Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
File: HGEEotM1CCfK0RoWVpyrWfD4d0w.mft (raw, json)
Hash identifier: WftI+JF6FbYo5L/bU2KAKuAbzrUAdGe5bDkRuVM6gPA=
Subject key identifier: 27:68:1E:8C:9E:E6:28:D9:48:BF:58:FD:A6:5F:00:77:0B:2A:5C:E7
Authority key identifier: 1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
Certificate issuer: /CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Certificate serial: 01A08AFA47EBCFF990ACCA7C512A1E42902A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
Manifest number: 071C
Signing time: Thu 10 Sep 2026 11:00:53 +0000
Manifest this update: Thu 10 Sep 2026 11:00:53 +0000
Manifest next update: Fri 11 Sep 2026 11:00:53 +0000
Files and hashes: 1: HGEEotM1CCfK0RoWVpyrWfD4d0w.crl (hash: dEMeaHJLJx/WDABcR9FJV8jjPcn0LxENZoxB6nRks3w=)
2: Oseq2GLb6xrjZkXXHe4BWK34A9g.roa (hash: D4503oRCcfEEMSFLDRNXtNfMdtm4x7ryMVkIdTttA/E=)
3: lYHYX5psOxKD68wkCQ91Mu2FzMM.roa (hash: sDNPjItrBcFZ5sKyPbAqc1GCxh1mlgDVqyaKhMPK/Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:47:eb:cf:f9:90:ac:ca:7c:51:2a:1e:42:90:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6104a2d3350827cad11a16569cab59f0f8774c
Validity
Not Before: Sep 10 11:00:53 2026 GMT
Not After : Sep 11 11:00:53 2026 GMT
Subject: CN=27681e8c9ee628d948bf58fda65f00770b2a5ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4b:86:a3:f9:33:af:f0:fa:f0:5b:46:5a:bf:
53:c2:f9:65:bf:56:d7:79:e8:81:77:7a:b1:0c:8c:
cf:a6:43:8c:ad:90:8e:df:a6:bd:89:9a:fe:13:e3:
a0:77:24:d5:58:ae:6e:fe:bf:6d:c5:c6:64:4c:c8:
a2:37:f0:a5:c5:06:42:fc:e9:c4:8d:84:c7:00:44:
fe:19:18:43:e1:52:95:62:76:a5:ce:89:32:0d:ae:
70:39:a7:33:b8:a5:01:76:31:26:f0:91:de:1e:ae:
cf:3c:89:2b:9f:2a:5a:b5:40:80:96:e0:ea:c6:5a:
df:a0:54:c7:82:46:b7:2d:f3:6d:25:2e:ea:97:ec:
12:12:c6:27:de:9c:4b:0d:9f:76:cd:ff:5a:e6:d0:
1f:5d:c2:bc:50:44:d8:e9:3b:86:c5:b5:fd:c8:7c:
22:63:72:e1:b5:b0:1e:22:f8:d5:e9:f6:bf:d1:b8:
a8:b1:4a:23:e3:f6:30:16:59:98:5a:ed:87:3f:ec:
a4:3f:33:29:21:07:85:12:55:bd:c1:34:99:f2:bd:
38:3a:3c:e6:16:ab:7f:70:ed:8a:b6:42:15:75:b2:
4d:96:dd:59:e2:6b:f8:fb:91:a7:ca:a9:f2:35:92:
89:c3:62:62:b4:9b:4f:3c:d0:35:ac:bb:b5:9c:a1:
6d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:68:1E:8C:9E:E6:28:D9:48:BF:58:FD:A6:5F:00:77:0B:2A:5C:E7
X509v3 Authority Key Identifier:
keyid:1C:61:04:A2:D3:35:08:27:CA:D1:1A:16:56:9C:AB:59:F0:F8:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGEEotM1CCfK0RoWVpyrWfD4d0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9cdedb-4dd5-4dac-977e-149079627713/1/HGEEotM1CCfK0RoWVpyrWfD4d0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:f9:d0:e9:7f:2f:e7:67:cc:2b:fc:24:21:c7:42:67:8a:
83:f5:c1:1f:85:84:4d:a1:5a:37:f1:24:c9:10:36:b0:5c:c8:
b0:f3:31:da:0b:d6:da:ff:24:39:c7:49:60:5a:0c:d0:ea:a3:
c5:18:c3:c4:d5:8c:50:aa:89:bb:76:0b:84:9d:0f:7d:29:2e:
40:51:ff:ba:21:7a:19:ae:d0:0b:50:ea:96:c7:ac:d0:66:ab:
ec:e8:c1:20:88:46:9f:70:fd:9e:d5:91:76:9f:94:35:43:3e:
e6:65:38:43:69:1c:3f:0c:fd:11:21:db:64:b8:65:3c:76:8a:
79:95:0f:78:93:96:5d:05:f6:d1:5d:a4:f3:f5:ad:95:ec:e2:
39:99:03:d7:e1:49:3d:c1:81:64:29:12:ca:11:11:4c:a1:14:
03:88:ff:17:b2:9b:46:78:fe:a2:be:f9:bf:4c:4a:7f:d9:8b:
4f:9d:bf:c2:1b:34:4a:df:2f:e6:51:0e:df:79:02:63:8f:bc:
7e:64:42:23:a8:5b:0b:8e:91:e8:4d:08:7f:97:a5:1f:e8:bc:
73:3b:cc:09:d8:db:50:35:81:90:df:12:cb:2b:6c:5b:25:5f:
e2:62:72:95:e8:3a:b1:5c:f5:45:8e:d6:67:bc:30:3f:1f:b1:
f8:c9:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:38 2026 by rpki-client