Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: CS8WXGpIsRohWOOJi95Vf0UsRHNRToVGgoeE6aFtflE=
Subject key identifier: F7:EA:D8:44:61:77:AB:45:0E:11:11:D8:00:6F:00:B1:4C:9A:02:E3
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019F12D3CC70519F2EB7E63E039C80A4247B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0587
Signing time: Mon 29 Jun 2026 10:01:38 +0000
Manifest this update: Mon 29 Jun 2026 10:01:38 +0000
Manifest next update: Tue 30 Jun 2026 10:01:38 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: SwTpegMVwVpv3MPqozARGmMs5c4YqxWGZJhEQOQ0Ecg=)
2: Jx1BWFbTuF9FV-hQyd0tIt4ewU0.roa (hash: BNnlTPOOGSMbqGxtxHccPbvxqZSfaMHJ/endtfOYthQ=)
3: uvQxWScPx8m3fOABuvxk5C9EAS8.roa (hash: lGGSRLSoaY1J0Yu0lmJKdwLIc5UpAHMNZ+kBI8gouRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:cc:70:51:9f:2e:b7:e6:3e:03:9c:80:a4:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Jun 29 10:01:38 2026 GMT
Not After : Jun 30 10:01:38 2026 GMT
Subject: CN=f7ead8446177ab450e1111d8006f00b14c9a02e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fa:ad:79:b1:17:87:d9:d3:e8:d7:1e:6b:aa:
ca:1b:a1:eb:9c:b6:c4:13:30:dc:a3:6b:53:82:7a:
68:f3:72:cb:bc:ea:57:e4:fc:23:2b:6d:8f:ba:ac:
0a:bd:e7:f5:e8:c0:e3:33:9d:10:55:38:0f:13:74:
9e:bc:c1:c1:fd:73:83:80:7c:35:c0:89:b6:cf:7c:
42:c9:77:23:51:23:95:8c:5a:02:db:91:bd:38:6e:
ec:7b:b3:57:07:ce:e6:25:e5:1d:04:2b:01:1d:16:
93:a5:02:04:6d:3d:a9:ec:28:2e:ab:c9:4c:3c:1d:
a3:b6:1e:6a:6a:1f:94:74:5d:fb:b1:74:7e:15:78:
c5:44:72:ee:d5:ea:d1:92:29:d7:94:a7:11:db:c3:
17:3b:b4:0f:1a:63:b3:5c:81:4f:58:b8:6d:f9:be:
28:2c:7e:c6:f4:d1:8b:32:e3:6f:06:1a:67:b7:88:
28:46:8d:1f:73:80:9d:a7:6e:ba:26:91:6c:81:7c:
06:7b:2c:c0:68:f1:35:69:82:af:55:42:b7:2d:4a:
c6:87:12:f2:e5:76:87:55:5a:f7:a2:02:bd:12:4c:
16:f4:3c:b0:aa:5c:40:c3:a0:90:be:b7:55:1b:ff:
ab:60:73:9c:2d:29:e1:2c:69:b2:ab:0d:04:b0:6b:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:D8:44:61:77:AB:45:0E:11:11:D8:00:6F:00:B1:4C:9A:02:E3
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1e:5c:7f:72:20:d7:26:a2:dc:5d:22:de:04:1a:d4:b7:26:
d1:34:a2:50:65:cb:4b:09:e1:1d:c0:a0:88:38:dd:84:91:01:
90:6d:c8:98:f1:51:bd:e2:d2:0b:d0:36:0d:0e:9d:86:cb:67:
24:86:c8:87:c5:65:e3:a3:2c:a4:b2:59:cd:65:0f:51:5b:8c:
b6:75:46:d5:43:e1:25:d7:55:55:e3:a0:78:36:db:87:08:b1:
34:19:9d:8f:c2:60:48:ca:e1:a0:33:cf:e7:a4:c9:0c:a9:c9:
fc:c4:29:3f:37:eb:81:08:70:2f:f5:b9:59:28:af:ec:0f:4c:
e6:33:5c:29:2e:f9:a7:07:f9:73:59:be:33:7b:24:ee:dc:0f:
71:18:7e:b1:2b:94:7d:b7:21:80:1c:f8:0b:65:16:20:6a:f6:
19:5b:22:c7:cd:16:40:47:ad:55:16:aa:4d:e7:85:78:67:4a:
ec:4b:5d:20:39:48:d9:ed:c3:fc:4d:3a:6f:ca:f7:c4:6e:cb:
43:2a:5d:67:26:3a:19:dc:35:26:9a:5a:87:16:90:b4:e4:fe:
30:19:b7:28:19:fd:29:e6:18:39:8e:fb:8e:7a:57:04:ee:93:
88:3e:91:06:e6:1a:36:b0:a4:06:9a:a9:b1:cf:fa:ab:c8:7d:
d8:c6:46:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:11:22 2026 by rpki-client