Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
File: Hx4uqu8HAVlawnVNASEhfnuR1zk.mft (raw, json)
Hash identifier: hrb8uW1SQNxqptpKqNBgNW/2iLAm8cv06gHEA+x07Is=
Subject key identifier: 22:AF:0D:B1:76:0C:F4:E5:71:F5:FF:61:80:4E:AA:A3:FF:57:00:5F
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019FF9B5D6BC0A9B96D0C5EEC0CC314B60C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
Manifest number: 0600
Signing time: Thu 13 Aug 2026 06:01:11 +0000
Manifest this update: Thu 13 Aug 2026 06:01:11 +0000
Manifest next update: Fri 14 Aug 2026 06:01:11 +0000
Files and hashes: 1: Hx4uqu8HAVlawnVNASEhfnuR1zk.crl (hash: Uj2BdM3LWEZ0BF5pysqUi+TvCMfTVIJISVLvibAGSR4=)
2: XHt6U6txMDBbVbzSvnNjcotaYrU.roa (hash: 6GcCoiIs+4rcGlZlZSq/JDe7tcT/R5cFv6QsNxJbWAg=)
3: v0-H6ke7hMRuQuVw_oo2QtUgSNE.roa (hash: tBQwZZG9DL7zjt0yr5VRGUWvKlkN9L/sX8V6/7cxKZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:b5:d6:bc:0a:9b:96:d0:c5:ee:c0:cc:31:4b:60:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Aug 13 06:01:11 2026 GMT
Not After : Aug 14 06:01:11 2026 GMT
Subject: CN=22af0db1760cf4e571f5ff61804eaaa3ff57005f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:11:b6:02:79:81:93:62:8f:7b:e6:fc:b1:
af:fc:c7:3e:f9:a8:cb:a6:02:20:73:cd:10:75:be:
0a:61:85:56:fd:30:63:fc:70:c9:62:28:3a:5e:30:
98:ea:b0:79:20:ce:bd:a7:08:f1:61:ef:41:38:1d:
90:d0:5c:88:bd:b0:14:57:01:cf:3f:44:e0:20:f9:
24:1f:d8:e3:68:15:f7:de:c4:62:37:1e:78:e8:5a:
c6:d2:a1:c2:74:c1:e3:1b:e3:e7:0a:a2:16:20:65:
25:6f:cc:0e:15:e9:3e:aa:bc:1d:d3:92:d2:e7:bd:
0b:c1:d0:b3:a2:b4:5a:7f:5c:09:5a:7b:bf:8d:46:
d6:4a:c6:ba:2a:f2:bb:51:3e:b4:4f:1e:f1:e8:5a:
74:4f:26:e4:67:56:62:a0:22:3a:ca:5f:0a:ae:28:
58:f8:16:aa:f4:f1:1d:4c:8c:69:e0:90:aa:98:3e:
d1:3f:9c:a0:73:8e:70:c8:12:ba:01:a0:02:88:69:
39:89:76:b1:a6:2a:c4:d5:f0:ec:b7:6b:96:01:f9:
13:6a:cc:91:57:69:d2:a6:06:ad:f9:c9:e6:73:09:
5a:97:ca:89:05:b7:99:b0:63:db:a5:56:86:e0:c2:
95:c5:7d:ca:06:45:d5:8b:04:73:2a:a5:e2:38:ec:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AF:0D:B1:76:0C:F4:E5:71:F5:FF:61:80:4E:AA:A3:FF:57:00:5F
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:06:93:cf:00:c9:29:4e:26:c0:e2:b2:5c:7e:15:af:24:
bd:1f:32:28:71:f0:af:d2:e9:b5:76:59:88:be:1e:24:36:64:
02:0f:eb:3b:9c:ff:f6:0a:21:63:53:7c:63:f8:3d:c6:e1:8d:
20:41:22:77:44:a3:f0:f3:ea:a8:4e:f4:13:dc:5b:04:71:f3:
03:22:7a:6e:ea:14:03:c4:42:6f:84:18:87:24:f1:b4:d0:49:
c8:20:66:4d:cc:a9:b1:7c:f1:53:1e:ae:e0:39:dd:5d:11:fd:
2b:c0:f1:99:5f:c7:fd:cf:d3:6c:26:f0:2e:20:08:19:56:4d:
6b:9e:4c:76:f4:a8:03:67:71:6f:7d:b6:65:d4:34:d7:1e:11:
c6:7d:b3:6a:39:95:d4:bd:35:3a:8f:e2:5d:69:5e:89:fc:61:
e2:70:25:7f:72:4f:22:14:40:f1:ed:69:27:31:8c:39:e4:56:
41:81:08:42:45:fb:42:d9:1f:ce:5f:d9:ed:75:4d:e3:ce:86:
58:40:b1:a0:b0:13:a8:71:fb:d8:d0:96:e4:93:76:95:92:7c:
81:dd:f6:59:5f:53:03:bd:2a:2c:62:11:e3:c0:bd:42:f0:52:
73:b6:7f:9d:e6:32:41:85:e5:3c:50:fe:ec:34:d0:fc:58:f9:
3f:fa:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:24:10 2026 by rpki-client