Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
File: hFxYdS8zNkIv8O4XJkdFkeekHl8.mft (raw, json)
Hash identifier: jyNos1aX03NsM2DHbFk6DoboQDltxNR0XviAOwqFUu0=
Subject key identifier: 60:42:A0:22:19:6F:B9:EF:17:57:2E:6C:02:6E:9B:29:1C:8F:94:8D
Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f
Certificate serial: 019E88353DA012EB9B84B12363DAB7596ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
Manifest number: 1940
Signing time: Tue 02 Jun 2026 12:00:50 +0000
Manifest this update: Tue 02 Jun 2026 12:00:50 +0000
Manifest next update: Wed 03 Jun 2026 12:00:50 +0000
Files and hashes: 1: JXD9OGEgFf3Wk4sh84udKIfqooU.roa (hash: qrmAAi4FfndLs6wG6DvmHeD7s+/mauxwlNM+tOn8N8I=)
2: aI-ahOCwvF9dDyH09tBe3WnKiGg.roa (hash: W4z3ROiXmDdwVFy1xkMGSOsTs29f9yswRvpywgw4Gjk=)
3: bcdCYadegTnuv1kyS3SFpw7_obg.roa (hash: FHoWoxIPPut7YlIBnS9RiEjsnw6/GTtGF64PoDTZc+8=)
4: fL9-5NNFmNXeaEJzQdcv1aJZxaE.roa (hash: vgxMoBNi3xBe1kEG9Dep1UcVzUmrFFhkaO0RcMn0W+o=)
5: hFxYdS8zNkIv8O4XJkdFkeekHl8.crl (hash: q9oCZKTrG3Xc1t+vWMpNNdqEVUGRztk9AConzu50Krs=)
6: q4J7inXLdfvTxzgZzcdEl_n6nio.roa (hash: tU27AK3PO1qj8TjiCSuyTiU7iIickoD0PNPU49OzhWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:35:3d:a0:12:eb:9b:84:b1:23:63:da:b7:59:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f
Validity
Not Before: Jun 2 12:00:50 2026 GMT
Not After : Jun 3 12:00:50 2026 GMT
Subject: CN=6042a022196fb9ef17572e6c026e9b291c8f948d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:86:8c:8d:72:ea:5b:49:65:02:69:40:ea:
9c:71:cc:14:e0:3c:cd:a2:9b:43:2e:a6:cb:52:64:
a1:78:ef:1c:9f:a9:bb:6f:fc:84:51:12:ee:c6:f7:
50:8d:0d:da:8e:a3:2a:55:36:68:8c:c1:fa:35:fb:
6d:bf:6a:67:03:22:30:5c:2b:7f:d7:33:69:c8:69:
74:f7:75:d6:b1:d3:a4:87:dd:ad:e1:94:f6:0a:86:
8f:d9:bc:2c:1e:37:29:1e:c6:d8:59:8d:0e:cc:12:
54:05:f6:da:08:15:d1:0d:7a:7f:8b:80:1e:b3:e6:
39:5d:d4:0b:82:c8:11:3c:ec:47:31:d3:f3:6b:98:
3a:05:51:55:57:a3:cb:d3:d5:5e:ff:fe:2a:44:32:
af:25:f3:7a:c6:71:3f:ed:4e:b0:45:78:99:4d:98:
5c:88:11:ac:eb:b1:8a:79:30:fb:c2:76:5c:d4:b4:
39:bf:a8:fb:17:31:a2:7d:94:42:e5:4c:77:5e:b8:
cd:e5:79:4d:6d:29:60:35:c9:ad:2f:52:9a:91:74:
16:64:a5:d8:b9:c7:c6:c6:56:59:9a:de:20:aa:3c:
5c:76:05:35:94:91:d0:d0:0c:c1:5b:32:fc:76:a3:
da:73:39:b8:6c:29:9b:8e:91:bc:61:b1:f1:1c:6b:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:A0:22:19:6F:B9:EF:17:57:2E:6C:02:6E:9B:29:1C:8F:94:8D
X509v3 Authority Key Identifier:
keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c4:ed:27:7f:7c:4c:e7:63:02:5d:02:ff:c1:79:5b:89:7a:
01:18:8b:83:da:15:54:4c:e9:92:b6:6f:94:93:f5:3e:2b:ef:
53:41:a9:de:5c:27:97:37:54:4b:c4:b6:d4:c8:59:81:1f:7a:
8c:fe:d8:4e:ac:7c:4b:f8:33:b9:6f:9f:07:9c:b5:ef:b0:d7:
75:83:f4:07:33:49:9c:fd:b0:ce:0d:4d:31:df:eb:8e:3d:3e:
e2:ba:bb:3b:3a:b9:3b:ab:7f:7c:23:66:68:29:2e:80:ad:a7:
fe:4c:84:4f:e7:66:44:0c:37:b1:67:be:ef:38:cc:9a:c4:d0:
d3:e2:e5:ef:01:ad:37:4c:cd:5c:4a:9d:e9:17:34:0b:61:4b:
a0:9e:fb:e2:41:78:f9:8c:57:05:06:de:0a:e8:c8:81:cf:0d:
9c:8e:c1:c1:dc:82:66:23:03:10:04:2d:11:3e:37:9a:9c:94:
b6:a7:f3:62:89:3b:03:31:a6:76:3d:89:a4:46:28:37:a5:9a:
29:c3:57:43:cd:9e:3b:1c:55:79:27:4b:03:20:cb:44:48:ba:
d6:d3:20:87:04:b9:5f:f1:d4:16:13:7c:4a:7b:13:88:21:35:
e1:4a:49:f1:24:01:b9:50:c8:4c:62:e1:27:62:9b:b7:b2:9d:
89:57:99:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:35 2026 by rpki-client