Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: EIj08yYrH3QNbxOZ3noOt/yzzdQHtSOsVIp2nastxwo=
Subject key identifier: C2:D1:67:3C:AC:6C:0C:D4:C6:28:B6:F5:08:EC:A1:5E:7F:C7:15:3D
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019E202343EDF2940A876E8339AEF45A7373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 128A
Signing time: Wed 13 May 2026 07:00:42 +0000
Manifest this update: Wed 13 May 2026 07:00:42 +0000
Manifest next update: Thu 14 May 2026 07:00:42 +0000
Files and hashes: 1: 03e_nKrMH4A4-r2jcWSKOro4hEs.roa (hash: DxycIoEklj35A1jvEiLRJ53FKAfEe2yJnQzuZq37gCQ=)
2: D4w1402cKEkHHCPC0Qrp-ROm6yo.roa (hash: EMcXFEgTqCUtUEK47llV6gmt5p0zphRz9x+4xZgTdwU=)
3: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: s1ak59xRMDbNqf+d14oR8W6uNlo4aMTK/7Gwf201ZVA=)
4: Um-gNomxfjSn0kkB0eNJZRkJRcg.roa (hash: CFaWLMSGhMHtWCv6dN79ys4llyYw9LrXF5/UbAwm7l8=)
5: VkvT6baU95xG8FSlVbrDxq01-m0.roa (hash: wuSqKSYOAMUCrbWLjcaG0f0YLG5d5+8uKukQepwPM10=)
6: abaPwP2Q_8OSCHTWIlI0CKnEXZM.roa (hash: dryzgauXbdm4FHRf2Q1oRz+2w9ySHDpr4lqY5orU7Z0=)
7: kXOd5jH86JLvfXHemqDhfdfDdlg.roa (hash: Y1aEFrTSyZUJC/4uUI51ki9mieJNB1Uh1UY/fpEVapk=)
8: l0yUF1IRmtUQWgAm0m-qwhJJad8.roa (hash: zejsAU9sJFQnGEhJNTn/fy3BN2ZirT1vXiw3WbJzNvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:43:ed:f2:94:0a:87:6e:83:39:ae:f4:5a:73:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: May 13 07:00:42 2026 GMT
Not After : May 14 07:00:42 2026 GMT
Subject: CN=c2d1673cac6c0cd4c628b6f508eca15e7fc7153d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:a3:39:9c:52:12:8d:5a:bb:eb:cc:e9:e2:
8b:63:ef:e7:15:c8:1d:a6:44:97:3c:aa:b3:52:0b:
db:7b:9a:47:3b:86:ab:bf:15:71:f8:f7:f8:aa:d3:
49:df:1f:74:78:34:20:53:0f:b3:4d:ee:6a:59:5a:
0a:2e:07:91:57:3b:66:40:b3:45:0e:25:ba:82:84:
4a:e1:4b:00:a7:35:4c:b8:fe:26:6a:c4:1b:3a:34:
4d:90:b2:2e:73:dc:a8:c8:d5:37:50:3a:a2:92:8f:
7b:5d:3a:de:bd:aa:d7:50:7d:25:7f:57:d1:5a:f5:
74:af:04:7d:1f:c4:8f:92:02:fd:49:69:0b:33:c9:
af:24:26:60:a3:d8:bb:d9:d4:d6:1a:6c:d5:1d:1a:
68:ba:80:22:ef:33:e0:e9:f8:28:ae:3f:59:fa:63:
b6:b8:bb:46:a2:40:a4:28:86:21:9b:30:f8:e2:cf:
fe:f1:72:7b:35:b8:ce:67:70:ec:3f:f5:8a:f9:a3:
8a:97:b8:2e:e8:d0:12:38:ac:87:04:a8:2e:7b:4c:
c8:04:ac:48:59:3f:8d:b4:2d:c4:0e:6e:1c:da:be:
e1:0b:ad:4c:10:a8:e9:5f:3f:d8:d1:19:07:0b:f6:
1c:18:88:f6:30:b1:a1:9f:90:c8:28:6b:1a:44:bb:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D1:67:3C:AC:6C:0C:D4:C6:28:B6:F5:08:EC:A1:5E:7F:C7:15:3D
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a1:f8:e0:49:dc:47:2e:74:b1:5d:c6:ee:b4:f9:83:a3:d0:
2e:2d:7e:39:de:f5:96:64:84:d5:d7:cf:62:d6:c5:12:22:81:
c2:fa:45:a9:cc:64:cb:c2:d9:68:5f:68:e5:f7:f8:02:52:a4:
3b:24:53:9e:02:23:a5:3b:e6:27:c7:e3:3c:95:12:f4:27:e7:
09:13:ea:3a:62:e1:23:c6:79:7e:99:6b:d5:42:da:cc:cd:bb:
85:a5:bf:78:ac:76:d9:2f:89:2c:8e:b0:80:ef:fd:b2:c0:7f:
25:a7:10:bd:8a:10:99:8b:4b:be:62:25:99:e0:0e:ef:d3:c9:
c7:7d:62:f8:05:4a:cf:9f:69:7e:1c:51:fa:cf:2c:d0:ab:be:
66:9f:a9:81:e0:b8:f9:88:37:e1:4b:e8:f5:7d:73:14:36:7e:
3a:1f:f5:21:77:85:1a:1b:fa:c3:a8:22:71:4b:b6:31:98:7f:
f5:a7:93:c6:f4:a1:67:20:cb:a0:a5:e6:f4:31:32:69:de:23:
3d:76:94:1c:0f:bb:7d:1c:34:fb:74:33:73:66:0d:b7:64:ce:
6c:7e:08:ff:0a:5b:53:7e:a4:a1:97:62:a2:41:f8:7a:3f:93:
ca:3f:fc:28:62:1b:72:d4:dd:db:6a:90:62:9a:92:c0:51:ae:
77:67:44:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:39:11 2026 by rpki-client