Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: EOQB6jFIWq8BF/whNwUOhRIeRAM4ZXDCjujjK0m2WUk=
Subject key identifier: E0:5F:36:0D:31:17:AD:C9:8F:D1:1B:BA:AD:12:38:27:8C:A6:47:06
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 019E1E355ED18F5DA5B87222F87978915B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 14B3
Signing time: Tue 12 May 2026 22:01:14 +0000
Manifest this update: Tue 12 May 2026 22:01:14 +0000
Manifest next update: Wed 13 May 2026 22:01:14 +0000
Files and hashes: 1: aMxhZsLMDx304AXjnZldJIQi_VU.roa (hash: nX4KFrnvKm65Zf0OrETssJJWMj+/5dAoLpEa4nDLRE4=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: TQ3G0BTDWU/zwnlp96nIrJbXrcYSgs3xwv2NcUu121c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:5e:d1:8f:5d:a5:b8:72:22:f8:79:78:91:5b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: May 12 22:01:14 2026 GMT
Not After : May 13 22:01:14 2026 GMT
Subject: CN=e05f360d3117adc98fd11bbaad1238278ca64706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:5a:94:fc:d8:66:ef:09:8c:cc:86:ae:03:
5f:7d:72:08:08:49:44:e2:dc:b9:f2:58:a5:49:17:
bb:58:27:84:5e:8e:d0:c2:a5:fe:ef:0d:58:01:ec:
16:a1:cc:10:30:01:dd:34:88:43:31:31:08:a5:69:
d4:e2:54:11:be:f5:14:63:07:fa:be:ae:ed:ee:dc:
d3:3e:76:86:2f:13:14:50:26:5e:8f:e6:6c:bf:d4:
c7:3e:57:0d:4a:27:ac:fc:ca:eb:4f:39:44:97:42:
19:59:21:61:5c:b6:e6:cc:e0:6b:fe:86:81:9b:7d:
e4:d5:c7:82:6a:eb:85:2a:91:67:bd:32:42:1d:36:
11:0b:d5:e4:10:28:e1:e0:c3:c2:0a:14:f8:a3:b5:
5b:94:93:cc:f0:de:eb:20:12:04:3d:e0:ff:99:1d:
34:04:fc:85:cf:06:9f:61:67:90:e5:48:20:a3:70:
28:6a:91:8d:94:ce:44:69:52:8e:d2:71:e9:8b:fd:
37:16:9d:90:a5:2b:3b:60:5f:c6:a5:d0:34:3b:0c:
e9:d4:46:27:ff:01:a5:70:c3:04:7b:05:7b:e6:25:
28:f8:d6:96:8e:0d:e9:d8:de:7a:68:b3:2d:bc:ba:
19:23:69:23:9e:3b:d8:c4:ad:dc:e6:50:b7:01:62:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5F:36:0D:31:17:AD:C9:8F:D1:1B:BA:AD:12:38:27:8C:A6:47:06
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d8:25:e5:f0:94:8f:11:a8:2e:7c:32:e7:c9:65:b6:9c:80:
58:97:49:c4:bf:0b:70:c3:c3:b0:18:99:cd:6a:48:40:a5:2e:
84:00:0c:51:0d:a6:eb:1e:46:20:0e:2c:cf:34:72:26:59:6f:
4c:14:9e:0b:69:0d:52:7a:68:43:f7:d8:7a:ca:bf:32:72:05:
fa:b5:1f:03:08:af:1c:27:7a:6b:96:9d:8b:4e:0e:d5:2f:5b:
92:2c:c8:d5:d3:f1:f3:98:63:c9:4a:d1:fd:9e:7a:ad:f4:bd:
fb:cf:4d:53:52:ac:93:7f:ec:3a:3c:9a:0a:46:1b:52:1a:18:
05:90:74:90:e9:47:8e:cb:39:bc:56:ab:15:8a:85:70:81:d4:
8d:6b:0f:b2:37:97:d1:00:82:fc:c9:62:72:cb:9f:f9:8e:c0:
ea:c4:91:d2:4d:b9:38:8d:e8:b6:df:0f:84:33:a8:5f:73:9d:
9b:f1:f2:f9:9e:ac:b6:77:0f:d5:f4:3c:5f:ea:db:5a:4d:63:
10:24:27:73:e9:e3:a2:b3:58:7a:1f:af:aa:02:1e:2d:60:04:
3c:e0:5a:76:a5:ad:7d:12:fa:98:4c:b8:3a:0b:fc:65:47:36:
1f:e7:61:c6:3b:e9:b5:03:16:88:19:96:b4:cc:ba:fa:da:35:
fd:38:30:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:52 2026 by rpki-client