Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
File: HkwyCG4emEUFaRsB9Zhd96NrJK4.mft (raw, json)
Hash identifier: 6vIzKOI+4XrUrlB7xWYwEzAYq9dbK48F6/78vldrbL4=
Subject key identifier: BD:0C:9D:EE:83:49:CE:86:63:15:BE:7F:05:D9:69:C5:36:CA:F3:2C
Authority key identifier: 1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
Certificate issuer: /CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Certificate serial: 019EEA7CA8AD3A1ABA85774E7B9F1BFB6877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
Manifest number: 15F6
Signing time: Sun 21 Jun 2026 14:01:38 +0000
Manifest this update: Sun 21 Jun 2026 14:01:38 +0000
Manifest next update: Mon 22 Jun 2026 14:01:38 +0000
Files and hashes: 1: 4BSkcYmhr5NVj087jPH0UVEqIOM.roa (hash: K3WcOTsUriKcpWXE1oQcG3kJpx5GuCFTz9zkPDyBd4I=)
2: CpYXrnLvjR2OacRHrAwyXhQn-54.roa (hash: QEMefUV+U9Y/lW0Jd6Vawm/+aN0QKHnAj1lMOhtlgXc=)
3: HkwyCG4emEUFaRsB9Zhd96NrJK4.crl (hash: vTX15cyX2s0N6ZHTzLOSALUY32pmUlkT0Z7du5aUeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ea:7c:a8:ad:3a:1a:ba:85:77:4e:7b:9f:1b:fb:68:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e4c32086e1e984505691b01f5985df7a36b24ae
Validity
Not Before: Jun 21 14:01:38 2026 GMT
Not After : Jun 22 14:01:38 2026 GMT
Subject: CN=bd0c9dee8349ce866315be7f05d969c536caf32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:2d:d9:ea:c4:a1:d0:c5:2f:8b:73:11:50:
1f:1b:d2:de:3d:50:7f:f2:61:15:fa:ea:70:5f:da:
3a:59:cf:bd:0c:68:21:c6:0f:8b:fd:01:a2:8f:e6:
e1:3f:c1:0f:78:f0:ad:7e:df:36:aa:9e:67:25:96:
63:45:28:f5:0d:64:4f:83:a7:b2:31:df:56:7f:22:
00:1d:f1:a1:7e:0d:6b:a5:be:1c:0a:05:33:04:63:
1e:a4:70:fd:cc:37:3d:5d:5a:26:a3:00:78:13:c3:
ac:9b:b8:4b:ed:b8:91:ad:6f:9e:e8:d0:57:99:a0:
21:8b:33:91:1c:24:bd:03:55:9a:99:38:73:55:0b:
5c:8f:ab:da:b1:58:a8:6d:c4:5a:37:0f:f2:df:58:
c8:b3:3b:4e:a2:48:08:0f:be:f7:fa:c4:03:2c:e4:
36:8e:7c:d4:b4:52:19:e8:9d:a2:a6:39:f2:d6:36:
21:e0:8d:04:e6:49:05:e4:2c:c7:51:ad:3a:52:cd:
60:7c:b3:9e:c2:8f:89:14:bd:04:78:76:93:d5:10:
27:12:e7:1e:dd:5f:f1:2a:dd:6b:96:aa:bb:0c:f7:
f9:9c:c1:ba:0b:b2:5f:00:7c:58:f4:53:a5:19:e2:
02:31:e0:a8:22:b4:e7:4a:3c:c7:76:b2:cd:15:f3:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:9D:EE:83:49:CE:86:63:15:BE:7F:05:D9:69:C5:36:CA:F3:2C
X509v3 Authority Key Identifier:
keyid:1E:4C:32:08:6E:1E:98:45:05:69:1B:01:F5:98:5D:F7:A3:6B:24:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HkwyCG4emEUFaRsB9Zhd96NrJK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d48090-2dbf-4b84-8596-98ce146f1824/1/HkwyCG4emEUFaRsB9Zhd96NrJK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:62:37:19:22:6f:46:bc:d9:8c:ad:de:d9:e4:8a:42:b7:c5:
db:4c:a0:0e:ec:02:af:d2:80:d1:8b:f3:a7:8a:41:96:fc:09:
30:8f:cd:e9:f4:04:88:79:09:21:7b:a3:a9:1b:e2:7a:5d:6f:
16:1e:eb:c7:dd:c2:84:41:ac:fc:b9:db:7f:cf:70:5e:eb:ca:
77:f8:e5:f7:bd:a2:25:12:81:d3:6d:da:3c:b0:f9:9e:c5:ed:
2e:33:08:b0:0d:7a:c5:4a:cf:af:cb:08:b5:a6:91:c1:fb:82:
97:58:6d:1b:44:b2:41:1d:54:84:d1:98:d3:fa:74:4d:1b:19:
69:8e:de:52:1b:45:a2:6e:75:d2:50:6c:3a:8c:bf:7f:0c:48:
5d:26:70:8c:a7:0d:5f:0b:40:8e:3d:ff:eb:93:8c:bf:cd:bf:
ed:7b:85:a2:66:ba:77:c9:2e:65:29:4c:08:3a:d6:fc:da:37:
e5:23:3a:89:9f:6d:59:47:02:d0:c2:90:94:76:08:cf:e9:7c:
d7:80:17:d5:cd:42:cd:7d:f3:53:61:96:0a:0f:a0:0e:06:1d:
6b:9c:8b:42:a9:12:53:2f:9c:54:2c:e5:70:a1:93:2f:b4:62:
b6:4b:5a:96:32:ff:0a:3d:08:2c:fe:05:60:86:75:be:21:fd:
42:5c:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 19:08:07 2026 by rpki-client