5KTkHwmYgyGwQL9kaGDMGdc.roa (hash: TQ4e7aFpXjYOcX/z8GmwxlZOtaffODMat2Hj3Al3L2Y=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: fa8/ZnRzNs0UBK0pKG7EBjrUfJqgfVlqyi6Y9waV2Xg=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:9c:5a:3a:03:f6:5a:7c:d9:a4:2c:70:9e:71:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Jun 19 02:01:11 2026 GMT
Not After : Jun 20 02:01:11 2026 GMT
Subject: CN=ee01ff0b87698306043c2060bf7a71c1c102eb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:62:2c:7f:a0:84:90:16:d6:e3:d7:21:c3:
b1:8c:94:3e:4e:0c:30:17:9c:e7:65:5e:1e:1a:91:
3e:55:79:fc:0e:b4:d1:af:9d:fb:da:9d:3f:a2:8a:
e5:86:90:7e:09:df:28:e3:0d:bc:c3:98:15:e9:e3:
f4:79:47:fa:ce:04:76:17:ae:37:cd:a8:8a:b4:4e:
d4:5e:d0:42:a1:93:6c:76:c0:08:34:4b:fe:00:73:
f9:8d:36:49:9a:e2:c6:0e:44:5c:67:f8:b7:33:c8:
0d:08:92:58:be:3a:c4:2e:88:49:36:93:ec:4f:0a:
67:dc:33:dc:bb:da:5f:95:64:a3:15:95:57:c5:0e:
97:b8:16:3b:14:25:c2:de:a1:b9:d9:1f:05:92:4b:
43:cf:ff:8b:65:99:4c:13:f8:ea:d3:71:6f:93:93:
9d:6f:ed:dd:81:50:66:70:db:50:02:f8:dc:85:9f:
d5:76:ef:70:aa:97:00:4c:54:09:6f:c0:7b:da:dc:
46:97:c1:ee:2a:2e:47:69:e6:56:b3:6e:f1:eb:89:
75:32:5a:b0:fd:38:44:28:80:9b:7e:81:02:87:0a:
5f:58:35:6f:e2:38:18:d5:db:98:86:d9:49:a2:73:
00:93:73:b3:45:39:06:25:d0:09:38:f2:ec:34:0a:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:FF:0B:87:69:83:06:04:3C:20:60:BF:7A:71:C1:C1:02:EB:75
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7a:98:1c:e0:11:01:74:b0:60:a7:41:47:27:8f:1d:33:1c:
de:01:a9:e8:b8:e6:21:17:52:5b:90:a3:de:e2:c7:b6:a0:ea:
b4:03:39:3a:7e:f9:fe:c3:39:9b:f1:5a:04:77:1c:c5:f9:23:
2c:58:ae:56:a4:05:45:1f:36:f9:9f:dd:5b:69:7e:5d:0a:1b:
fb:48:df:68:e5:39:0f:5e:14:f3:e5:6f:c4:b5:c3:ff:7c:4f:
86:fa:f1:f5:26:b7:c6:b4:52:ae:1c:a3:b1:7c:a8:42:74:40:
9d:17:02:b3:5d:3a:9e:b5:3d:32:3e:27:01:75:9a:83:b4:09:
cf:ad:cb:45:ca:f7:d0:18:11:49:f8:88:ad:06:06:85:e5:35:
6a:9c:63:38:75:98:6f:0c:80:76:28:dc:f3:dd:d6:9c:ac:b8:
d7:33:40:1d:97:28:f1:44:f9:02:09:6f:16:68:b8:e4:7b:98:
5b:90:57:3c:64:93:61:33:c4:34:81:b7:38:00:63:1c:d6:e7:
44:64:7f:1d:0e:f8:01:0e:1a:f9:61:41:a2:68:c4:fb:36:5b:
d5:f8:5b:0a:2d:88:c6:f2:d4:f7:90:a9:c3:a5:98:1e:29:ff:
c2:c6:61:a0:1e:ce:03:19:e2:ab:f3:7b:3c:a2:34:11:a0:04:
bf:0d:63:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:27:06 2026 by rpki-client