Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: SJkKzYtLbZ93yMR4vpZeasriUbsXCzzmCpG5X/MSTb8=
Subject key identifier: 53:81:6F:2B:EE:37:26:A1:76:0F:16:4F:E2:57:64:F5:81:86:DB:31
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 019E205A3F22DFD1EB854803038FE9F57AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 08:00:45 +0000
Manifest this update: Wed 13 May 2026 08:00:45 +0000
Manifest next update: Thu 14 May 2026 08:00:45 +0000
Files and hashes: 1: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (hash: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: s4aHIyq8hYGsCbbduYfpTiQWceUpzbTOYFe72wznBF0=)
3: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (hash: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:3f:22:df:d1:eb:85:48:03:03:8f:e9:f5:7a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: May 13 08:00:45 2026 GMT
Not After : May 14 08:00:45 2026 GMT
Subject: CN=53816f2bee3726a1760f164fe25764f58186db31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:ad:50:cb:b5:14:a0:7b:95:b8:22:36:d4:
21:19:45:8a:bc:3e:53:83:af:e1:dd:2c:fc:98:12:
08:33:52:c6:0e:e3:84:bc:f7:c4:d7:0a:2a:0b:3f:
8b:e3:f5:84:9f:4a:5c:c2:5f:5d:4c:21:f6:33:7a:
73:c5:50:f4:03:52:ff:16:b6:4d:23:10:47:f2:d9:
82:d5:16:96:0c:4e:fe:e6:86:cd:9f:35:14:28:b1:
f9:ed:0d:6a:e3:be:06:ae:be:92:5f:c3:7c:6b:d6:
87:d4:8d:03:a1:79:8f:4c:d6:dc:70:39:1a:fb:99:
a4:67:b6:db:e7:f2:a0:62:ff:15:28:fc:be:c9:bd:
36:d1:0a:d8:ec:aa:ed:5f:c8:fe:54:9d:34:a2:31:
4b:a5:9e:3f:4f:64:01:a3:0b:7d:bd:c7:38:9b:a3:
11:3d:25:31:5f:db:fa:02:c9:43:e1:e7:d0:26:d3:
f3:db:4e:bb:76:78:37:37:b7:bf:a8:e3:05:3b:bc:
d9:da:b9:bf:c2:c9:c2:02:70:37:a4:a8:54:8f:37:
8a:eb:bf:57:2e:af:3d:24:93:ad:86:eb:b1:0b:f8:
71:0e:97:c5:88:c0:04:00:b2:99:94:9f:aa:68:69:
a1:0a:10:25:97:26:4f:44:76:c3:76:e0:22:5d:5a:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:6F:2B:EE:37:26:A1:76:0F:16:4F:E2:57:64:F5:81:86:DB:31
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fd:b6:4a:d4:66:a5:a7:0d:0d:a5:2a:74:a0:0c:7f:dc:f8:
0d:c0:d1:39:30:8e:0d:f5:3e:b9:4b:c9:b0:34:a7:19:f1:b9:
8e:07:45:08:5e:1e:db:bc:f0:63:aa:3d:e6:01:7e:22:d6:0c:
f6:aa:81:b6:5c:bd:c8:ec:fe:a1:84:c6:d9:bf:c0:cc:7e:85:
f4:bd:12:a9:20:1f:7e:e1:b2:4c:4d:60:da:0c:1e:19:9f:07:
ad:bb:de:42:10:93:9c:b0:cf:15:d0:3a:ba:6e:6f:e2:ba:9a:
6d:9b:0a:84:d6:75:ea:d5:d3:16:f7:36:08:fb:d4:41:74:3d:
87:0e:bf:79:a6:2f:85:e5:04:16:da:0a:9d:c6:4e:c9:cb:34:
35:d0:43:62:f1:a0:9a:1e:62:70:88:3d:f0:e1:01:ae:3c:71:
89:66:bb:64:25:64:a1:0a:3c:1e:1e:54:fc:16:f7:27:52:c7:
2d:bb:7b:60:77:c7:a1:ab:3f:a6:48:6d:63:f8:52:91:d4:b8:
7d:14:9c:8e:b8:47:fd:97:4a:0a:64:0a:b2:f9:78:ee:c2:68:
30:32:d8:7f:86:55:83:44:33:8d:e1:07:ee:f1:49:8f:66:1d:
ba:08:16:0c:7e:05:5d:75:50:42:2d:8c:36:64:37:b2:63:a5:
a6:78:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:17 2026 by rpki-client