Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: OgqPyLlOLk2vtK7tAdDbChV65VEIvMOOaaMA/XOGFcg=
Subject key identifier: 9D:94:40:9C:B1:41:72:23:FB:A0:26:C6:39:68:2F:E6:05:54:D7:C9
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 019F130A7492888562978FB5608E4FED5851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 12F2
Signing time: Mon 29 Jun 2026 11:01:20 +0000
Manifest this update: Mon 29 Jun 2026 11:01:20 +0000
Manifest next update: Tue 30 Jun 2026 11:01:20 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: RmoI+wx+PhdLOZs8nErRLVKgRIIEDB3BN2M/04S8Q4c=)
2: TQDW0DxTU7CzvSKr8TtyPhHtPTc.roa (hash: 1+s5vjQlLwZnrQX0hqnsI0i09wdeDnUbTWGOuKMahfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:0a:74:92:88:85:62:97:8f:b5:60:8e:4f:ed:58:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Jun 29 11:01:20 2026 GMT
Not After : Jun 30 11:01:20 2026 GMT
Subject: CN=9d94409cb1417223fba026c639682fe60554d7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:86:ec:c6:ae:49:a1:9d:92:fe:52:63:a7:
64:11:bb:92:d9:2d:fa:c8:01:8d:af:61:38:28:6b:
f3:63:2c:52:18:8a:ae:b4:55:86:4a:0a:76:e0:4f:
9c:1f:bf:0a:c6:f5:f3:77:fd:57:2d:ce:8e:e1:2f:
cf:dc:1f:09:3f:4d:70:20:5f:21:8a:70:c7:16:ed:
05:de:dd:71:24:56:f8:09:e7:af:09:30:eb:4f:9f:
ab:2c:52:60:9d:22:3e:36:87:ae:79:36:c3:c9:d1:
12:31:9c:80:40:47:c0:b4:da:61:9d:4f:c9:14:3c:
f1:2a:0d:8b:f1:4f:ce:d4:0d:7e:50:05:fe:1d:be:
bb:9c:9e:63:d7:68:ef:08:80:ea:de:6f:4c:17:30:
77:be:b5:54:7b:1f:94:e8:75:d5:2d:ed:e6:2f:3e:
a8:43:c9:50:0a:7c:89:ac:d4:c1:38:60:59:b3:e6:
bb:91:89:4e:e4:0b:9a:01:2a:1b:12:6b:90:c0:77:
eb:51:72:f6:b3:31:ed:a6:4c:18:39:26:07:76:6c:
21:a8:92:e6:06:25:b8:29:70:09:c2:d9:02:fc:84:
16:69:7e:71:4f:e0:13:0b:bd:7c:24:a3:55:72:ab:
74:44:d9:ef:89:d7:5b:20:17:fb:37:a8:56:4e:46:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:40:9C:B1:41:72:23:FB:A0:26:C6:39:68:2F:E6:05:54:D7:C9
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5b:83:9a:9b:12:f7:7a:f4:33:7b:7b:18:29:a7:be:50:eb:
21:02:e2:1b:20:13:ca:dc:4f:46:5f:bd:a4:49:7f:a2:17:a2:
9f:72:c7:9b:43:8f:4f:c9:1e:4a:86:fe:c1:f8:5e:45:8e:b9:
f9:2d:9f:43:b1:a0:a1:a8:c7:45:11:cf:c9:61:39:b5:00:7f:
30:60:8f:23:36:80:b7:57:3f:8f:b0:2c:86:66:8e:11:ad:c2:
dd:c6:81:81:5f:76:b9:b0:75:e0:4b:2d:26:de:1a:6d:93:ee:
6d:b5:79:d5:d0:eb:7e:aa:f8:2e:b0:79:3f:bb:13:ff:db:ba:
fc:01:dc:ae:d8:be:58:9c:15:6e:af:7a:24:34:84:41:ac:76:
f5:2f:59:d8:e5:92:30:fa:db:ad:67:ff:01:9b:c9:30:03:3d:
56:22:56:6d:e5:e8:33:fa:5c:b6:35:43:61:08:d1:59:23:56:
bf:5f:1c:e9:f1:5a:4c:da:34:f3:c4:87:d9:26:d6:61:5b:f1:
16:bc:59:dd:25:33:2b:da:69:09:8c:fc:aa:2d:ea:27:e8:30:
d7:5d:50:0b:4b:5c:cf:33:58:76:e4:91:5e:0c:a6:45:33:58:
00:58:84:00:c7:da:8c:a8:67:80:c0:44:e2:e5:0a:bf:b3:dc:
8d:dd:a7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:48:14 2026 by rpki-client