Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
File: HCN7aINpeRKVf40zc3AryQbSZEU.mft (raw, json)
Hash identifier: L+h3YghQbDERUP7B2c6sPkAhY/MqZKAX5kyFWgE7J0s=
Subject key identifier: 80:EE:84:38:5B:0F:EE:63:44:3F:3E:69:D4:B8:E2:C2:7A:DB:9D:62
Authority key identifier: 1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
Certificate issuer: /CN=1c237b6883697912957f8d3373702bc906d26445
Certificate serial: 019EFC837F50AA37A7325C5E75076B1C96E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
Manifest number: 1591
Signing time: Thu 25 Jun 2026 02:02:16 +0000
Manifest this update: Thu 25 Jun 2026 02:02:16 +0000
Manifest next update: Fri 26 Jun 2026 02:02:16 +0000
Files and hashes: 1: FMHMs5u6nqIr6z09yDsjzYxfks8.roa (hash: cXOK9Ev2UNFSti3Tqnxxgi2cL3wHqDi6S1Qe8D5ON6A=)
2: HCN7aINpeRKVf40zc3AryQbSZEU.crl (hash: JH/Mh/9o7U33JU5MrD0rJxzdS1F8OKoWZ2oRG4Zf5to=)
3: SgzTZO7h0qw0lQtLCLQDxdwtTHc.asa (hash: YpjRapR2fvquPrVNxyf5Ct4ddLeyNJ16sV02TNO6WCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:83:7f:50:aa:37:a7:32:5c:5e:75:07:6b:1c:96:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c237b6883697912957f8d3373702bc906d26445
Validity
Not Before: Jun 25 02:02:16 2026 GMT
Not After : Jun 26 02:02:16 2026 GMT
Subject: CN=80ee84385b0fee63443f3e69d4b8e2c27adb9d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:56:bf:d5:ce:87:c6:12:80:28:84:19:79:
e1:34:8c:4f:62:20:15:11:45:83:e9:53:cb:28:b3:
c7:9c:a0:40:55:d5:64:ad:74:ce:c7:fa:99:85:a6:
dc:51:f2:c5:09:19:1f:c0:a5:da:6c:b3:e6:b5:a5:
84:5c:9e:71:4f:63:fd:d3:99:e9:07:e5:56:42:d9:
be:ba:71:bc:93:8f:8f:08:b2:a6:13:32:1d:21:25:
ae:fa:71:e2:57:7a:d2:52:20:ac:ad:c4:b4:0c:f3:
85:d0:23:65:22:5b:80:ff:da:e6:ec:bf:16:bd:7b:
e9:90:50:bf:b5:ab:b4:e6:69:9c:f3:b4:88:cc:50:
e8:0c:d5:23:60:b9:80:d5:e0:7e:18:ce:5d:2d:ee:
d0:5e:99:c4:a0:f1:1e:10:85:38:ed:8d:c1:3d:82:
31:b3:7c:9b:3e:e2:10:57:3c:ab:16:80:3c:11:6c:
35:60:b4:2f:19:ba:0c:26:4f:62:94:8d:26:2d:1e:
89:d3:f3:32:62:fe:72:22:08:f4:bc:49:82:69:11:
0a:70:d0:6d:b4:a5:23:66:ea:4f:1c:85:a8:30:be:
4e:b2:4a:61:bf:9c:24:45:55:98:24:89:ac:65:b3:
91:04:dc:cd:1a:90:c6:4b:ac:19:9f:48:2a:a3:92:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EE:84:38:5B:0F:EE:63:44:3F:3E:69:D4:B8:E2:C2:7A:DB:9D:62
X509v3 Authority Key Identifier:
keyid:1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:31:93:61:4a:3c:b8:03:5f:e0:28:a3:05:07:ab:8b:77:32:
00:8a:8d:e7:5b:f0:81:15:4c:8f:ae:bf:1b:52:af:8e:81:3d:
76:3a:9b:c5:60:64:f0:e7:46:a1:63:93:38:bb:48:a6:c8:cd:
35:4c:90:42:a2:cd:a8:40:46:2b:fc:fd:f6:90:f4:ff:78:c7:
0e:80:9d:c3:bb:ca:4d:56:60:a8:2e:00:5b:34:33:68:0a:ef:
ee:c5:55:e5:2f:63:db:bb:d6:45:41:1c:e8:4b:13:67:db:db:
9c:d0:42:7a:0c:66:64:3f:58:28:b2:2c:a9:62:3e:78:50:05:
35:f3:2c:5a:6a:45:11:dc:66:39:68:df:8d:2f:1d:dc:4d:4e:
70:82:a1:54:e4:94:6a:54:0c:a4:26:b4:68:d2:e9:81:b4:90:
75:58:a4:26:5c:ec:00:31:ad:33:67:c0:b8:fa:87:63:ad:dc:
c6:92:7f:12:6a:0a:01:89:61:59:a2:5c:b0:2f:a9:75:ef:04:
28:be:87:42:28:86:ad:f1:a6:19:ee:68:6f:29:be:1b:d1:e2:
84:00:58:d4:57:97:a3:9c:b0:79:48:b6:9c:c7:a0:32:59:eb:
5b:79:e7:8e:fc:cb:93:3f:66:8c:a6:c8:00:d7:34:25:06:9f:
15:52:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:56 2026 by rpki-client