Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
File: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft (raw, json)
Hash identifier: /WTaWkAcxTSlxFzCHmfwCab+8KLMnHuGq6cMv5A0dZ4=
Subject key identifier: 3F:CD:6A:68:89:C0:6F:3C:7D:E1:A1:7B:CF:F7:E4:AF:7D:CA:20:BB
Authority key identifier: 1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
Certificate issuer: /CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Certificate serial: 019FA3A9A0A467B81B1F9585E2DB6A22C0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
Manifest number: 12DD
Signing time: Mon 27 Jul 2026 13:00:30 +0000
Manifest this update: Mon 27 Jul 2026 13:00:30 +0000
Manifest next update: Tue 28 Jul 2026 13:00:30 +0000
Files and hashes: 1: HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl (hash: YAgR0RuH6uTTUrqhMJalVTZ5qiemVJlXpYkErEU61hY=)
2: w8zdjiM74u9Xh40wPO9DxI7URjQ.roa (hash: 4uuYGCMFbM+HLfTWP9pgKKq5F64rrg4484o4ZoBFc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:a0:a4:67:b8:1b:1f:95:85:e2:db:6a:22:c0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e75106771c4295e3d3ecfa04cb97f631623e5bf
Validity
Not Before: Jul 27 13:00:30 2026 GMT
Not After : Jul 28 13:00:30 2026 GMT
Subject: CN=3fcd6a6889c06f3c7de1a17bcff7e4af7dca20bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:85:0b:fd:a2:32:f6:3b:ef:a5:46:f8:73:
65:25:19:2b:d9:9b:d1:ef:1c:d5:8f:10:9a:ae:9f:
6d:35:fa:80:ee:48:29:d7:ee:d5:d7:96:f1:b7:22:
de:ae:ef:e8:9e:b8:fa:08:cb:a7:af:8a:b2:d4:ed:
f3:3c:6a:83:49:4b:9a:9e:cc:28:ed:78:a8:7e:05:
1c:3c:78:cd:63:59:4a:ee:74:0e:af:7b:40:7a:8b:
14:f3:da:df:15:75:c4:72:42:27:24:44:df:14:27:
2f:4c:b5:94:8b:8a:12:9f:77:be:04:e2:98:88:d7:
5e:24:a6:00:26:d7:7d:f9:51:36:cd:9d:76:3e:4f:
d1:77:c7:7a:da:19:8f:24:3a:a9:62:4c:83:c0:cd:
b7:39:6b:d7:5b:69:81:3c:5a:38:13:d1:5d:ab:db:
32:68:b3:0f:27:7c:bf:f8:3d:a2:ed:4a:a2:44:a8:
b1:26:f0:c1:91:50:1b:f8:a7:8b:9e:d9:cc:c2:bf:
e5:d6:a2:96:91:33:00:2b:ef:4e:0c:04:fe:0f:93:
c6:28:40:db:ea:b4:92:e7:10:af:2b:ba:8b:5a:58:
4e:d0:f8:d0:fa:37:fb:02:d8:e2:27:4e:94:0d:4d:
e8:dc:c7:8d:e9:b0:3f:09:aa:71:84:54:9c:92:9e:
db:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CD:6A:68:89:C0:6F:3C:7D:E1:A1:7B:CF:F7:E4:AF:7D:CA:20:BB
X509v3 Authority Key Identifier:
keyid:1E:75:10:67:71:C4:29:5E:3D:3E:CF:A0:4C:B9:7F:63:16:23:E5:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a0f2-c806-4b55-bbe7-a2fdb938ca2d/1/HnUQZ3HEKV49Ps-gTLl_YxYj5b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ea:64:87:92:2b:0d:8d:e2:c1:e6:d4:8a:d8:41:37:0f:92:
2f:43:35:d2:c6:fa:36:db:53:20:c1:d4:78:0e:d5:ed:1f:bb:
cf:a3:95:da:3d:28:ac:41:51:92:ba:ed:72:e7:07:be:b9:5b:
7c:d9:9c:3b:28:a5:20:38:3f:f5:1a:2b:db:90:13:bf:13:a2:
fb:f4:cf:99:e9:9a:7c:df:49:23:12:29:4a:0d:92:48:ae:ff:
7c:27:48:02:5c:eb:32:1c:b9:9f:3b:33:bf:8e:1a:d2:f2:c5:
75:8c:4d:a0:77:ac:87:2c:9c:22:c1:bc:d4:04:fe:6f:d7:9d:
99:39:11:d2:ae:2f:ba:35:0d:44:3f:54:65:62:4e:50:c4:e7:
e2:af:cd:b9:e1:4a:b6:db:9c:93:d6:3b:0b:c4:e1:56:84:46:
32:71:27:15:48:c8:b8:78:2c:6f:42:a5:5c:63:76:09:4b:9d:
09:62:9a:ec:24:5a:64:3a:01:df:16:94:d6:27:41:ec:f4:19:
50:8e:55:26:1f:a9:c9:0f:bf:3d:16:03:d4:38:44:ca:d5:dd:
c3:b1:b7:d8:03:ef:c7:ec:56:0f:e4:9f:30:63:5f:23:f8:0a:
7c:8e:01:5d:aa:ea:3e:cc:4a:ec:b5:33:ce:9b:c8:d4:65:f6:
3f:33:1e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:49:41 2026 by rpki-client