Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: T+cN7QKpkoKsH0LO1dbF2S1ZihNtmJm+NWi2v7csTSk=
Subject key identifier: EF:F1:80:E2:F0:1E:E1:8D:9B:15:30:18:15:25:AA:8C:2B:CE:F5:32
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 019F197AA61E0843576223663D11E7F82832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 191E
Signing time: Tue 30 Jun 2026 17:01:36 +0000
Manifest this update: Tue 30 Jun 2026 17:01:36 +0000
Manifest next update: Wed 01 Jul 2026 17:01:36 +0000
Files and hashes: 1: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: yfmrccIz4OXcTmTMkYaCIEgnHb3kp007fSEEMz1X4Hk=)
2: tlPMQw1c3qKVnL4XtiEzRpXRVfk.roa (hash: 2OUcGgPvEsXk+44Fs3qPgVHHqN26oV6vSG6RCh8q2/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:a6:1e:08:43:57:62:23:66:3d:11:e7:f8:28:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Jun 30 17:01:36 2026 GMT
Not After : Jul 1 17:01:36 2026 GMT
Subject: CN=eff180e2f01ee18d9b1530181525aa8c2bcef532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:16:18:4b:1b:46:72:14:7f:e5:5b:e3:a7:
5a:6e:2e:cd:32:6a:46:9a:92:3a:49:4b:e9:54:cc:
12:79:7e:a7:73:94:9c:14:d4:cd:a9:4e:82:d4:77:
c3:84:84:8f:c4:10:e7:7e:7a:cb:8b:16:33:48:8f:
4a:2d:3d:83:18:c0:90:8f:ba:3d:61:f3:f4:90:be:
1f:aa:9e:62:b9:ea:b9:c2:bd:b2:10:f4:79:82:16:
1f:52:f7:af:f2:cd:a2:0f:93:97:f8:2e:e0:76:6a:
08:73:ac:22:bb:76:84:96:fd:a6:8c:96:a7:f7:1b:
e5:39:22:81:ac:5f:e6:17:b5:23:35:aa:b0:04:d3:
aa:52:b5:7b:a2:16:fd:a4:5a:05:99:23:d6:c4:30:
e6:77:cb:fc:76:ad:62:0c:12:99:6d:d7:06:e1:89:
bb:f3:bd:14:62:73:88:ed:b8:06:3a:7b:32:88:18:
fb:09:f3:db:a3:9c:17:ca:db:0c:8a:2c:51:c5:80:
85:11:c8:09:64:a9:9f:72:4e:5e:d0:5f:b8:1b:1e:
d4:23:0a:7e:9b:e2:fb:5d:8c:41:d7:e1:42:a9:36:
c8:27:05:79:2b:42:66:d3:5c:e8:7f:9e:d9:af:76:
03:dd:5a:fa:ab:74:99:38:a3:7c:64:ac:e1:ad:88:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F1:80:E2:F0:1E:E1:8D:9B:15:30:18:15:25:AA:8C:2B:CE:F5:32
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ca:47:0f:ee:fc:d0:0c:12:71:f4:35:51:ea:31:93:ac:aa:
d9:ca:88:b8:53:39:4b:b3:bf:39:ae:8a:a4:54:bd:bd:dd:92:
34:fd:09:5b:97:13:31:34:bf:89:9c:59:2d:aa:b8:3f:a2:c0:
80:83:ea:e8:f3:51:4b:a1:cb:07:e3:4c:d4:5e:3c:83:dc:6e:
36:a5:d6:91:ea:3d:90:18:57:34:d6:6a:ec:03:61:6d:b4:01:
cd:fe:c9:52:5b:aa:48:52:81:37:54:00:c4:03:47:b6:cf:28:
21:04:34:00:7e:19:1c:83:62:77:b6:0a:0c:84:a6:e1:22:4e:
14:e4:34:0e:52:c2:02:ec:64:48:1a:75:34:0f:92:64:5d:9c:
fc:2d:ee:56:24:80:64:22:06:33:8c:2e:93:7e:91:16:b3:d2:
98:8e:73:79:d7:b6:71:de:ab:60:3e:4e:a2:07:c7:74:f4:91:
9e:41:ad:be:2c:07:ce:0d:fd:c2:6e:57:de:e9:34:f0:f0:49:
7d:4a:51:9e:d0:c2:80:24:74:b5:cd:da:44:14:8c:61:d1:73:
74:2f:d4:14:8b:46:10:45:cc:64:be:7f:80:8d:c4:83:4b:a2:
4e:ab:23:54:0f:fb:58:1e:2f:53:75:2e:29:88:60:c8:c2:ca:
03:90:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:28 2026 by rpki-client