Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: hkiz6OeGQDStdUvwJZmXTYhcWpqnjrwqbcqw9ZQMlOE=
Subject key identifier: 2C:14:AF:90:82:A0:03:CD:71:B0:CA:6A:88:71:08:82:F5:45:C5:BB
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 019E1DFDFE5F0EDEB222985C1BE33BBCC122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 18D5
Signing time: Tue 12 May 2026 21:00:45 +0000
Manifest this update: Tue 12 May 2026 21:00:45 +0000
Manifest next update: Wed 13 May 2026 21:00:45 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: 61pJPpXZZNMB3cAGRLwIf/NGb2jfEfRtF5JhFg0AvTk=)
2: q8Sc-hb4z8RPWefbF866BBRja54.roa (hash: c2mi+bk32KaktYwhBDhcFoed5UYVyYxJQtaR6VL5ZBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:fe:5f:0e:de:b2:22:98:5c:1b:e3:3b:bc:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: May 12 21:00:45 2026 GMT
Not After : May 13 21:00:45 2026 GMT
Subject: CN=2c14af9082a003cd71b0ca6a88710882f545c5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:0f:87:92:1e:4c:23:5b:24:84:72:b4:0d:
3f:9c:54:dc:6c:6c:f7:65:42:10:02:57:63:ba:08:
4e:8f:6d:e6:46:87:ca:e6:3d:07:83:be:1f:d3:66:
a9:39:94:f6:a2:1e:e4:ec:34:e8:bd:81:96:f5:bb:
6a:c0:f7:1d:9d:10:b8:d3:84:b8:39:89:35:31:c1:
5e:02:48:e0:31:bf:00:43:ba:a1:2d:4f:f3:ca:88:
9a:cc:82:d9:fb:ae:e2:77:e1:7f:6a:f3:27:e5:d2:
80:af:cb:76:fc:94:33:d5:c0:38:e5:23:79:f0:0e:
fb:f9:6b:d2:39:e5:1c:ca:1c:c0:fa:2f:26:e7:07:
cb:6d:b4:6b:a6:dd:37:ba:30:c8:ed:e4:50:6c:c0:
fb:e4:28:af:b3:ba:db:c8:7e:03:5c:21:d0:87:bd:
66:b5:1e:08:4a:9d:c0:e7:7f:63:6a:d3:e9:83:eb:
63:70:b0:11:65:5f:a1:33:5e:08:32:67:97:9c:ec:
a4:67:93:19:1c:11:f5:3d:a9:38:11:64:4d:23:2c:
68:71:a7:28:79:20:23:a0:dc:0f:7a:21:d1:c3:28:
8b:ff:72:38:27:5f:c7:1d:02:2e:92:84:91:c9:a1:
5b:be:4f:97:9b:f0:b3:15:d0:a6:aa:af:5e:dc:8c:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:14:AF:90:82:A0:03:CD:71:B0:CA:6A:88:71:08:82:F5:45:C5:BB
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b4:68:44:12:9b:8f:ca:fd:92:2f:aa:7b:5d:3f:64:e8:34:
5a:f4:4e:af:7d:d8:9c:31:d1:ed:70:30:fc:d5:17:b1:00:9c:
63:ac:32:f5:0a:60:8d:8e:13:99:14:eb:d6:8d:5d:46:1c:80:
9e:ae:3d:6b:8e:bc:34:c9:84:f0:7b:7a:6f:a2:c6:b7:e4:91:
fa:24:a3:b7:f4:33:10:da:9f:d5:66:9e:8a:aa:3c:9e:89:08:
84:88:5b:dc:5d:20:9e:94:ef:45:55:1c:c8:01:45:7d:00:7d:
b1:fb:91:c0:2e:4e:be:1b:53:55:2d:17:3f:d3:9b:a9:1d:e9:
ce:b5:aa:27:43:b5:90:94:ba:34:0c:b8:b3:15:2b:10:ca:70:
cc:04:9c:4f:af:a0:1a:a5:e0:7b:26:24:2e:f3:55:c6:41:3f:
fb:ad:08:f1:fc:0f:15:9f:b1:22:12:3b:f5:f5:a3:36:64:b0:
87:0f:e1:c8:8e:fe:2e:af:1c:50:fa:ec:1f:32:4a:39:57:77:
35:15:50:28:0d:01:9c:03:8e:de:a0:21:a9:86:07:bd:3b:bf:
8c:06:50:52:40:8a:06:0a:47:96:62:8d:bd:53:1e:eb:d1:ea:
a7:3f:46:83:16:5b:98:18:49:98:c6:be:23:35:82:80:ad:e2:
a7:bd:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:24 2026 by rpki-client