Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
File: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft (raw, json)
Hash identifier: lo7IMk1iKlwJPVOidDP2DaICBsAdEhJPlpU0Twgyr28=
Subject key identifier: 52:9B:A2:28:81:CA:4B:B0:A3:38:D9:F0:CE:4F:A4:A8:D8:0D:6E:8B
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019E9CCE9A40913838544F6C068007A0948E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
Manifest number: 023E
Signing time: Sat 06 Jun 2026 12:00:46 +0000
Manifest this update: Sat 06 Jun 2026 12:00:46 +0000
Manifest next update: Sun 07 Jun 2026 12:00:46 +0000
Files and hashes: 1: 1yp-CyfvXxAtTkk4tSDataHyfwY.roa (hash: SqgokM9PS1NitFY8bOJBDDBU8EreribWl+tjcbzmpfc=)
2: F7OazNxmHQIZG_1NbQyBZDuRfp0.roa (hash: kfyCu9kGmBZWf6iCvzc+imifHO9IEOu6CS+tqE1Bls8=)
3: IGonrweKcV3pBiFmxgMN0Hhq74c.roa (hash: YkHvQYVpbz1V6t76f23kYkJHWGSnZkMw7J+Y7FV0iWY=)
4: SMiyXrAPCyN75bhmFTdLi2GwlAk.roa (hash: OWn6AVqzgfgw0x7vjLeI7fNAaN8eSRtfVsyb4Z33PEs=)
5: SVUjKuzZ_ORsIdZ9huGbzPV9buQ.roa (hash: Nvnw35bKd31dDdLFTiIRL9x4aYLcyT04hwpnW9gAJbM=)
6: hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl (hash: Z0OPWY/+MSzXVeKhMiySPR27WULex4xCKAL8Z617xaA=)
7: opdAPP4XfkWYA7yU3ItVjBZuv-c.roa (hash: 0Hfm1qyjd3lUos1jStXhOtEuhh/ZjqT6H9OzWUho5SI=)
8: q1_uvTwS2odl5ebIbbIhhY5492k.roa (hash: rcptFlj+yIPXEnP3ZQnKAkTZfAlxMM8LHnpHcZGEHWI=)
9: qo3RmaJil-tmg6e3jCPqKh_xFAo.roa (hash: DLtprsoHKdJkHToMaxiYCDgKpyQfT89HL7h3BW0fsgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:ce:9a:40:91:38:38:54:4f:6c:06:80:07:a0:94:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Jun 6 12:00:46 2026 GMT
Not After : Jun 7 12:00:46 2026 GMT
Subject: CN=529ba22881ca4bb0a338d9f0ce4fa4a8d80d6e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:9f:c6:7b:b9:67:1f:32:ac:98:23:8f:aa:
63:1e:a1:52:68:5b:77:78:a7:96:af:ce:63:ab:2e:
5a:d6:a8:6a:48:5a:9b:27:d4:01:6b:b0:dc:4c:4d:
12:58:5e:58:22:df:14:7d:08:eb:de:48:77:20:aa:
14:86:d5:35:a7:91:9b:9b:ae:94:18:54:c7:fc:db:
f0:80:50:70:2b:aa:d2:fa:c6:6a:ce:1a:dc:da:b8:
7b:fe:2a:cc:83:d5:1b:38:85:1f:75:fe:9a:a1:3f:
e0:91:00:6d:66:3c:93:61:b4:68:ee:e6:2f:2a:03:
6f:ad:eb:8a:05:99:8a:b2:d0:fa:1d:7e:93:53:29:
0f:c0:e7:19:45:db:b5:60:78:bd:60:3c:53:60:75:
4b:38:09:6b:c8:8d:fe:0a:1b:dd:67:a7:d5:60:de:
ab:98:48:b4:6c:2f:a8:1d:c5:60:b9:f5:e7:a0:f3:
02:c2:17:f5:c9:af:6f:c3:2e:24:0e:e6:25:02:cc:
76:b1:93:6b:5f:60:71:88:e2:66:9b:27:19:40:09:
7f:0b:ca:aa:4c:14:e4:47:9f:72:fc:75:0e:b3:76:
51:88:3d:be:03:66:55:a1:62:0b:80:ba:3a:a5:0b:
36:77:88:34:b6:57:c7:5a:b8:af:d4:2e:ba:93:4e:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9B:A2:28:81:CA:4B:B0:A3:38:D9:F0:CE:4F:A4:A8:D8:0D:6E:8B
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:04:cd:7a:d5:8a:f0:27:1b:01:82:43:04:ea:ff:85:76:d7:
18:93:ca:1d:19:89:3b:77:cb:91:e2:52:cc:40:66:e8:bf:ef:
e7:c3:34:99:88:dd:4d:7a:2d:23:82:dd:56:28:0a:b8:ca:70:
0e:1c:8a:0a:4c:05:c4:00:91:cf:d2:8b:1f:bf:d0:35:24:3b:
4b:e8:00:30:f8:5c:bd:b2:37:2b:ee:f1:29:d2:69:5c:99:d2:
b8:22:69:92:d5:c4:df:1f:cd:39:0a:4f:33:d8:56:47:82:46:
13:19:02:3e:7d:b2:e2:8e:70:0d:4d:6e:c6:53:70:3b:d4:55:
1d:fd:4d:49:dc:e9:5d:3d:4c:99:13:8d:b9:91:6f:34:2b:e5:
e3:02:90:a1:c4:74:d8:0d:05:96:72:20:8e:d1:53:13:c1:0e:
46:19:a0:14:3e:9b:4c:14:2e:12:bc:3f:43:0c:e2:c8:d6:44:
49:fb:a8:4a:ae:51:b9:2a:f1:2a:29:df:ce:ef:2a:6b:80:c3:
a1:e3:2f:e4:2f:d3:1a:db:4f:31:16:ce:a3:ea:c0:58:ce:4e:
0f:b8:b4:46:d8:13:e0:e2:0f:b8:86:e3:b7:0e:d2:9c:30:4c:
1f:0a:b3:ef:4a:26:81:64:e6:35:67:7f:7d:09:65:61:c8:30:
db:e6:15:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:44:23 2026 by rpki-client