Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: T1Fk+z3A2oYL02OD+Xq85HUzRPgUQloLNj/RGBjq498=
Subject key identifier: 2C:18:A0:B0:BC:6A:87:AE:3E:78:95:20:62:A7:8F:91:91:00:A4:73
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 019F129CAE69DA8B424FD06BA25E97344FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 14AE
Signing time: Mon 29 Jun 2026 09:01:25 +0000
Manifest this update: Mon 29 Jun 2026 09:01:25 +0000
Manifest next update: Tue 30 Jun 2026 09:01:25 +0000
Files and hashes: 1: 2E1p8fabJ0AaZVQtK27is72W3zA.roa (hash: seOc2odI/aAB9kmMiUcr+Fn5jR9zKFiFx7mITmVnxdg=)
2: hSHIj4UWxpZV5CJ62FEUxANmmx4.roa (hash: DokJgpyiq/4HexdzVhkwpYdCq1bUBWCyEOpnC3xmI30=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: HdtPL94/jlT/AIjpbWQNxkkWs3CfZAkr2EjjHYsIJOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:ae:69:da:8b:42:4f:d0:6b:a2:5e:97:34:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Jun 29 09:01:25 2026 GMT
Not After : Jun 30 09:01:25 2026 GMT
Subject: CN=2c18a0b0bc6a87ae3e78952062a78f919100a473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:77:cc:ca:62:4a:9c:d0:b5:58:a9:64:27:
33:d0:73:ca:fa:b1:3c:c7:dc:cd:e6:69:4a:47:b0:
87:c5:4c:8f:6a:4b:db:80:84:45:a9:c2:a0:81:99:
63:bf:06:46:03:c5:04:f5:5a:f9:42:5e:f9:02:00:
73:88:29:7b:0a:dd:b3:22:e8:b1:d3:d2:1c:8a:47:
a2:55:d5:46:53:81:ea:94:46:73:e2:44:68:86:da:
92:f0:68:aa:00:f4:77:ac:22:95:ba:01:3d:7d:79:
a1:26:68:95:1b:2b:89:ea:c6:81:e5:3b:2b:29:7a:
59:e0:7a:8b:bc:e7:42:51:43:c9:0b:c9:ea:d5:d9:
1b:22:14:b7:7c:17:c4:a6:ca:30:2d:9b:8d:24:fd:
29:ec:ff:92:d5:92:c8:62:16:91:ae:6a:14:93:17:
a0:70:a8:14:79:69:f1:0a:ce:31:6e:3b:6b:f4:12:
0e:9d:3e:1b:70:dd:e1:66:0d:f8:e9:ad:b6:af:39:
08:c5:26:29:1d:c5:91:3f:5a:33:83:99:88:ca:d5:
40:62:85:09:1d:2d:6c:2d:24:45:6c:5a:df:44:66:
28:0d:ea:0d:94:23:ee:af:09:20:c4:93:ea:46:ed:
27:af:3a:12:c8:2f:47:b5:47:b9:de:04:24:10:b9:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:18:A0:B0:BC:6A:87:AE:3E:78:95:20:62:A7:8F:91:91:00:A4:73
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:31:8b:e7:9f:f4:aa:31:01:ff:4f:2b:51:79:8c:57:95:f1:
4f:9b:14:50:58:7d:77:4f:8f:ad:54:1c:9d:56:15:94:7c:94:
16:1d:3e:9d:dd:76:fc:4e:6b:e3:4e:6c:c6:8c:20:a5:26:d3:
0c:08:61:8e:79:8c:37:c4:a3:34:3f:87:04:74:f5:af:46:50:
59:f6:9b:16:e2:c9:fd:86:b1:23:a4:7e:19:db:a0:45:06:ff:
fc:3f:84:e5:eb:b5:f2:79:e2:dd:c5:8d:0c:6c:72:e0:f0:51:
a0:da:dd:2c:b7:cb:50:fd:6b:56:bb:5f:fd:a8:10:a6:ec:43:
0a:75:22:88:88:c2:43:5e:df:7c:55:17:29:0f:45:d5:c2:ec:
d1:da:c6:02:af:e7:b5:bc:69:34:cc:2f:85:8f:0d:f6:fc:e2:
ed:ff:e7:61:2b:46:da:47:7f:b5:38:9f:78:7a:ec:67:a2:42:
47:1c:40:25:bf:3b:53:36:03:49:b6:b8:f2:7e:90:c0:17:7c:
42:07:e9:08:3e:db:90:d0:cb:e2:13:ef:f9:9c:28:5c:7b:5e:
56:34:e3:2e:19:08:42:6a:a1:fb:7a:06:15:3c:e8:9f:25:c5:
70:b7:c8:12:4a:8d:ad:aa:4a:29:ef:82:c3:cc:1b:24:31:5b:
2c:99:76:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SnK5p2otCT9Brol6XNE+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGM4MTc2ZDljNDJjNzA0YjMxMDkxMzMwOTQ3MDM1MWJi
NTk5ZTUwHhcNMjYwNjI5MDkwMTI1WhcNMjYwNjMwMDkwMTI1WjAzMTEwLwYDVQQD
EygyYzE4YTBiMGJjNmE4N2FlM2U3ODk1MjA2MmE3OGY5MTkxMDBhNDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7Z3zMpiSpzQtVipZCcz0HPK+rE8
x9zN5mlKR7CHxUyPakvbgIRFqcKggZljvwZGA8UE9Vr5Ql75AgBziCl7Ct2zIuix
09IcikeiVdVGU4HqlEZz4kRohtqS8GiqAPR3rCKVugE9fXmhJmiVGyuJ6saB5Tsr
KXpZ4HqLvOdCUUPJC8nq1dkbIhS3fBfEpsowLZuNJP0p7P+S1ZLIYhaRrmoUkxeg
cKgUeWnxCs4xbjtr9BIOnT4bcN3hZg346a22rzkIxSYpHcWRP1ozg5mIytVAYoUJ
HS1sLSRFbFrfRGYoDeoNlCPurwkgxJPqRu0nrzoSyC9HtUe53gQkELmIOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwYoLC8aoeuPniVIGKnj5GRAKRzMB8GA1UdIwQY
MBaAFIVMgXbZxCxwSzEJEzCUcDUbtZnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjkt
YjA3ZjAxNmExNzYyLzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjktYjA3ZjAxNmExNzYy
LzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTGL55/0
qjEB/08rUXmMV5XxT5sUUFh9d0+PrVQcnVYVlHyUFh0+nd12/E5r405sxowgpSbT
DAhhjnmMN8SjND+HBHT1r0ZQWfabFuLJ/YaxI6R+GdugRQb//D+E5eu18nni3cWN
DGxy4PBRoNrdLLfLUP1rVrtf/agQpuxDCnUiiIjCQ17ffFUXKQ9F1cLs0drGAq/n
tbxpNMwvhY8N9vzi7f/nYStG2kd/tTifeHrsZ6JCRxxAJb87UzYDSba48n6QwBd8
QgfpCD7bkNDL4hPv+ZwoXHteVjTjLhkIQmqh+3oGFTzonyXFcLfIEkqNrapKKe+C
w8wbJDFbLJl2Lg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:04 2026 by rpki-client