Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: fdTqUCEsiN23coepCMoPXIJs6vIjT4+bu693m2PkS4I=
Subject key identifier: BD:56:3B:53:A2:5A:BB:58:F7:72:6D:CC:89:57:C1:99:76:58:83:63
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 019E1D9004ADA471F9BF921E6594330E1BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 1268
Signing time: Tue 12 May 2026 19:00:37 +0000
Manifest this update: Tue 12 May 2026 19:00:37 +0000
Manifest next update: Wed 13 May 2026 19:00:37 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: RNuhSGepnRmlPycrmfp4T3J7dBu2FTBU+StmA+sWmu8=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:04:ad:a4:71:f9:bf:92:1e:65:94:33:0e:1b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: May 12 19:00:37 2026 GMT
Not After : May 13 19:00:37 2026 GMT
Subject: CN=bd563b53a25abb58f7726dcc8957c19976588363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:75:8d:cc:93:87:2d:a4:6d:de:df:7f:f6:
b7:f1:c8:c4:21:81:d2:5b:72:b4:99:01:77:a0:ee:
be:3f:cc:c0:44:32:99:dc:69:64:06:09:31:bf:2b:
4e:4b:72:8c:f8:d7:41:9b:22:f4:06:55:ef:fd:fa:
5a:11:2d:0c:f7:4a:ad:13:90:f9:45:ec:d0:a5:70:
f6:05:b5:1a:29:80:41:a8:06:d7:54:16:be:8c:6e:
65:2c:10:d8:e6:df:0f:ca:f9:51:36:bb:4b:89:c0:
a3:4f:30:f5:be:b4:30:8e:ec:b6:8b:b7:ac:3c:e9:
4d:66:db:04:4e:b8:41:d8:0b:c2:fe:ea:2f:14:41:
27:a7:d5:6b:17:dc:bb:81:88:ca:eb:22:64:b7:20:
c2:49:01:82:b0:24:41:db:21:51:64:b5:6c:41:d8:
e3:bc:b6:c3:1b:70:f6:d0:74:f6:34:c9:49:51:9b:
1e:a4:56:18:b7:bb:55:e2:1c:a2:dd:44:73:eb:13:
75:b0:c7:8d:18:67:7e:82:62:2c:01:ad:f0:51:a6:
b1:c4:45:9a:42:84:af:49:ca:b2:43:d7:3e:f9:b0:
e7:9a:b1:4f:a5:13:0b:aa:26:cd:fa:0c:77:1c:8e:
ca:89:60:f7:77:24:89:6b:79:44:9a:f6:e3:c5:8c:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:56:3B:53:A2:5A:BB:58:F7:72:6D:CC:89:57:C1:99:76:58:83:63
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5e:fb:8e:6d:66:bf:33:65:f7:c4:10:2e:c9:53:89:6b:62:
7e:97:33:77:7c:e3:7f:b4:8e:0d:33:7c:b6:b1:9d:a6:46:04:
5c:ef:43:29:3e:b4:d7:89:51:96:f6:c7:78:12:37:37:f4:e6:
26:1c:e8:fe:c2:3a:c1:fe:6e:e6:41:53:3d:f4:d2:0f:f0:58:
d1:ea:c6:93:ab:af:5e:06:9b:6b:8e:32:5f:d2:e6:65:54:01:
5c:6e:84:6f:fe:71:3f:f0:54:00:eb:59:1d:1b:03:dd:a7:26:
f8:1b:d7:3b:10:9c:1d:d1:f7:46:06:4d:54:08:86:03:80:db:
9d:cf:e7:91:dc:19:44:84:d6:18:e0:8b:e5:9f:9d:1f:82:0a:
31:76:9a:41:da:7b:e7:cf:eb:9a:aa:ca:06:6b:a9:a7:9f:a1:
d3:56:d0:f3:1f:22:78:7f:b5:f4:9f:20:ad:e0:db:6f:19:e8:
77:1a:a9:0b:7d:18:67:3b:7b:c9:a1:27:61:f8:d2:da:25:b1:
dd:32:c7:a9:42:8d:5f:8e:73:80:35:8c:d7:9e:6a:57:95:8f:
07:27:6c:7d:b8:38:21:35:02:52:e7:89:44:bc:81:38:81:76:
f6:a5:eb:32:f4:85:53:b5:99:42:e5:56:0c:ac:2a:4c:fc:8f:
9d:a2:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:44 2026 by rpki-client