Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
File: HI4XQR4BAMkUsEDVFMKOHX02mR4.mft (raw, json)
Hash identifier: WGuJCcglMcMu/y4URvfkZkstBxpfgICYPhg6jpys6fY=
Subject key identifier: 46:DE:2B:A3:B2:12:44:11:D7:67:96:3B:76:3D:81:2C:D6:3A:6E:F0
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 019EFC1670255E6329EDCE20DC0D4FB6179F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
Manifest number: 168E
Signing time: Thu 25 Jun 2026 00:03:09 +0000
Manifest this update: Thu 25 Jun 2026 00:03:09 +0000
Manifest next update: Fri 26 Jun 2026 00:03:09 +0000
Files and hashes: 1: HI4XQR4BAMkUsEDVFMKOHX02mR4.crl (hash: om06ewGEzqG3aYnZ3qnsdw1ipUNU8lP9KFSZ9rYEdGE=)
2: HSpB2eFH5qQJExRUSXAazkZkJj4.asa (hash: bG8NNOqUhifI+pCmT+bsiXmMcdPVXMOjq2aCbNYhxsc=)
3: p02eC1ERUvLK_cq6pNwVZ0xig4Y.roa (hash: KZhXcbJBxIMqDSefFB3crfwCuJzwZV0N5GJvMfY9BtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:16:70:25:5e:63:29:ed:ce:20:dc:0d:4f:b6:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Jun 25 00:03:09 2026 GMT
Not After : Jun 26 00:03:09 2026 GMT
Subject: CN=46de2ba3b2124411d767963b763d812cd63a6ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:47:9b:ae:a2:13:db:08:5b:1a:a5:b2:86:
ad:4a:02:24:d9:58:00:cb:16:08:6e:da:4f:1b:ee:
8c:ab:68:1f:15:9e:d1:28:cb:fd:96:20:07:13:57:
14:de:4a:51:4d:b5:10:c3:60:ed:32:b3:49:5d:2d:
0d:43:b8:7d:aa:40:1f:87:ea:fa:0c:e1:d8:26:dc:
6c:28:83:c8:ab:a5:8b:f5:d8:48:5a:0b:84:b3:0c:
fa:a7:79:f8:20:e8:74:ea:69:1a:ba:95:8d:d9:73:
59:96:40:d7:cd:7f:57:87:42:1d:9f:e9:32:2c:62:
d3:d2:6e:a3:40:27:e2:da:01:ea:f5:a4:d9:95:29:
17:70:98:74:d4:db:0a:fe:08:28:81:ba:f2:0d:5b:
54:4a:7c:ef:f3:16:a6:61:e9:a7:98:87:5e:dc:bd:
12:02:cb:a9:b5:e8:8b:7e:12:ae:33:85:08:a2:69:
b6:fd:8d:84:59:84:5a:10:24:07:a5:cd:ca:c4:85:
2d:8a:60:ae:e1:05:63:1e:40:5b:8b:b6:35:e3:b4:
5d:55:0b:6b:50:35:ef:82:77:72:27:c6:4f:b3:e3:
c6:28:f4:0c:65:0a:e9:de:51:d0:95:6a:80:18:f5:
55:f9:22:5f:bf:8d:74:5a:4f:8d:8a:b5:60:b7:d9:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DE:2B:A3:B2:12:44:11:D7:67:96:3B:76:3D:81:2C:D6:3A:6E:F0
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d9:ae:ec:44:c1:d3:89:6a:38:ec:6a:49:73:43:ef:37:ec:
ce:92:4c:6f:96:e3:a1:a3:d7:0b:79:bf:14:d5:b6:c0:b9:81:
e7:e6:ce:3e:b6:a8:bf:cd:d8:0f:53:90:a1:1a:0d:16:b6:20:
ea:8c:a3:9e:d8:91:49:6a:76:76:69:8f:79:0a:51:91:7d:f4:
fa:10:4a:17:00:c9:0a:37:9e:e6:4f:44:99:54:5c:96:b5:66:
de:e5:97:07:57:f8:c7:ce:fe:c9:7e:2d:32:7b:fa:29:53:c2:
eb:39:89:a1:1d:64:b7:52:80:57:b8:82:d0:0d:b4:90:67:e2:
eb:d9:2c:c1:35:24:d6:95:14:90:45:28:fe:4e:3e:6d:6f:e3:
c9:d7:4a:fd:38:d0:8e:0a:30:92:8a:7b:ef:15:b0:bc:11:44:
3d:af:f2:90:8c:3b:15:bc:1e:8f:5b:a2:23:88:37:49:17:27:
3b:1f:e1:1f:af:03:3d:54:d2:d7:b6:dc:0c:57:42:6b:d1:5d:
87:0e:12:25:c2:1a:ef:cf:41:c4:ef:f3:63:29:7e:ba:89:34:
27:86:b3:74:02:6f:b7:bd:0f:c6:16:56:eb:ee:94:a4:6e:f2:
54:d7:cc:57:9f:21:e4:e2:ed:dd:6c:7b:24:5e:bb:e2:64:df:
0a:20:b1:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ78FnAlXmMp7c4g3A1PthefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOGUxNzQxMWUwMTAwYzkxNGIwNDBkNTE0YzI4ZTFkN2Qz
Njk5MWUwHhcNMjYwNjI1MDAwMzA5WhcNMjYwNjI2MDAwMzA5WjAzMTEwLwYDVQQD
Eyg0NmRlMmJhM2IyMTI0NDExZDc2Nzk2M2I3NjNkODEyY2Q2M2E2ZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma9Hm66iE9sIWxqlsoatSgIk2VgA
yxYIbtpPG+6Mq2gfFZ7RKMv9liAHE1cU3kpRTbUQw2DtMrNJXS0NQ7h9qkAfh+r6
DOHYJtxsKIPIq6WL9dhIWguEswz6p3n4IOh06mkaupWN2XNZlkDXzX9Xh0Idn+ky
LGLT0m6jQCfi2gHq9aTZlSkXcJh01NsK/ggogbryDVtUSnzv8xamYemnmIde3L0S
AsupteiLfhKuM4UIomm2/Y2EWYRaECQHpc3KxIUtimCu4QVjHkBbi7Y147RdVQtr
UDXvgndyJ8ZPs+PGKPQMZQrp3lHQlWqAGPVV+SJfv410Wk+NirVgt9lRkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbeK6OyEkQR12eWO3Y9gSzWOm7wMB8GA1UdIwQY
MBaAFByOF0EeAQDJFLBA1RTCjh19NpkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt
NmI0OWEzODkzYzc5LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5
LzEvSEk0WFFSNEJBTWtVc0VEVkZNS09IWDAybVI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdmu7ETB
04lqOOxqSXND7zfszpJMb5bjoaPXC3m/FNW2wLmB5+bOPraov83YD1OQoRoNFrYg
6oyjntiRSWp2dmmPeQpRkX30+hBKFwDJCjee5k9EmVRclrVm3uWXB1f4x87+yX4t
Mnv6KVPC6zmJoR1kt1KAV7iC0A20kGfi69kswTUk1pUUkEUo/k4+bW/jyddK/TjQ
jgowkop77xWwvBFEPa/ykIw7Fbwej1uiI4g3SRcnOx/hH68DPVTS17bcDFdCa9Fd
hw4SJcIa789BxO/zYyl+uok0J4azdAJvt70PxhZW6+6UpG7yVNfMV58h5OLt3Wx7
JF674mTfCiCxXQ==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:19 2026 by rpki-client