Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: yskP7Bz2+M+4EzYbcr4nAqyFlKD41hDgyn0U1Iz8KDQ=
Subject key identifier: E1:9A:31:BB:F8:E6:39:4D:4C:E4:12:75:BE:D2:6D:9A:59:36:4E:CB
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 019E205AD45D976A45291A6BE39B214A008B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 1307
Signing time: Wed 13 May 2026 08:01:23 +0000
Manifest this update: Wed 13 May 2026 08:01:23 +0000
Manifest next update: Thu 14 May 2026 08:01:23 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: ocf948RQledp7+Hj0UhooeIYcL8nXvwOmtJcBrxHPtw=)
2: Mf1194Aopq2OZBBw1XTJN0U0WJk.roa (hash: EerdCJA6wDLqsDQLxIrvcJIQv1/d05AYSbYm/2RHb1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:d4:5d:97:6a:45:29:1a:6b:e3:9b:21:4a:00:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: May 13 08:01:23 2026 GMT
Not After : May 14 08:01:23 2026 GMT
Subject: CN=e19a31bbf8e6394d4ce41275bed26d9a59364ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:02:da:3f:33:52:eb:f1:50:14:42:73:d7:
e7:8a:89:4e:25:30:bc:b2:67:b5:1e:e9:c1:03:3b:
69:1e:37:3a:8d:72:3c:41:04:3d:75:2b:3f:b5:cf:
7d:9a:a2:66:31:4d:56:70:5a:9a:ff:21:48:2f:66:
37:13:d0:10:0e:09:9b:e6:8a:32:4e:9d:7b:05:5a:
5c:84:1a:02:da:00:77:4f:b8:54:a8:68:40:37:ec:
bb:a6:c8:74:4c:ce:df:06:ac:75:09:de:48:a2:95:
09:44:12:e3:a7:e7:70:29:02:69:98:ee:a9:2b:70:
bd:cb:d8:71:76:b3:12:cb:99:6a:c7:ee:96:9b:29:
a3:ff:e3:d5:a0:94:a4:1c:6b:92:f9:04:bd:70:e8:
09:c8:5f:65:a4:cf:56:74:1e:8f:11:a2:66:d0:b7:
56:e7:e6:f4:47:a4:85:b7:2f:27:2f:7b:6f:30:72:
3a:34:db:b8:b3:76:e8:02:56:ad:13:5e:e8:0c:3c:
38:a5:d2:be:65:0f:c8:0c:1f:3b:60:2e:ba:52:2b:
93:8d:91:a2:90:7f:34:10:b9:94:76:ce:3e:90:5d:
4f:6c:32:a1:6d:13:f9:e2:4c:22:ca:98:32:b3:3d:
dd:10:df:c1:c6:07:f4:4d:8c:e3:5f:21:30:a7:47:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9A:31:BB:F8:E6:39:4D:4C:E4:12:75:BE:D2:6D:9A:59:36:4E:CB
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:23:0e:14:b4:e6:46:f2:68:d9:f0:80:bf:13:92:7b:f8:33:
34:aa:f6:9f:49:c7:4a:d2:d9:2c:1b:c7:bc:0e:cd:b0:0d:c2:
f5:da:d5:23:4c:9d:91:da:d9:52:e8:ea:c9:ad:08:2c:3b:5d:
c1:40:a9:75:a5:6c:57:80:e8:95:4c:66:7f:b7:2a:20:3a:e6:
3a:7b:0e:cd:d2:95:a6:93:19:60:af:d1:15:81:5b:bb:06:1e:
74:99:06:24:91:72:72:13:96:28:75:dd:bf:c2:cb:4b:38:2d:
41:81:48:b3:e0:67:d0:1b:bd:09:d6:9d:79:9f:e3:7d:ca:1a:
a4:22:40:56:9d:a1:25:74:7a:62:08:93:e6:05:04:41:da:d6:
d5:4c:aa:db:f1:fe:e7:01:cf:a9:43:0c:ef:71:69:14:06:1a:
9b:ec:94:2f:75:d4:e9:1d:2b:bd:a7:7d:01:0a:f6:b9:9c:18:
f8:a8:f5:69:74:fc:b6:4d:6f:23:37:fc:00:64:04:df:a4:88:
f2:65:6b:92:84:2e:eb:a6:65:0d:f3:07:4f:d9:9c:e2:7f:19:
0b:c7:8c:4e:a6:c7:46:19:4e:93:aa:48:6b:35:14:10:1a:a7:
cb:86:22:20:92:76:fd:85:25:43:0e:61:51:0c:21:e5:7b:7f:
c3:93:1c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:16 2026 by rpki-client