Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: 28jOpdgPEvIaKuWmB/cVrapWiof8iVXGYV3adgLCFvw=
Subject key identifier: 18:13:C0:BA:F5:09:4E:52:2A:71:D3:94:4E:CA:5A:2E:45:20:B7:EA
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019EFA26571C85F9C7FB4412CC54B1EB59C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 0655
Signing time: Wed 24 Jun 2026 15:01:17 +0000
Manifest this update: Wed 24 Jun 2026 15:01:17 +0000
Manifest next update: Thu 25 Jun 2026 15:01:17 +0000
Files and hashes: 1: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: +ECCHCAQvCIsCj5R2ZJ1otsECQtlWqyDVssx+dKOhQ0=)
2: oXRKH5b-T-CRxs2hxBp_XOCDBZY.roa (hash: CXD7uTJndYpsuBoJT2/svXnMWPhH6ma+JfEwHCQE7gU=)
3: tIddSJpZ8A8bsH1Q9vYKm2A610E.asa (hash: FxJTYjqaIVsvB66XTycCPAWGxY0433SU6Z6bkpRMAQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:26:57:1c:85:f9:c7:fb:44:12:cc:54:b1:eb:59:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Jun 24 15:01:17 2026 GMT
Not After : Jun 25 15:01:17 2026 GMT
Subject: CN=1813c0baf5094e522a71d3944eca5a2e4520b7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5e:93:e1:a4:a0:d9:89:d9:73:b1:6f:ef:27:
29:70:93:93:d8:a8:7c:00:8b:72:89:d8:40:05:f4:
8d:cd:10:50:b8:59:b4:65:9e:d8:4f:5a:40:37:a4:
bd:6a:63:a8:70:0a:3b:f6:84:f9:5a:7a:b6:d4:68:
d6:9b:2c:2b:b2:f9:a9:95:76:5e:50:ee:7b:00:5b:
11:fa:d4:52:97:92:31:00:3b:7c:fe:11:a6:53:4d:
29:92:a4:ef:f8:f4:99:96:f1:6a:4b:53:44:cf:17:
03:a9:a9:5c:a4:80:f8:1b:61:e3:ec:75:ec:1e:39:
6e:fa:b9:00:d1:e0:ca:b4:82:31:e9:46:77:41:f7:
83:3f:96:27:63:d6:65:b6:a6:17:fb:9f:d3:a0:21:
bb:34:35:2b:d9:5a:a2:f8:6f:1b:29:b6:04:e5:72:
5b:52:d4:3e:2b:12:aa:24:22:45:10:3f:c5:f1:18:
79:ef:29:37:30:53:58:37:34:89:77:56:35:90:72:
ba:8b:14:00:19:88:dd:28:f9:51:2c:4b:8a:fb:d2:
b3:59:8c:ce:0b:a3:6a:c1:a1:46:0a:1f:b8:61:3d:
1f:58:e7:59:68:aa:43:85:76:41:61:46:af:35:a1:
fd:e0:10:f3:b2:7f:92:a8:75:7a:0e:f3:09:b5:6b:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:13:C0:BA:F5:09:4E:52:2A:71:D3:94:4E:CA:5A:2E:45:20:B7:EA
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:32:ba:97:2c:7b:54:a2:9d:a3:46:b9:c4:c1:82:9b:65:6d:
8d:98:76:4e:62:25:91:e8:b5:06:7a:5c:06:f1:37:00:23:25:
d7:9a:86:58:b4:a5:db:26:05:b1:8f:34:a2:0d:7f:83:76:e4:
50:74:5f:e8:01:d2:01:8e:df:05:7d:7b:03:b7:08:ce:79:24:
16:fd:43:a1:09:81:47:34:94:98:c3:c2:42:ea:a0:0f:17:36:
9f:c6:e9:eb:3d:03:d2:02:d5:3c:8e:82:e0:db:2d:c0:9e:a0:
35:06:9a:3d:da:d4:b9:24:80:35:04:7b:ab:b3:37:96:df:87:
7f:e3:ee:d2:1a:89:e6:1d:1d:e6:1e:fb:4b:5a:f8:f0:06:94:
25:13:73:e6:e6:db:cb:f6:2e:fa:10:4a:02:f1:da:f2:05:41:
ed:c1:62:cd:98:05:bd:e5:66:70:ec:12:d5:53:aa:cc:a3:dc:
ff:78:3e:87:5a:6d:34:d8:30:e0:7c:af:d6:41:c2:97:c3:7c:
d4:e2:0c:06:5c:82:ef:69:be:09:bb:33:f6:7a:e4:6d:1d:c3:
f1:57:61:3d:4f:e5:fa:8f:9c:2e:29:0c:27:39:c2:97:78:93:
dc:1a:33:16:86:95:9a:c0:a2:30:51:09:72:b1:87:0f:3d:c5:
0b:33:1d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 00:11:33 2026 by rpki-client