Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: CRsJxvlhDg4DGErUIPkCMqy0tPI7NEzUkvYkcceuXP8=
Subject key identifier: 70:9B:BE:CF:67:2F:74:D4:E8:AB:C7:85:6B:46:A4:0D:7B:47:4C:27
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 019F1831042D43DA540B19429D5F80719986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 11:01:33 +0000
Manifest this update: Tue 30 Jun 2026 11:01:33 +0000
Manifest next update: Wed 01 Jul 2026 11:01:33 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: C0CHsN6B3fhdeIAlH9n/oIpHfBuBgVG9/r4yhduEYxI=)
2: x-xatRQzbMJq2QoB7VpakVl_dyQ.roa (hash: FUFQzFRUVGUSKSoKEZzjy+oCv2v1jEvkTjPlxRoTw4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:31:04:2d:43:da:54:0b:19:42:9d:5f:80:71:99:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Jun 30 11:01:33 2026 GMT
Not After : Jul 1 11:01:33 2026 GMT
Subject: CN=709bbecf672f74d4e8abc7856b46a40d7b474c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:31:c2:dc:96:81:e5:68:fb:ca:f6:70:6a:9a:
1c:d1:58:a4:b9:77:e4:5b:99:5e:f4:0d:4f:60:c7:
48:4b:84:d8:1d:f1:89:a7:ee:7c:82:f5:2a:cf:da:
d6:04:c7:ee:13:5c:77:21:81:b1:30:c5:d8:93:c7:
3c:92:45:93:2c:f8:65:66:68:61:84:1e:22:f1:d7:
a0:36:e8:f6:b1:f7:d7:e5:0a:bc:41:7a:66:88:f9:
d0:c9:d6:bc:a2:60:a0:a9:c4:0a:c4:15:45:1c:17:
49:4b:f5:e8:62:72:f0:00:ca:d7:44:4f:ae:7a:0d:
6d:7d:ac:7b:c6:9b:ee:96:00:52:9e:72:ca:ca:af:
aa:ac:54:f1:85:a2:56:94:d7:b2:bf:56:9f:d3:7c:
19:93:7b:73:a3:b3:ae:db:e6:74:07:f1:e3:6c:13:
92:bb:6a:89:e3:10:fb:25:99:70:6a:38:94:59:8b:
d3:c1:50:cd:ee:3f:52:8e:bd:ce:7b:aa:cb:1e:69:
57:df:d3:20:f1:d4:be:a8:5d:e9:a0:db:a7:d5:03:
94:3d:0f:59:fe:07:b5:e3:4f:5d:93:b1:3b:36:20:
4f:cb:c6:06:71:1d:cd:84:ee:b8:26:d7:28:93:86:
a9:df:00:9c:23:14:28:13:b9:31:29:fd:ca:8b:bd:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9B:BE:CF:67:2F:74:D4:E8:AB:C7:85:6B:46:A4:0D:7B:47:4C:27
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9f:e1:61:66:63:42:a3:fa:cd:1a:55:50:bb:72:c0:91:0c:
09:ba:c1:1b:f1:6e:61:93:9e:5e:f1:2c:28:ea:d4:64:ee:1d:
57:e1:dd:23:1d:34:95:b0:e7:3a:4f:a0:1c:39:06:cb:a0:a0:
12:b6:fd:86:aa:3b:e3:75:f8:af:82:19:31:b9:2b:f1:2f:f1:
06:a3:37:da:ba:6b:2c:95:7b:02:37:b1:72:ed:70:86:1a:87:
8d:88:5a:79:95:f7:d9:f8:37:67:5d:cc:45:a3:18:a2:80:cd:
c2:00:f3:40:84:ba:68:9d:ec:87:65:a9:5d:74:13:d6:fe:7f:
a5:6c:cc:b0:0c:ae:3d:56:c2:d3:b3:23:15:3b:7f:08:f4:95:
ad:fd:ba:34:09:72:67:17:ba:0a:58:e0:19:b4:1c:90:fb:f3:
5d:7b:81:65:34:7e:57:03:22:44:69:9f:45:3e:68:7c:50:7d:
f5:e7:ef:54:23:b1:4c:f2:d0:70:79:f1:5d:64:a0:9a:14:cb:
76:ea:39:59:76:7b:d1:12:33:26:31:35:38:33:e5:52:b0:c4:
96:f6:66:0f:56:8e:58:27:8a:29:46:22:15:72:06:a6:a4:79:
ec:4f:00:f4:dd:0b:0b:9a:d0:be:c5:0c:eb:4a:0e:a6:7f:54:
fd:44:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:06 2026 by rpki-client