Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: saa3adj/Tf+YHRosaonrBUELEBWhnpWvM4O1YueupN8=
Subject key identifier: 13:4B:75:18:17:BD:E6:03:38:2A:07:6E:92:AB:AD:13:79:5F:FF:5D
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 019EB98F07E0409509211DA1931D1B215C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 062B
Signing time: Fri 12 Jun 2026 02:00:19 +0000
Manifest this update: Fri 12 Jun 2026 02:00:19 +0000
Manifest next update: Sat 13 Jun 2026 02:00:19 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: v4tmVwo4hmjUnAofWccwuFu8NXqNdqMmagAuiSvmbQs=)
2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=)
3: lYHYX5psOxKD68wkCQ91Mu2FzMM.roa (hash: sDNPjItrBcFZ5sKyPbAqc1GCxh1mlgDVqyaKhMPK/Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:07:e0:40:95:09:21:1d:a1:93:1d:1b:21:5c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Jun 12 02:00:19 2026 GMT
Not After : Jun 13 02:00:19 2026 GMT
Subject: CN=134b751817bde603382a076e92abad13795fff5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:d0:01:8b:4a:7b:43:fe:cc:28:d1:9f:15:
ad:0d:59:86:81:e9:9f:12:ea:03:20:74:27:0e:3c:
87:49:99:c5:22:74:d2:7c:57:04:ad:b1:0e:8f:ce:
bb:fd:34:86:22:3b:a4:c9:93:5d:e2:df:e9:49:d5:
c4:0c:1d:42:d0:d6:ef:a3:e6:6d:d7:32:9c:73:4e:
25:95:1c:6c:a7:72:25:cf:c6:dd:5f:8a:b5:ae:76:
42:f2:da:83:51:29:ba:bc:e5:b5:74:41:28:a5:53:
ea:a4:d8:f7:45:8f:cc:12:ef:df:e4:cd:50:fb:f5:
37:38:f5:c8:ea:f1:d4:9a:d8:24:31:c5:2b:d3:13:
6c:21:84:87:0d:b1:11:c7:d6:c5:64:e0:31:0f:07:
35:6f:bd:6f:c2:e3:e0:07:ec:da:74:4a:cb:fe:46:
61:16:38:9e:3f:27:69:f0:6e:d7:9b:16:e5:95:e3:
53:2c:d2:32:c5:97:49:bc:6e:05:13:1a:b4:aa:d4:
11:30:f7:d1:71:b4:de:b6:08:a0:70:fb:94:66:da:
6f:ee:bd:35:84:73:93:fa:80:51:fa:33:80:74:c9:
be:62:23:b8:db:40:97:82:38:77:95:43:19:36:5f:
69:5a:5b:24:6d:2c:38:72:3a:f2:eb:a4:99:54:70:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4B:75:18:17:BD:E6:03:38:2A:07:6E:92:AB:AD:13:79:5F:FF:5D
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4a:99:42:b0:a9:64:5d:98:7d:1d:49:8e:03:26:ca:d7:c9:
ca:9a:3a:81:f7:99:17:e7:11:9c:ea:85:b1:1a:21:76:af:64:
79:9c:d9:31:7d:7f:45:e0:f3:e8:73:6e:e8:4a:a0:fd:fd:be:
d1:09:18:0d:dc:99:c8:29:1a:87:ed:2d:67:76:67:9d:5f:5f:
b1:c1:46:03:14:c2:eb:6e:5b:6b:95:3f:8c:43:db:46:65:3f:
85:9f:d1:01:c4:79:3a:77:91:43:b1:90:d3:14:20:44:fc:bf:
1f:bd:0d:d9:c4:01:e6:eb:ef:68:a8:9c:7e:d3:e3:7e:b5:cf:
d7:64:38:ab:c1:4a:a7:d6:11:24:82:eb:08:9f:92:a5:b6:f3:
4f:e0:03:fb:fa:c2:10:df:ab:22:ad:95:46:95:b7:b7:f3:31:
c6:bf:bd:9f:61:2b:2d:02:95:52:45:97:91:dd:43:f5:2d:29:
ea:4f:75:02:b1:72:21:1d:04:db:a8:01:a8:a3:22:84:7b:aa:
f2:9e:ef:84:1c:d8:a1:69:86:23:25:ac:02:83:ae:da:26:48:
aa:6a:9c:74:7c:48:ab:d1:30:07:cc:4e:60:8b:57:2b:14:0b:
2f:ea:48:34:0f:9b:be:77:b0:fc:40:9c:86:dd:2f:f7:67:c2:
25:94:73:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65jwfgQJUJIR2hkx0bIVyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjEwNGEyZDMzNTA4MjdjYWQxMWExNjU2OWNhYjU5ZjBm
ODc3NGMwHhcNMjYwNjEyMDIwMDE5WhcNMjYwNjEzMDIwMDE5WjAzMTEwLwYDVQQD
EygxMzRiNzUxODE3YmRlNjAzMzgyYTA3NmU5MmFiYWQxMzc5NWZmZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9zQAYtKe0P+zCjRnxWtDVmGgemf
EuoDIHQnDjyHSZnFInTSfFcErbEOj867/TSGIjukyZNd4t/pSdXEDB1C0Nbvo+Zt
1zKcc04llRxsp3Ilz8bdX4q1rnZC8tqDUSm6vOW1dEEopVPqpNj3RY/MEu/f5M1Q
+/U3OPXI6vHUmtgkMcUr0xNsIYSHDbERx9bFZOAxDwc1b71vwuPgB+zadErL/kZh
FjiePydp8G7XmxblleNTLNIyxZdJvG4FExq0qtQRMPfRcbTetgigcPuUZtpv7r01
hHOT+oBR+jOAdMm+YiO420CXgjh3lUMZNl9pWlskbSw4cjry66SZVHD3BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNLdRgXveYDOCoHbpKrrRN5X/9dMB8GA1UdIwQY
MBaAFBxhBKLTNQgnytEaFlacq1nw+HdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2Ut
MTQ5MDc5NjI3NzEzLzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85Y2RlZGItNGRkNS00ZGFjLTk3N2UtMTQ5MDc5NjI3NzEz
LzEvSEdFRW90TTFDQ2ZLMFJvV1ZweXJXZkQ0ZDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkqZQrCp
ZF2YfR1JjgMmytfJypo6gfeZF+cRnOqFsRohdq9keZzZMX1/ReDz6HNu6Eqg/f2+
0QkYDdyZyCkah+0tZ3ZnnV9fscFGAxTC625ba5U/jEPbRmU/hZ/RAcR5OneRQ7GQ
0xQgRPy/H70N2cQB5uvvaKicftPjfrXP12Q4q8FKp9YRJILrCJ+SpbbzT+AD+/rC
EN+rIq2VRpW3t/Mxxr+9n2ErLQKVUkWXkd1D9S0p6k91ArFyIR0E26gBqKMihHuq
8p7vhBzYoWmGIyWsAoOu2iZIqmqcdHxIq9EwB8xOYItXKxQLL+pINA+bvnew/ECc
ht0v92fCJZRzRw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:17 2026 by rpki-client