Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: EZ26qqW5dDy9aylO940F/KK8ljne782mIDOM3ZIGC9w=
Subject key identifier: 36:C3:12:0B:6D:2A:6D:A2:40:12:ED:E3:1C:88:02:4F:C7:F7:25:D9
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 019F111C33073910FD7401CCAE78931C72C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 12F1
Signing time: Mon 29 Jun 2026 02:01:28 +0000
Manifest this update: Mon 29 Jun 2026 02:01:28 +0000
Manifest next update: Tue 30 Jun 2026 02:01:28 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: BmqrfNMifzje/JlTEE4HGqaMPhJIVYPZ11oXAreuqkI=)
2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:33:07:39:10:fd:74:01:cc:ae:78:93:1c:72:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Jun 29 02:01:28 2026 GMT
Not After : Jun 30 02:01:28 2026 GMT
Subject: CN=36c3120b6d2a6da24012ede31c88024fc7f725d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:31:8b:9b:6f:0f:52:da:4b:13:a9:49:4e:
dd:03:28:ad:e5:11:98:e9:dd:4f:c7:85:35:55:39:
44:53:92:2e:90:08:e3:96:c6:a8:f1:d8:db:a7:11:
12:26:25:a4:fc:eb:71:1a:50:64:3d:95:de:5d:ac:
08:48:88:39:61:bd:62:45:03:a0:15:e6:3f:ce:fd:
ea:64:05:cc:14:a2:2b:7f:59:1e:62:5d:be:03:55:
b6:9d:2c:eb:93:8e:47:c2:31:81:cd:6b:52:e1:f8:
10:8f:59:65:e3:a9:92:cf:47:f7:7d:b2:e4:68:e6:
cb:57:db:af:51:c1:98:62:0f:7f:2a:1a:a2:44:57:
90:af:d5:13:86:ad:5a:c4:96:73:51:7d:6f:f3:a1:
b1:ba:8c:2c:d1:4f:ff:0a:95:80:d3:11:89:9b:05:
8a:97:f8:79:d6:0b:a9:1f:15:87:d5:e7:45:9c:b5:
11:b8:ca:f0:8d:64:af:3e:71:35:8a:eb:88:04:77:
7d:80:e2:bb:d2:81:09:d6:7b:7b:aa:b4:d8:17:f4:
dc:0e:6d:55:19:e8:73:30:18:b5:5d:55:a8:9a:2c:
dc:4e:23:4d:f6:88:78:a1:59:99:9b:0b:68:6b:14:
38:8b:62:0c:4a:fb:1e:3e:42:03:7c:69:23:40:3c:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:12:0B:6D:2A:6D:A2:40:12:ED:E3:1C:88:02:4F:C7:F7:25:D9
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:46:31:10:b4:39:52:7d:8d:f8:78:4f:cc:5f:a6:ae:7f:48:
e6:47:74:7e:e1:ca:72:35:cc:de:b6:f0:3f:6a:01:8f:ec:02:
02:4f:1f:f4:bf:2c:c7:31:6e:36:a6:a5:4f:c3:37:fc:02:67:
73:a5:f4:9d:09:9a:3b:8e:77:c7:71:3a:ea:c7:6e:f1:16:96:
bc:a5:7c:db:dd:3d:49:44:19:79:f2:7a:57:b7:77:4c:ed:f3:
49:a0:ae:3a:14:14:a9:51:bf:43:73:80:bc:72:e2:45:a5:ee:
8f:56:89:b1:66:00:c3:e8:10:25:82:bd:58:4b:9b:4d:65:dd:
0b:06:71:c6:0f:4e:4e:d4:3d:8a:93:77:76:05:4b:ab:b9:52:
20:32:6e:02:72:ee:a2:e7:7f:d9:6d:ab:fc:e9:1c:1b:7c:2a:
3f:30:70:6d:6a:9b:cc:8f:16:63:8f:53:11:1d:f7:20:9d:01:
af:ec:20:54:57:13:06:ce:a9:ca:a4:34:a4:ff:97:b8:f4:52:
6d:52:2d:e4:00:ab:31:55:21:da:81:b7:08:80:40:82:fa:16:
0f:d8:f2:73:d9:4c:48:48:60:6c:6f:8f:4a:aa:ac:65:5b:0a:
ef:32:99:82:77:7c:b2:4f:b4:9e:87:8b:ee:47:e4:8f:7b:cc:
87:c7:2f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:45:11 2026 by rpki-client