Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: UWHlwnrEBUJY3bipBhWH9nusTreRmvILKF0U+nnYqEQ=
Subject key identifier: 56:6E:69:80:D3:EE:79:53:8E:27:2F:31:B1:1B:B9:6A:7C:6C:F5:8C
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019F10E5A11B01E0DEDE2CB63C953889C033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0586
Signing time: Mon 29 Jun 2026 01:01:52 +0000
Manifest this update: Mon 29 Jun 2026 01:01:52 +0000
Manifest next update: Tue 30 Jun 2026 01:01:52 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: hv8hZWOl0Evp4gQXrAOOolimiTKVqzJph12mjxd1ppI=)
2: Jx1BWFbTuF9FV-hQyd0tIt4ewU0.roa (hash: BNnlTPOOGSMbqGxtxHccPbvxqZSfaMHJ/endtfOYthQ=)
3: uvQxWScPx8m3fOABuvxk5C9EAS8.roa (hash: lGGSRLSoaY1J0Yu0lmJKdwLIc5UpAHMNZ+kBI8gouRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:a1:1b:01:e0:de:de:2c:b6:3c:95:38:89:c0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Jun 29 01:01:52 2026 GMT
Not After : Jun 30 01:01:52 2026 GMT
Subject: CN=566e6980d3ee79538e272f31b11bb96a7c6cf58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:69:dc:33:1e:5f:47:be:f7:96:01:4a:14:
0b:66:8c:8c:1e:48:e7:86:a5:e4:1a:24:83:1a:99:
e1:f9:42:12:42:88:40:81:ab:fd:3e:94:1a:07:70:
7e:1d:85:45:0d:81:3c:c2:71:43:a3:ec:36:9f:6a:
71:f8:2c:89:be:77:08:a6:ae:a1:a9:39:93:13:de:
56:b0:ab:ec:49:84:24:24:af:db:1c:ac:fc:1e:81:
d3:4c:69:f1:f8:b1:62:1d:b3:55:5d:e8:6f:ba:a6:
ab:a1:50:f9:7f:07:28:6d:c0:da:dc:00:72:5e:c3:
8d:c2:6f:cb:82:fc:4a:78:b4:93:92:2a:31:91:22:
62:7d:15:c9:0e:36:42:9a:92:46:00:09:c7:af:11:
e7:15:31:6b:6a:30:b3:b9:ac:84:3e:39:40:c9:13:
3a:e7:e0:21:5b:b3:ee:db:d2:93:3a:8b:e4:49:db:
a3:fc:ff:26:44:8a:7d:57:ad:bc:46:64:47:35:e7:
2b:ca:d1:79:14:cd:09:15:98:0f:ab:af:f9:9c:cb:
af:46:26:01:a3:a7:d1:54:0a:f9:5c:0b:07:55:21:
87:f3:02:f7:6d:65:61:cd:62:fe:77:cc:06:b7:fc:
14:34:43:4d:65:dd:26:92:ee:06:f8:50:81:b1:71:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:69:80:D3:EE:79:53:8E:27:2F:31:B1:1B:B9:6A:7C:6C:F5:8C
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d5:39:f1:b9:95:60:af:fb:83:4b:78:d4:08:ae:bd:13:f9:
10:2b:ec:91:fa:ad:36:35:6d:15:2f:0a:5c:4b:a1:29:37:a3:
78:6a:00:1e:d3:13:04:22:7f:3a:1f:d5:5e:67:e5:93:d3:1c:
4b:4f:d2:a9:7c:76:58:19:7b:c6:0f:93:d5:ac:79:8a:a1:f2:
6d:b6:fc:31:b8:f2:57:b9:44:26:77:7c:85:82:ec:2e:09:63:
f0:0d:97:91:fb:cf:8a:8a:c7:cd:7c:cd:2e:35:fb:53:d9:2f:
41:2a:23:5f:d8:97:68:d7:78:c4:61:db:cf:b0:01:75:67:57:
f2:46:c0:ec:8e:74:8c:c1:6b:08:a6:4b:38:c5:37:4f:fd:26:
ac:06:aa:6d:29:52:d7:80:4b:4f:ba:8b:c6:05:a2:62:2d:5e:
ad:56:e1:c1:fc:71:43:8f:9c:f6:a0:94:df:aa:a1:c5:79:2b:
c6:09:f9:fc:ed:19:45:22:37:b6:ec:ce:36:d7:3d:51:84:ad:
55:a0:c1:97:f9:3c:c9:6b:b0:25:62:b4:e4:c3:8c:4e:5e:e1:
7a:84:52:94:ac:c2:8e:05:d4:71:73:87:21:e6:f5:96:1d:6c:
aa:c2:f5:44:eb:6f:98:c9:d1:25:a8:b5:cb:2f:42:52:58:90:
92:95:6e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:09:56 2026 by rpki-client