Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
File: hCIIK4U0vXrmP6gAimhbZfTNJZM.mft (raw, json)
Hash identifier: xgj6mb7dtCTlnrtRX6eKnf2v5EUwaseh8JvEEXhvtjg=
Subject key identifier: D2:DA:1A:9A:B1:77:56:89:C0:DD:A6:E6:B2:66:E7:F5:73:53:A6:DC
Authority key identifier: 84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
Certificate issuer: /CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Certificate serial: 019F1152B58C25CB2CDA6DCAF7B5A13CF34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
Manifest number: 0790
Signing time: Mon 29 Jun 2026 03:01:00 +0000
Manifest this update: Mon 29 Jun 2026 03:01:00 +0000
Manifest next update: Tue 30 Jun 2026 03:01:00 +0000
Files and hashes: 1: 7ObucnjBknjOc9VGyDvq-rah57Q.asa (hash: AfmsB5ElxTW0o9bXlvelsvJ0CpTckZTI7iwTHE4nG1E=)
2: hCIIK4U0vXrmP6gAimhbZfTNJZM.crl (hash: B1ZllZccAvP0gEFWXLvoRS/TuwzA94N7PEu7cq2K1EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:b5:8c:25:cb:2c:da:6d:ca:f7:b5:a1:3c:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8422082b8534bd7ae63fa8008a685b65f4cd2593
Validity
Not Before: Jun 29 03:01:00 2026 GMT
Not After : Jun 30 03:01:00 2026 GMT
Subject: CN=d2da1a9ab1775689c0dda6e6b266e7f57353a6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b5:a9:28:0a:10:e2:f0:2d:d7:64:45:57:81:
1d:b5:51:98:86:0f:0a:a2:e4:cc:3d:28:8b:24:24:
b1:0d:2d:03:61:47:7d:0f:df:8c:6d:c4:77:af:6b:
11:d2:08:0f:a0:4a:d4:2d:63:96:44:1d:07:1b:04:
14:b2:23:55:bf:f2:07:2b:4e:39:46:88:2c:5e:f9:
71:97:c4:20:b9:b3:d8:4a:3c:1c:a5:9c:f3:02:50:
c3:e9:b3:8a:a8:f2:fa:ce:3e:83:7c:d2:78:51:c9:
83:3e:91:7a:07:1d:e8:4c:f0:87:65:35:75:d8:8f:
1d:6c:9e:97:a8:f1:20:51:31:8d:b3:79:fe:0e:30:
a0:92:30:06:99:b2:ec:10:57:8f:70:a9:c2:ee:47:
40:bc:ab:31:71:35:37:56:e1:9f:61:14:f6:53:16:
8e:42:d5:8e:b1:8e:58:81:79:55:82:cd:a4:d7:83:
99:88:67:ca:10:77:5a:9d:57:5b:82:9e:e7:96:12:
4e:b4:ae:24:1e:be:a8:7e:7a:ae:26:44:45:f0:0d:
18:15:b6:b1:08:49:c9:c3:bc:1a:1d:c2:ee:9e:d4:
e1:86:b0:c6:76:a0:10:e2:9b:d8:df:c3:ff:28:d0:
72:f6:91:a4:64:b8:4b:fb:a9:5f:fc:24:d9:32:e0:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DA:1A:9A:B1:77:56:89:C0:DD:A6:E6:B2:66:E7:F5:73:53:A6:DC
X509v3 Authority Key Identifier:
keyid:84:22:08:2B:85:34:BD:7A:E6:3F:A8:00:8A:68:5B:65:F4:CD:25:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hCIIK4U0vXrmP6gAimhbZfTNJZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/094db3-e389-4461-b50e-58169fbecdfa/1/hCIIK4U0vXrmP6gAimhbZfTNJZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:94:3a:15:00:88:dc:5b:90:1a:f9:b3:8f:7f:70:a8:0e:76:
7b:8e:96:48:f3:77:1c:c3:70:b4:a0:b7:5f:8e:41:f6:bc:24:
45:cb:ef:cf:da:fb:6f:08:71:ff:75:9a:cb:9a:ce:e3:ab:e9:
87:9b:3c:dc:08:41:15:a4:b0:45:be:a2:17:c8:46:08:30:b0:
33:ae:af:31:60:78:de:e9:20:bc:bc:1d:d2:8b:f8:c8:2f:87:
c3:00:a3:7b:58:2a:23:eb:e6:71:74:ac:94:54:d2:15:98:bb:
3b:4e:09:11:00:c3:ef:a7:19:d1:8f:ef:e7:b6:a2:b1:43:0a:
d9:26:d9:76:4a:97:37:9e:e0:f5:cb:51:78:fb:ca:c7:31:9a:
d8:0c:f6:49:19:06:4f:2e:53:b5:a5:38:e2:02:2b:71:7d:be:
1d:e8:c2:1b:c3:2a:4c:b8:ec:cb:5f:d1:02:34:de:fb:db:1e:
f6:27:d2:45:3c:4a:3b:31:2f:16:48:56:ac:06:06:d6:4e:91:
a9:8f:b9:97:f4:cd:af:42:15:e8:5f:9c:a4:36:ab:c9:7e:b8:
26:1c:e6:69:5b:1d:bb:84:d6:43:86:1a:5a:d7:56:35:b4:d6:
86:91:ba:d5:7b:38:8b:17:11:f6:23:34:08:be:f3:84:15:c4:
69:3a:d6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:26 2026 by rpki-client