
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: TswixB2JLSiiLpPEUiq42VJr6Oby00AUGW+zyoqgwYE=
Subject key identifier: F9:3D:BF:ED:A0:2D:91:4F:B8:3B:9B:7E:09:12:AD:AF:B6:66:7D:F7
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 019E1D598CA5F33952A5CE71960E3683794C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 0429
Signing time: Tue 12 May 2026 18:01:08 +0000
Manifest this update: Tue 12 May 2026 18:01:08 +0000
Manifest next update: Wed 13 May 2026 18:01:08 +0000
Files and hashes: 1: dE8xQiANkczZ0tAFkQGK1c1TYTY.asa (hash: TqFGlNij6y9fV1mllromoWTFgsW2Z9/zlXhLCTPAEBE=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: bScch1zACnqJKU7y7Pjn+jTIHCIMfLJ09VVDutS/aRQ=)
3: lwdA6JuX3-pn18rffEN0nPoUEzg.roa (hash: 934Mdi6isovZuFn2f0j17OwEt11O6pbILLLQ1tR1JWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:8c:a5:f3:39:52:a5:ce:71:96:0e:36:83:79:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: May 12 18:01:08 2026 GMT
Not After : May 13 18:01:08 2026 GMT
Subject: CN=f93dbfeda02d914fb83b9b7e0912adafb6667df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:3f:44:54:aa:b9:e7:5a:12:38:17:ef:cc:
49:90:8a:2a:d4:23:78:ce:45:e3:3a:e1:a4:48:4b:
84:9d:56:7e:be:7a:b6:4a:b3:f5:64:f7:bc:9b:21:
04:e7:c4:1b:d5:28:a2:e3:c2:e8:5d:6c:fc:ce:3c:
c8:07:ed:f7:c4:f5:ff:60:e6:9e:9c:00:13:8a:f2:
fa:25:53:ea:66:31:af:65:39:67:92:b3:91:e4:7c:
a8:af:d8:91:3c:a1:b2:f2:1a:e8:25:1d:54:71:de:
5e:91:0c:1d:b2:65:39:3c:73:fd:e3:8f:da:3a:cc:
ad:28:f9:0d:31:bc:f6:22:e5:9d:83:53:08:8e:42:
44:b3:cf:a8:ec:99:1c:d0:16:ec:18:13:76:0a:d2:
0a:ef:27:e6:19:82:47:38:21:82:42:4c:fe:66:80:
ad:7e:aa:97:b2:e2:a4:f7:d9:57:80:e0:7c:3a:d6:
40:6c:be:98:2e:fb:a2:1a:65:01:88:4b:0a:3b:d3:
89:05:3d:23:20:9a:f8:dd:db:47:1d:99:ad:16:95:
2e:a2:d3:a3:5e:9a:64:13:40:23:c6:59:b7:74:dd:
a1:00:45:a1:b8:ac:a4:85:22:17:1b:ae:75:8a:e8:
c7:45:91:49:79:fa:c3:b4:0d:29:ee:65:66:35:53:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3D:BF:ED:A0:2D:91:4F:B8:3B:9B:7E:09:12:AD:AF:B6:66:7D:F7
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c0:b4:c6:90:5d:25:c9:cf:77:bf:c7:7b:d6:58:9d:68:5b:
6c:f1:48:19:39:d9:f7:72:63:60:15:b0:b0:db:2b:a4:1b:f6:
ca:c5:57:c8:00:20:24:17:ce:eb:bc:a1:6f:d6:9e:9b:b7:0a:
ee:b3:eb:46:45:58:7b:4f:15:13:0b:9c:15:60:8c:05:bd:84:
35:49:4d:e3:75:e7:8f:21:46:16:78:66:d3:6e:67:c7:fb:e2:
e4:82:72:66:84:73:25:ff:e8:fc:49:c2:0c:a8:52:e1:58:e5:
07:cb:b0:68:4c:fb:99:69:2f:4a:ec:ec:86:93:87:ca:1c:2f:
1b:ad:c8:29:5b:b4:b5:d0:92:82:8f:41:36:32:55:99:f8:a9:
b3:2c:1d:0e:da:cc:af:d5:e8:6f:8e:66:c7:e5:86:8f:2e:30:
05:9e:f0:ee:33:19:15:a6:fb:d2:fc:b1:9f:bd:90:a1:88:fb:
60:9b:db:85:d6:e6:84:36:3e:2b:aa:6d:6c:0f:ca:6a:da:cd:
69:c4:ef:3c:3e:eb:fe:51:ba:6b:22:28:a9:02:0c:b4:d8:7f:
25:38:3f:64:d6:1d:9d:6c:70:64:71:e5:b3:a4:57:97:6a:51:
40:2f:b2:ae:1d:ea:bc:3f:45:db:d7:2b:9a:93:52:f7:0d:7a:
e6:ec:13:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:23 2026 by rpki-client