Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
File: Hsub1e2W5p3aj8Kh_gIUetro9xM.mft (raw, json)
Hash identifier: vLET0dzfydjU63Q1CcNVFKvk6TJEMPYPXWEiFeSRw4Y=
Subject key identifier: 07:63:94:21:AF:53:5C:26:1F:F0:80:5F:C4:71:06:19:2B:6C:0E:AD
Authority key identifier: 1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
Certificate issuer: /CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Certificate serial: 019E1F7E72643AABD958C3D0EDB44DD2020F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
Manifest number: 0784
Signing time: Wed 13 May 2026 04:00:40 +0000
Manifest this update: Wed 13 May 2026 04:00:40 +0000
Manifest next update: Thu 14 May 2026 04:00:40 +0000
Files and hashes: 1: G-LosfPXxnZLjoawTLkLFlJf6Uo.roa (hash: 222el1T6oNBycXKI0rskbTnyDdqNQ8vPbLot/EwZDqs=)
2: Hsub1e2W5p3aj8Kh_gIUetro9xM.crl (hash: vGfHBlHHdfZLsgV08yKDJRnklumAe6eJ5CMkx6wAAGM=)
3: QlBIuHXJV34-HRgZJecpCSsUU10.roa (hash: 4zPQ9GZzH+rReoGUvyDkVlboTCPsAVjyxr06dsvIUCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:72:64:3a:ab:d9:58:c3:d0:ed:b4:4d:d2:02:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ecb9bd5ed96e69dda8fc2a1fe02147adae8f713
Validity
Not Before: May 13 04:00:40 2026 GMT
Not After : May 14 04:00:40 2026 GMT
Subject: CN=07639421af535c261ff0805fc47106192b6c0ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:e4:10:96:6a:63:3c:d7:7d:07:b6:7a:cd:
d1:c1:a2:bb:0d:8a:9c:d3:e7:3d:0d:fa:52:f4:d8:
5a:74:52:d2:cd:d5:75:60:9c:a9:62:5d:1c:85:af:
a2:e8:56:38:fd:e7:88:9a:c6:a0:30:38:47:80:cc:
ea:23:79:89:1e:12:58:4a:55:8b:40:0c:7e:60:aa:
6a:57:85:78:62:a4:9a:f0:4e:5e:d5:ea:23:26:fd:
c5:35:24:b2:30:80:11:e7:d9:1d:b0:33:21:dd:88:
2d:1a:d0:3a:98:05:88:06:4a:e1:bb:1f:d9:29:5a:
c9:27:3c:a3:c3:59:48:46:9c:24:a2:71:ab:aa:2f:
51:b1:e3:66:ee:00:3f:f6:03:3c:21:48:f8:e6:75:
38:60:8c:09:80:64:9f:0a:ca:1a:8c:a3:a7:6f:c9:
fc:77:22:de:8b:7d:04:87:58:e5:15:f5:a7:2a:00:
b7:0a:6d:71:c5:24:29:a3:74:e5:80:16:26:d8:b5:
54:84:83:47:b0:0f:5e:74:0b:06:3b:d7:59:1d:bd:
38:74:d1:15:b6:f7:a7:c1:c5:be:d4:e8:84:15:44:
8f:84:26:46:05:18:83:e2:a2:88:89:91:85:db:8d:
6b:f5:a2:01:f5:71:9a:18:74:09:b5:b7:09:c0:ba:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:63:94:21:AF:53:5C:26:1F:F0:80:5F:C4:71:06:19:2B:6C:0E:AD
X509v3 Authority Key Identifier:
keyid:1E:CB:9B:D5:ED:96:E6:9D:DA:8F:C2:A1:FE:02:14:7A:DA:E8:F7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hsub1e2W5p3aj8Kh_gIUetro9xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c34150-5912-490c-b35b-f54fbf6917bc/1/Hsub1e2W5p3aj8Kh_gIUetro9xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:c2:35:6c:cf:c7:86:9f:5a:59:a3:a0:46:a9:36:16:13:
52:e0:18:09:81:b0:28:82:d9:65:d0:18:6c:85:21:29:61:10:
b8:1d:3a:46:8e:56:89:04:9e:ca:4d:e6:fd:fa:50:a1:35:d6:
45:ad:82:45:90:8b:1a:85:59:57:10:7a:17:4c:00:76:65:6d:
f4:e5:f9:67:15:e6:fe:cf:0c:3f:f7:13:58:d0:57:84:5a:50:
5e:a0:09:6f:68:4b:c6:26:b0:a4:19:c3:12:65:8a:d2:2e:f7:
f6:9e:4a:78:77:76:a0:d5:63:97:da:44:96:56:81:b1:26:bd:
3c:99:b0:4c:3f:78:2d:da:08:1b:91:9a:b1:d0:4c:e9:6d:45:
56:8e:5a:5a:58:90:fc:6e:17:25:bc:f0:fb:bc:8d:84:70:64:
9c:05:09:5e:72:10:5e:ba:65:3e:b9:66:2b:ca:de:33:14:70:
57:e0:89:00:2d:36:da:e5:94:f0:fc:a0:22:bc:cf:d9:cd:f6:
f1:76:fa:3a:a3:a2:c3:2a:37:23:1b:f3:14:d9:1a:e3:50:9e:
4e:6b:3c:2a:cb:b1:c0:bf:c6:25:c9:7c:1e:72:36:5b:34:ed:
1f:f7:f0:64:8c:95:24:02:9a:f9:e9:fd:a4:15:8c:e4:78:b3:
b7:e3:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:18 2026 by rpki-client